Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
File: K_CgGXhoxtjDTdFrP0TezF5CNvU.mft (raw, json)
Hash identifier: S3ZUJEE5r89Q4UL8Z+GN/uywWRrZLh70G1eG4P0QMmU=
Subject key identifier: 0C:BF:1F:A9:D3:0A:3C:68:D4:73:49:1E:FB:EE:79:A8:35:B3:5F:D7
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial: 01A0C66B25353A39BD9EC613673276B2D042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
Manifest number: 121F
Signing time: Tue 22 Sep 2026 00:01:45 +0000
Manifest this update: Tue 22 Sep 2026 00:01:45 +0000
Manifest next update: Wed 23 Sep 2026 00:01:45 +0000
Files and hashes: 1: 5MvGTIWvypnynatSCOFj8eEvQKU.roa (hash: zlpMkBrcV9PcuGvhpfeVQrRYScHNx6B9kKbHDGTMD3Y=)
2: K_CgGXhoxtjDTdFrP0TezF5CNvU.crl (hash: hhsIzgApbx252yums897FXS9LCAqUSVwKx30AySdD0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6b:25:35:3a:39:bd:9e:c6:13:67:32:76:b2:d0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Validity
Not Before: Sep 22 00:01:45 2026 GMT
Not After : Sep 23 00:01:45 2026 GMT
Subject: CN=0cbf1fa9d30a3c68d473491efbee79a835b35fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:1a:a2:9d:14:f5:71:ee:9b:47:ef:0f:30:
e5:0b:90:0a:5a:cf:b8:b5:cc:85:63:8d:82:f0:c1:
ce:82:5e:66:d2:b4:97:4d:6b:8d:85:a5:d6:0b:fd:
78:74:12:d0:55:f4:fe:5a:54:fc:d0:0c:83:65:b3:
6f:2b:19:6b:73:b0:45:67:a2:3e:c5:8e:15:5a:b2:
b9:06:b8:88:a9:4e:04:5c:a9:7b:30:50:60:5f:89:
09:66:0c:dd:3c:13:c9:63:5a:8b:1c:c9:79:7e:ce:
9f:57:d9:f8:05:c2:c1:e4:68:ce:26:60:4c:61:b1:
3a:68:95:a1:d2:5f:41:8b:e4:fc:b5:5d:96:ac:c2:
a7:ec:ae:9a:f0:c9:1c:a4:59:a6:72:3b:3f:b5:95:
d3:46:6b:6e:40:01:2a:9e:43:19:85:e5:bf:b5:12:
01:96:43:b2:fa:5b:e5:ff:8c:29:92:96:12:0a:05:
e7:31:72:82:d5:57:8b:36:4f:dd:9c:03:6c:09:83:
b3:8b:7e:67:de:d3:52:51:a5:87:30:6c:47:35:77:
ad:88:ce:5c:db:1c:1b:2f:6e:74:09:51:57:74:3c:
05:7e:63:d4:13:e9:55:1a:a5:6b:a9:34:91:60:c4:
e8:86:dd:76:10:91:e8:da:15:05:86:56:ac:9f:e5:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BF:1F:A9:D3:0A:3C:68:D4:73:49:1E:FB:EE:79:A8:35:B3:5F:D7
X509v3 Authority Key Identifier:
keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:78:0d:b0:9a:2c:5e:f8:3a:22:25:93:c5:12:09:87:99:9e:
66:8f:ca:4a:c2:a4:60:57:56:90:b1:69:86:9c:27:58:e6:73:
e6:af:15:82:93:29:51:af:fb:bc:55:de:b3:5b:c7:5d:2d:2b:
37:95:8a:5c:b5:2a:36:79:1b:0d:b7:96:98:a9:83:c1:ba:a3:
4f:ad:1c:3a:e7:e0:62:2b:04:60:54:29:d3:38:92:f0:6e:d4:
79:1c:ea:5a:54:ba:ef:8b:d1:77:b4:1a:01:58:ce:7e:5f:b6:
da:46:4a:c3:78:c2:cc:ba:23:1b:57:16:5b:c3:67:18:ab:b4:
c1:a2:9e:66:85:0d:ca:e4:f7:1c:ab:03:1f:6d:32:6d:cb:6f:
34:59:5d:7e:f8:f9:27:fc:ac:fe:e0:1c:30:20:ca:a8:ca:e7:
95:6d:72:9e:bf:ee:1b:84:77:84:b5:3f:5e:51:99:d1:a8:41:
25:16:bf:22:58:7b:e3:ab:5a:ec:3d:96:a0:d8:25:ac:76:4b:
68:2e:db:2b:91:97:39:d6:81:75:09:d5:d2:ef:a8:d1:78:10:
41:7c:91:48:05:31:cc:b3:c5:85:38:6b:e0:ea:49:dc:09:d6:
df:3d:a6:a7:34:a8:be:a7:3a:50:2c:3b:a6:4d:32:65:a4:9e:
8f:5d:cf:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:32:32 2026 by rpki-client