Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: n9Y7l/XJvWMq9X6hheqnPtPCi072bDJtg6tCdpCEsHI=
Subject key identifier: B7:67:E9:A8:73:DF:2F:C7:F3:D7:23:8C:97:A0:56:F5:81:A8:02:32
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 019D992B20ECDF12DD952402FC70B0761FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0CDB
Signing time: Fri 17 Apr 2026 02:00:33 +0000
Manifest this update: Fri 17 Apr 2026 02:00:33 +0000
Manifest next update: Sat 18 Apr 2026 02:00:33 +0000
Files and hashes: 1: 3hgJnNfI5vnswL_sYLdOTjf7N5I.roa (hash: ycnn2788sNjMpLJvxytyorXYGLRDzq//A9PgUTbLZIU=)
2: D6gsyuBvq-v8dHbQhkGm5ZATbvc.roa (hash: +ZoEMWFvRto5Iix5Aq4jw/RuVyb6nTqra5qXLRAnIkA=)
3: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: Eyfjwu34vjKqNP9+cRR5oau5c6Gsh6UoEsBRzhAhfLE=)
4: xqsec9z85vJMUxRiD3W9Y4bQe3E.roa (hash: UOrcIqqW2rR89U0mPhlsybqgtqu8jW60WAQNXjjrjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:20:ec:df:12:dd:95:24:02:fc:70:b0:76:1f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Apr 17 02:00:33 2026 GMT
Not After : Apr 18 02:00:33 2026 GMT
Subject: CN=b767e9a873df2fc7f3d7238c97a056f581a80232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:78:4e:dc:b9:25:00:8c:89:94:99:71:5c:7f:
f4:b9:99:70:6f:8c:ef:12:3f:d4:87:77:9f:46:e9:
b4:93:60:19:36:b7:fa:37:19:b2:ad:e4:d3:19:88:
02:6f:de:00:0d:4c:f0:37:eb:a5:43:12:bc:fb:ae:
20:71:15:8e:de:b5:aa:71:4d:3a:f2:41:c9:5a:5e:
10:55:17:e5:e5:fa:b1:d5:88:96:25:e9:97:5b:81:
18:ec:40:0a:5a:17:1c:1a:6a:03:43:3c:08:61:06:
20:31:be:51:8b:64:19:34:8f:23:7f:38:08:15:0e:
a2:02:f2:62:0b:a5:d6:2c:d9:77:2f:f9:8c:28:e0:
9d:96:8a:31:de:64:39:47:63:c8:25:72:ed:9c:c7:
1d:75:c0:82:a0:da:6f:0c:11:c3:21:76:5c:4b:4a:
f4:d0:19:54:34:26:9b:5c:bb:1a:d1:63:27:28:c7:
00:0b:2f:05:6a:77:ec:21:9a:74:01:79:80:40:d5:
b6:03:b1:a3:b7:c2:57:3e:a3:2a:f1:3e:19:68:f2:
7e:b0:90:3d:ab:61:1a:b2:b1:df:15:37:c6:2f:5f:
ab:b1:66:10:d5:ff:51:b3:34:de:98:c5:52:50:9e:
6e:92:7d:42:3b:65:5a:19:17:51:5b:c6:75:31:96:
1d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:67:E9:A8:73:DF:2F:C7:F3:D7:23:8C:97:A0:56:F5:81:A8:02:32
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f6:62:3a:1c:89:90:61:cb:43:11:76:a9:3a:8a:59:fe:51:
68:21:f6:cd:0c:c5:0d:81:51:3f:4c:e6:69:a1:e8:66:d1:e2:
a3:bc:7b:0d:52:b3:3a:7f:5d:e4:5f:81:a9:27:77:3a:8a:2b:
d4:73:d4:92:b0:10:db:e0:ce:03:a1:2d:d5:e9:d2:6f:8c:06:
4b:96:fc:3e:72:3f:c7:70:0e:6b:5b:ef:78:9a:c1:e7:8b:ad:
01:24:f9:d2:fb:9f:47:c1:93:58:9f:3a:a0:5b:42:9b:42:97:
cc:7b:68:8d:7d:b0:c7:35:aa:36:ac:73:64:92:70:5e:88:cb:
18:8d:d2:21:33:0b:15:ef:9e:aa:0f:8b:3e:25:ea:ce:f0:c8:
87:a2:e4:73:24:6a:c7:3b:b7:91:f1:6e:7e:03:50:2e:69:81:
9b:56:60:6b:8c:71:fe:9b:a3:a2:8b:21:9a:1e:01:67:5b:b6:
6b:b6:f5:8c:c4:af:6d:8f:73:be:e3:15:22:ba:d8:13:c5:2e:
e8:97:1a:e3:f2:6e:c2:00:20:92:0f:7c:07:c9:48:e0:3c:ec:
8e:d9:4e:d3:96:fe:7e:81:d8:cc:e7:7e:62:3e:0c:31:1f:2a:
f6:63:bb:72:ee:d4:3e:b6:d5:90:b9:3b:c2:69:f0:77:8e:2c:
aa:0b:8c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:28 2026 by rpki-client