Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: k+Lw4/VBvkEdC7MlfFFC4+9gyLPbqx3WhMKB93C7cVs=
Subject key identifier: 77:14:73:08:C4:3C:DB:DB:72:CB:5C:ED:9B:E8:5C:80:BE:EB:7D:5E
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 019CAC7DC7790F627B2AC4BBBCFE2670D2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0C5F
Signing time: Mon 02 Mar 2026 03:00:49 +0000
Manifest this update: Mon 02 Mar 2026 03:00:49 +0000
Manifest next update: Tue 03 Mar 2026 03:00:49 +0000
Files and hashes: 1: 3hgJnNfI5vnswL_sYLdOTjf7N5I.roa (hash: ycnn2788sNjMpLJvxytyorXYGLRDzq//A9PgUTbLZIU=)
2: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: RnOIfHDQ1uYMhpZYhOC+Yi69kMcgyFXEjgxdzqRZKMg=)
3: cFEY_9_6ABTQBs7EueSTsHuMew8.roa (hash: pHjdA6zjN1D5SfgMzELBq+u9fC8i77r9JSlam6eddx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c7:79:0f:62:7b:2a:c4:bb:bc:fe:26:70:d2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Mar 2 03:00:49 2026 GMT
Not After : Mar 3 03:00:49 2026 GMT
Subject: CN=77147308c43cdbdb72cb5ced9be85c80beeb7d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:18:d7:6f:dd:d3:bd:97:72:cc:ff:45:ff:
0f:b6:e8:86:18:19:4d:a3:39:a3:9b:6a:f7:be:ea:
8e:4b:4d:a7:05:5d:30:3b:66:89:f8:fd:10:8c:df:
83:8e:5a:f7:3e:9f:54:26:32:9e:17:8f:0b:6b:a6:
a8:33:6d:d4:71:78:a1:1f:f0:7d:f8:5a:6e:1e:a4:
4d:e7:d2:b0:e0:bd:1f:47:6a:f9:59:60:b2:fc:e1:
33:56:bd:44:ee:1a:86:64:dd:c0:3e:f0:6d:bb:b3:
52:39:17:e9:6c:b2:6c:03:2c:e1:54:0f:98:97:62:
a0:2d:29:03:a3:ca:fa:0e:bb:ea:0b:1d:fc:0b:9b:
00:27:34:12:cf:71:85:f1:90:23:6b:1f:e6:e5:ce:
9c:38:03:a3:d4:76:8f:eb:a2:10:21:bc:f7:9d:c5:
a1:9b:8a:5d:3b:eb:9e:64:e2:ad:0e:79:b1:db:69:
79:4b:2a:54:e5:d6:4f:a9:5a:44:20:95:95:33:63:
c2:17:c2:79:8c:3e:40:aa:2e:96:06:0c:36:5f:b2:
ef:1d:8f:33:10:24:af:e0:cc:8e:48:5b:bb:c9:cd:
48:e8:d3:5e:44:db:a2:2d:24:50:61:54:f3:d5:8f:
de:52:40:dc:28:08:40:26:40:dc:2c:0f:46:c8:96:
fc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:14:73:08:C4:3C:DB:DB:72:CB:5C:ED:9B:E8:5C:80:BE:EB:7D:5E
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bf:97:fd:f5:f6:f3:2f:22:28:ca:64:45:1f:d6:83:68:61:
4b:e6:91:6e:fe:5d:3b:c9:04:7a:2a:ba:37:39:0c:cc:b3:30:
88:6b:68:65:2b:b5:77:aa:9d:3b:94:50:38:20:a5:30:cd:54:
af:f3:00:7f:be:83:5a:97:9c:2c:4e:e8:d9:b0:5c:82:b0:b0:
a2:7d:f2:1d:9d:b8:aa:1d:2e:94:8d:67:e8:0c:c3:33:7a:dd:
ba:eb:5e:f9:5f:b6:ad:40:e5:6f:9a:d2:6a:d3:b7:9b:7d:cd:
b9:0f:a4:e3:6c:37:35:3a:8f:cc:c9:e5:b3:a7:4c:1d:dc:f4:
48:76:05:af:e8:11:7c:d7:cf:c0:98:f3:ff:bf:54:ec:7b:cb:
cf:49:9f:26:74:c8:3a:69:67:0c:3e:6b:74:7c:de:c8:a4:f2:
fa:61:70:ae:c0:4b:66:b9:86:c7:c4:e0:f6:74:29:2b:0f:2b:
a6:cd:73:75:60:6f:4c:9f:53:2e:7c:d4:b2:58:2c:59:83:32:
ce:d2:cf:c4:ed:b1:99:17:53:90:35:96:6d:64:52:12:56:9b:
c8:21:10:56:2d:20:7d:19:4c:e7:d8:f9:3f:63:84:48:b5:9d:
b7:c7:d8:0d:77:97:b6:4a:5b:d0:17:b0:fb:ed:8b:3f:db:62:
34:a5:bf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:02 2026 by rpki-client