Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
File: K_CgGXhoxtjDTdFrP0TezF5CNvU.mft (raw, json)
Hash identifier: Zz515rz0Mh4/hu6pcXKHEEfyWbXRrVEvIqYGSrllrAg=
Subject key identifier: F3:47:48:D3:CA:18:DB:56:07:91:B0:39:8A:8C:61:8A:4D:63:92:1F
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial: 019FAA8824EA10BD0BC777688FB1DBC6BE74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
Manifest number: 118C
Signing time: Tue 28 Jul 2026 21:01:16 +0000
Manifest this update: Tue 28 Jul 2026 21:01:16 +0000
Manifest next update: Wed 29 Jul 2026 21:01:16 +0000
Files and hashes: 1: 5MvGTIWvypnynatSCOFj8eEvQKU.roa (hash: zlpMkBrcV9PcuGvhpfeVQrRYScHNx6B9kKbHDGTMD3Y=)
2: K_CgGXhoxtjDTdFrP0TezF5CNvU.crl (hash: kd+EgIpaGVwEH9gMb0rlhsiCEdkofIpyUL1CKaQlsbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:24:ea:10:bd:0b:c7:77:68:8f:b1:db:c6:be:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Validity
Not Before: Jul 28 21:01:16 2026 GMT
Not After : Jul 29 21:01:16 2026 GMT
Subject: CN=f34748d3ca18db560791b0398a8c618a4d63921f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b9:9b:27:d0:90:71:7f:e2:7c:c4:3a:9f:51:
4a:c9:ee:f1:22:74:cf:7b:d5:3b:5f:bc:44:52:f7:
e4:de:fd:5b:78:45:f6:8a:5d:7b:8c:4e:67:61:41:
38:7c:c5:80:58:fb:34:a7:d3:46:41:56:16:e6:0e:
72:85:57:b4:05:39:14:8b:59:5f:6a:54:bf:5e:f7:
39:86:87:b4:b0:33:5b:1c:e7:eb:8c:ac:b1:d8:bb:
cb:9b:0c:c2:36:ad:94:94:04:7c:df:99:9b:e6:47:
b7:c7:23:7a:08:84:58:87:5a:29:25:df:4e:5a:5f:
2b:97:6f:0d:6a:a1:6e:31:50:3b:a7:f7:48:ab:c7:
b3:1f:25:d4:af:d6:66:8f:26:75:9e:d3:4e:f3:7f:
00:4e:de:a2:f9:32:1c:d0:e0:7a:5e:d6:f4:33:c2:
09:a9:22:78:9c:15:9a:c9:72:78:47:41:e3:2a:44:
16:60:22:b6:74:c9:37:3b:4d:47:bf:3e:c6:f0:ca:
0d:a7:60:0e:48:11:ef:2f:15:36:2f:f1:f7:bb:57:
9c:24:83:97:6d:07:7b:1e:f3:c6:86:00:32:12:75:
ca:94:76:0d:d1:de:c8:52:ef:96:ec:36:e6:e8:97:
2a:f9:c5:a7:17:c5:f4:d7:6c:00:5f:05:f3:7f:16:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:47:48:D3:CA:18:DB:56:07:91:B0:39:8A:8C:61:8A:4D:63:92:1F
X509v3 Authority Key Identifier:
keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f1:4f:17:04:69:1a:69:7b:f9:dc:02:c1:bb:3b:9f:29:ba:
cd:7b:be:ad:75:64:72:1a:74:f1:7c:c2:83:fb:92:23:56:2e:
a7:f4:47:30:77:78:53:fe:da:01:9e:f8:8d:24:b1:e1:5a:d2:
35:22:77:f7:54:f5:b2:aa:f2:60:e5:62:b2:1f:83:f3:d8:cc:
04:c8:ac:e7:c8:7f:c9:a9:cc:e8:5d:44:b6:dc:c5:45:96:15:
30:3c:e2:fb:40:c0:19:38:ae:b0:0e:16:27:4d:aa:48:99:26:
df:d7:c2:03:5f:04:03:a5:42:85:23:af:62:25:80:b2:93:eb:
e0:07:67:4b:67:bb:b0:0e:c7:60:a0:ae:3f:e8:80:c7:be:8f:
b9:61:a7:cc:08:0d:15:03:f6:1b:0c:2f:52:d0:d8:da:43:95:
fe:bf:1a:ad:5f:67:b9:c2:03:a1:b2:e5:b9:84:ed:1e:f1:9d:
37:b7:58:ee:a7:82:fd:32:a1:9a:55:03:2d:b4:cd:b2:1e:82:
74:31:05:6b:58:54:6d:c5:36:a1:de:d1:9c:5c:13:b1:02:e6:
ea:64:55:af:97:bb:a9:5d:a6:a8:fb:3b:d9:47:9d:59:24:8c:
10:5c:96:45:30:f6:f0:66:28:b4:7f:59:f2:a3:af:64:f9:fc:
98:ae:4c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:33 2026 by rpki-client