Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: UVNfkmTI9h6uD+OeClBg8A9sONUvpnMsisfRelS4rdE=
Subject key identifier: 01:95:15:9A:EF:61:89:0C:0B:AA:49:A0:5D:BA:6E:F2:FB:63:66:D1
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 019EC0A43BCFFE2579EC1DF88021581BE323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0D74
Signing time: Sat 13 Jun 2026 11:00:49 +0000
Manifest this update: Sat 13 Jun 2026 11:00:49 +0000
Manifest next update: Sun 14 Jun 2026 11:00:49 +0000
Files and hashes: 1: 3hgJnNfI5vnswL_sYLdOTjf7N5I.roa (hash: ycnn2788sNjMpLJvxytyorXYGLRDzq//A9PgUTbLZIU=)
2: D6gsyuBvq-v8dHbQhkGm5ZATbvc.roa (hash: +ZoEMWFvRto5Iix5Aq4jw/RuVyb6nTqra5qXLRAnIkA=)
3: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: YZ24rgjos1Ek/0odeMTRcL1EHX+gnzOGsuRLMCS+990=)
4: xqsec9z85vJMUxRiD3W9Y4bQe3E.roa (hash: UOrcIqqW2rR89U0mPhlsybqgtqu8jW60WAQNXjjrjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:3b:cf:fe:25:79:ec:1d:f8:80:21:58:1b:e3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Jun 13 11:00:49 2026 GMT
Not After : Jun 14 11:00:49 2026 GMT
Subject: CN=0195159aef61890c0baa49a05dba6ef2fb6366d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:01:24:5a:23:04:12:3a:2d:77:25:c4:9b:
c2:a6:e7:9f:31:5c:8f:11:b8:a1:4a:d8:d5:6b:a0:
03:e6:a6:6d:7c:3c:bb:1b:42:f1:28:89:06:b9:f3:
93:2f:71:61:98:ef:bb:bf:a6:7d:f9:87:41:9f:a8:
fe:ad:dd:77:76:74:44:ce:e2:e3:9e:07:74:ef:26:
27:8d:3d:f3:e3:15:24:64:48:ef:16:d9:60:ba:c9:
dd:dc:97:05:f6:25:e1:36:e1:ec:5b:ac:f4:a5:73:
d7:98:e3:91:a9:5c:cd:76:ff:27:52:7f:b6:a8:39:
eb:b5:8c:8b:83:b5:af:6a:51:d8:31:0c:4a:ec:d4:
4c:4d:02:fd:27:67:5d:02:1e:65:f0:ea:a2:54:24:
67:6c:3e:de:80:01:c8:6f:b7:a6:93:a6:9a:27:e9:
64:ab:61:cc:35:48:51:41:4e:b8:1f:2b:62:71:e3:
f3:25:1f:68:d6:98:62:59:de:8f:aa:5d:b0:56:fb:
0b:9f:2a:15:83:58:68:ea:ce:4a:dc:77:ee:8d:e0:
e7:0b:1b:a4:d7:e0:c8:fe:22:93:0b:2d:c5:10:42:
ce:48:f3:83:39:e8:9f:77:4a:3a:8b:7b:18:04:a6:
65:cc:57:db:73:6c:62:22:6a:50:a4:23:43:d9:79:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:95:15:9A:EF:61:89:0C:0B:AA:49:A0:5D:BA:6E:F2:FB:63:66:D1
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e0:3a:02:b1:d9:9a:96:54:18:7a:0e:25:28:6a:b7:0d:b7:
7d:8d:86:d7:97:2e:60:88:d6:d4:91:c9:32:e7:b8:d3:31:37:
3c:b6:d5:87:fa:b3:e6:b7:d7:7b:52:52:69:2d:9b:e1:b7:1d:
dd:e4:eb:bb:f5:15:01:12:2f:75:7d:73:91:f5:99:bc:5b:23:
fb:08:ea:81:ff:3d:61:04:91:98:90:c2:32:4d:2c:c7:57:34:
b1:30:5d:17:b6:e4:83:4e:c3:92:76:45:a2:65:b1:2d:6b:9f:
b7:99:01:1b:67:98:45:88:af:de:51:d7:db:58:8d:20:9f:7c:
f1:06:69:cd:e6:e3:81:6d:e1:be:29:71:60:0c:91:ff:f7:77:
2a:90:0f:9c:45:76:bb:1e:89:b7:ff:c7:c1:47:8c:22:ca:8a:
97:96:c9:ff:df:d2:b1:1f:66:95:ab:c7:43:c5:dd:da:12:c9:
64:0e:14:45:76:a8:c7:2c:36:8c:0b:c8:af:a7:03:8a:41:59:
db:46:ba:33:04:31:c9:b8:f3:5b:ea:d4:df:a0:dc:a7:3c:ac:
ba:c0:8c:f8:a8:11:01:33:b8:25:8b:48:5f:19:44:4d:6d:ca:
42:a2:cd:d4:89:14:3c:0f:52:e3:ff:13:c7:70:05:b2:f5:42:
71:52:05:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:32:53 2026 by rpki-client