Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: /Ht4OSysrECh1oQV0HHavH1DczccpeFSzZpR4pL/euU=
Subject key identifier: 35:DD:A8:CF:EF:36:19:DB:7A:BB:37:60:E9:CD:91:7B:46:62:B0:DA
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 019CAA8FF5A696AAD6BE948EFC1C030D7A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0C5E
Signing time: Sun 01 Mar 2026 18:01:27 +0000
Manifest this update: Sun 01 Mar 2026 18:01:27 +0000
Manifest next update: Mon 02 Mar 2026 18:01:27 +0000
Files and hashes: 1: 3hgJnNfI5vnswL_sYLdOTjf7N5I.roa (hash: ycnn2788sNjMpLJvxytyorXYGLRDzq//A9PgUTbLZIU=)
2: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: q6eNv3+JLvcuZ9KVwpV05sGg3I2EuLygYiivP0U7Jes=)
3: cFEY_9_6ABTQBs7EueSTsHuMew8.roa (hash: pHjdA6zjN1D5SfgMzELBq+u9fC8i77r9JSlam6eddx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:f5:a6:96:aa:d6:be:94:8e:fc:1c:03:0d:7a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Mar 1 18:01:27 2026 GMT
Not After : Mar 2 18:01:27 2026 GMT
Subject: CN=35dda8cfef3619db7abb3760e9cd917b4662b0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:62:9a:e1:fe:c0:fe:b3:9d:35:42:b8:9a:
d0:95:d4:95:7f:4e:d5:b9:8b:a9:d5:79:5a:82:24:
73:9b:f7:81:be:78:56:7e:1e:54:c5:d4:cb:89:6e:
23:b4:c1:dc:fd:8d:19:f5:95:b2:c8:36:48:0a:68:
0e:51:9b:a8:e0:24:f1:8a:b3:b4:6d:de:8a:7b:1b:
93:dc:7e:a8:42:50:d8:0b:68:0b:06:6a:5e:b3:3e:
58:8d:eb:8e:d0:a2:b7:a6:d6:1a:c2:ee:d8:a5:95:
95:52:8f:3c:1c:52:d9:ce:f6:dd:07:5e:55:f7:21:
bc:46:37:b0:df:cb:0d:4a:6a:cd:3f:5f:60:fb:97:
62:df:42:5c:18:06:8b:72:31:fa:13:62:82:57:98:
81:0a:2b:a9:65:93:db:bc:6f:94:ba:d0:c2:ef:85:
ed:a7:94:68:01:87:41:71:79:c5:16:13:43:17:66:
8d:5a:30:ed:50:b5:a0:45:61:0f:d7:1d:90:0d:da:
6a:53:3d:3e:10:9a:0f:24:a4:17:3b:40:28:34:c0:
26:6e:d0:be:a8:71:09:4c:10:28:e6:c2:e9:75:81:
61:d7:ec:b0:d5:e9:40:74:a8:2d:30:69:ec:cc:ee:
47:0d:bc:58:59:32:9a:94:11:67:ce:35:7a:24:96:
c4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DD:A8:CF:EF:36:19:DB:7A:BB:37:60:E9:CD:91:7B:46:62:B0:DA
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9a:28:c5:3b:6d:d3:ad:e4:3c:f5:65:32:57:6a:9f:44:bc:
da:99:66:93:f0:8a:19:22:2b:73:1b:18:f9:66:0d:e2:e2:d3:
3e:72:67:3f:8e:ad:44:21:eb:ec:84:52:60:2a:aa:d9:d1:03:
bd:1f:01:35:3d:06:61:8f:d1:93:14:f3:8e:00:1b:59:a1:80:
6f:98:f3:24:53:44:c3:dc:69:2b:c1:fd:49:f6:90:cf:0a:93:
cc:1a:3e:7d:d2:02:0e:ad:15:c9:36:9b:07:0f:ee:09:b8:43:
5c:a2:cb:62:55:53:54:93:ce:6f:b0:52:c0:d9:0f:3e:7d:b0:
ac:ed:0d:c5:e7:0c:09:c8:3a:ec:e3:27:b1:f5:df:c7:23:fd:
6b:ac:d1:54:15:55:78:b9:6a:c0:c2:bf:b3:cc:2a:f0:c2:45:
16:fd:81:e9:e1:26:7e:e6:9f:cc:b3:18:48:eb:e3:dd:b2:f6:
f3:6d:35:ac:4b:69:9a:bf:12:4d:69:65:47:cf:14:c9:6e:02:
c5:ca:27:27:7d:56:ea:93:03:47:4f:9a:fb:4d:75:70:d5:36:
62:aa:68:12:cf:b2:a6:0d:c1:be:7c:c2:10:61:dc:bc:a7:f3:
10:a4:1b:69:d6:36:d3:85:74:fc:68:4d:3b:7b:85:0d:62:76:
23:0f:59:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:52 2026 by rpki-client