Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: 6Mw+m6PkOPYklIuX0sULf1A6EBvkEobSikG2xIwwih4=
Subject key identifier: 60:95:92:AC:F4:37:79:F2:07:95:AD:91:2D:28:CD:66:98:C6:B8:CA
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 019FAA506B00E449681E4878934D537AB634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0DED
Signing time: Tue 28 Jul 2026 20:00:24 +0000
Manifest this update: Tue 28 Jul 2026 20:00:24 +0000
Manifest next update: Wed 29 Jul 2026 20:00:24 +0000
Files and hashes: 1: 3hgJnNfI5vnswL_sYLdOTjf7N5I.roa (hash: ycnn2788sNjMpLJvxytyorXYGLRDzq//A9PgUTbLZIU=)
2: D6gsyuBvq-v8dHbQhkGm5ZATbvc.roa (hash: +ZoEMWFvRto5Iix5Aq4jw/RuVyb6nTqra5qXLRAnIkA=)
3: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: Q4vSXovfcW9W/qK+vpiZNpJdnNT8ZQ8ZL/tlII9fOD0=)
4: xqsec9z85vJMUxRiD3W9Y4bQe3E.roa (hash: UOrcIqqW2rR89U0mPhlsybqgtqu8jW60WAQNXjjrjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:6b:00:e4:49:68:1e:48:78:93:4d:53:7a:b6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Jul 28 20:00:24 2026 GMT
Not After : Jul 29 20:00:24 2026 GMT
Subject: CN=609592acf43779f20795ad912d28cd6698c6b8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:9f:0c:0d:b7:a1:d0:48:db:b5:d5:dd:d1:
86:a3:8c:08:d5:1c:4e:87:9a:fc:3a:09:e3:78:22:
39:d7:8a:9a:16:b8:e1:46:4b:5e:37:c9:e0:40:d4:
cc:65:b5:3a:ab:69:00:de:fd:d5:c5:6d:a2:51:1d:
05:cb:6b:e7:31:2d:a3:94:55:8a:a5:69:f9:b4:8a:
32:ed:76:65:04:93:41:61:5e:28:59:6a:f0:54:d6:
1b:0d:f2:0a:d7:fd:33:c3:49:5d:05:a0:37:2d:ef:
da:52:1c:8f:25:d0:55:4a:c4:ed:d3:98:92:1c:0e:
b3:12:7d:ca:2e:ed:0d:a4:5a:b3:d5:63:8b:0e:34:
7f:cf:f4:e8:08:0b:a2:16:c4:94:2f:d1:a5:ad:5f:
08:3f:90:c8:e2:76:bb:b2:f4:84:52:27:45:c7:1d:
a7:26:15:44:69:9a:77:27:b0:59:d0:c2:95:86:0d:
e5:e5:8d:d6:80:8e:75:8e:bb:e1:4e:a8:dd:3a:98:
f2:79:ad:c2:b6:7d:85:a2:11:f8:4a:61:40:d4:2c:
0b:ac:3f:fe:99:d8:00:31:f3:5b:c3:82:39:12:5a:
17:b7:0e:cf:4d:56:bc:75:10:69:94:3a:55:92:2c:
4b:81:d8:11:c0:aa:21:c1:9b:87:b2:1c:b9:7c:b0:
f3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:95:92:AC:F4:37:79:F2:07:95:AD:91:2D:28:CD:66:98:C6:B8:CA
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f3:96:ee:38:3c:cb:9f:c1:43:0e:3b:8b:62:12:08:74:94:
f7:2a:6b:8c:91:1d:d7:eb:9f:ef:e2:07:0d:2b:26:5f:b8:84:
bf:44:e9:bb:d3:d7:12:c5:be:23:08:0a:d7:54:b1:77:23:59:
1c:fa:a9:f0:b8:88:89:1c:66:63:32:71:bb:00:04:e6:d8:8c:
a1:c4:bc:5f:20:4c:5b:26:26:07:f4:bb:41:d8:a0:a4:5c:cf:
b9:42:c6:0a:ef:90:80:72:21:e3:06:d2:72:74:eb:38:04:4e:
ae:9e:21:29:7c:76:a7:11:07:41:20:b6:7c:47:9e:40:ee:ed:
f7:5e:ff:ab:d5:90:75:fe:76:f4:81:63:d7:9b:1c:5a:d3:4e:
ee:d3:9e:6b:dc:7c:dd:e0:a5:10:a1:4f:ab:b1:0e:ec:d4:1a:
4a:25:6d:77:72:58:76:0a:f1:8d:46:f9:4c:f6:e5:a0:de:b5:
8d:05:37:75:1a:63:0e:9b:13:cb:8f:38:d8:7f:40:90:bd:86:
57:b3:5f:b3:cb:ab:8e:a0:fd:05:cb:7b:50:cf:0b:2d:af:b1:
56:12:ac:de:c4:e0:4d:4c:41:05:99:e4:f4:19:0a:cf:52:ed:
b7:ab:22:c0:89:5e:46:dc:d9:e3:a7:69:a8:5d:87:04:98:1b:
88:d7:a5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:00:58 2026 by rpki-client