Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
File: K1iORmAJUgViBhvvZbf0gpgomGU.mft (raw, json)
Hash identifier: cQoH/VGDB45q7+5/W+KgToLGdtKSqfmDjxOb2coWuic=
Subject key identifier: 29:68:1B:11:D2:2F:2F:D4:05:91:17:29:91:FA:D3:FE:C6:1E:09:8A
Authority key identifier: 2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
Certificate issuer: /CN=2b588e466009520562061bef65b7f48298289865
Certificate serial: 019FA93E517A3004CFFA7B65A578DC487BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
Manifest number: 01FB
Signing time: Tue 28 Jul 2026 15:01:01 +0000
Manifest this update: Tue 28 Jul 2026 15:01:01 +0000
Manifest next update: Wed 29 Jul 2026 15:01:01 +0000
Files and hashes: 1: BTaxjaAuAYx2Mtyrjvy8RsSBVlA.asa (hash: lfaIjF7uiHYdFf+hzTjn5HPdY1nfdVq2QswXgCrjp4s=)
2: K1iORmAJUgViBhvvZbf0gpgomGU.crl (hash: 2pU+vfspcU8kVfHDuSlpwxZhXRBSWfYXMAyX7Gf0/J4=)
3: z2WbFotJlc5p1cMGvSPUFFihXt0.roa (hash: dUVgzJ6l/KKfEgalE16Upz4cVUb7zxRYQ46guX2wkl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:51:7a:30:04:cf:fa:7b:65:a5:78:dc:48:7b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b588e466009520562061bef65b7f48298289865
Validity
Not Before: Jul 28 15:01:01 2026 GMT
Not After : Jul 29 15:01:01 2026 GMT
Subject: CN=29681b11d22f2fd40591172991fad3fec61e098a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:63:b2:c2:99:d3:9a:35:6f:82:c8:01:7e:
70:eb:65:36:9f:78:0f:4b:90:e9:4f:f3:89:81:32:
d2:59:61:3a:fe:38:62:2e:18:9a:5c:db:d4:08:ba:
98:9b:3e:91:0d:3f:a4:9f:04:a0:d3:cf:8c:35:60:
6b:c9:47:20:e6:b3:f5:56:65:74:92:80:f3:ab:d2:
4e:94:93:fe:30:8a:35:ef:7b:d8:4d:3e:24:35:e8:
fe:a0:26:e6:44:7a:fd:49:d7:5d:ec:aa:d9:f9:14:
8f:8e:a3:23:bb:ea:98:86:95:4c:de:d7:b9:2b:45:
28:c0:ba:74:fd:8c:39:58:8f:9a:be:05:06:24:3f:
39:b5:5f:2e:62:78:e7:e2:25:ae:da:7c:fe:dd:89:
a0:ee:01:0a:d8:a3:f5:3b:30:7b:e5:37:c4:6e:b5:
f3:de:d5:fb:2d:2e:a4:bf:c5:9b:70:fe:e9:6b:ac:
87:e0:9b:32:72:88:11:12:76:28:6a:b3:82:c1:6c:
09:e9:d8:bf:86:b4:d3:fa:12:69:fb:a0:24:49:2d:
67:7e:09:45:ca:d5:46:e9:04:2b:70:15:23:40:76:
a6:ab:4c:ac:62:11:95:48:bc:55:86:7a:59:0a:5e:
7f:44:8f:d0:67:e6:4d:18:af:e6:e5:db:9a:9e:be:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:68:1B:11:D2:2F:2F:D4:05:91:17:29:91:FA:D3:FE:C6:1E:09:8A
X509v3 Authority Key Identifier:
keyid:2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:25:50:ad:42:23:89:46:ae:88:f6:c3:c5:fb:61:2e:e1:93:
53:a0:48:23:54:87:9e:c4:d0:27:79:68:ba:e5:c0:48:f5:dd:
17:6c:fa:2a:18:9c:4d:4e:78:04:4d:2c:c6:9a:ed:66:d0:4d:
b7:f0:cf:fb:f8:a3:f5:aa:42:8c:19:b5:35:9d:4c:5c:b2:21:
f5:4f:0f:91:ee:78:5b:43:0c:b0:f4:3a:84:aa:8d:47:e3:43:
c9:a8:8c:87:69:9d:5c:09:c4:61:90:f1:04:fe:f7:60:a4:35:
40:59:8d:22:3d:11:6b:ee:3e:74:12:9e:af:c7:24:45:0d:cf:
86:f2:e1:02:4a:49:50:d7:2b:67:e5:90:37:28:83:49:92:d6:
12:3a:a9:33:4e:b1:a0:5c:1f:aa:af:8d:26:e4:8a:05:ab:97:
dd:23:55:d8:2e:53:40:65:e4:72:2c:33:a9:c7:fe:63:24:21:
37:0d:e8:fc:f8:f4:8b:32:1c:e5:0a:5e:23:dc:d2:69:4e:96:
7f:29:b9:9b:77:49:00:11:aa:58:4a:ce:66:88:73:17:15:9f:
b9:dc:32:26:8f:73:c3:f5:13:fd:b1:5c:d4:06:ea:c9:94:97:
88:d9:49:05:ef:0f:91:4b:80:e7:3a:d2:30:7c:0a:17:b8:a8:
93:4d:e0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:17:33 2026 by rpki-client