Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: Rx6hJGGircWT6S1YzrFLO8ODSTSs5cYHHOOI/QwgRfU=
Subject key identifier: 63:4A:E4:19:82:E6:27:B9:D2:9B:95:71:A0:29:23:36:14:E2:47:54
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 01A1DF15724B6F37D88E5F88CAE707694617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 12:01:26 +0000
Manifest this update: Sun 15 Nov 2026 12:01:26 +0000
Manifest next update: Mon 16 Nov 2026 12:01:26 +0000
Files and hashes: 1: 4o_tAUtgP-njAXhmOmcH5E-LEBE.roa (hash: fh84+EgF1SEM+SjNNhOt/IByRahwjmYLOKwI1U+RRhc=)
2: AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa (hash: qSJNJwwtc55ywmper0Gkw+bq36i69BmtauWb1Skowaw=)
3: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: 1N31BrcK3UazxuZgBNyqBW1eXcmTYRhUzqvQ+7wld8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:72:4b:6f:37:d8:8e:5f:88:ca:e7:07:69:46:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Nov 15 12:01:26 2026 GMT
Not After : Nov 16 12:01:26 2026 GMT
Subject: CN=634ae41982e627b9d29b9571a029233614e24754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:21:76:94:92:61:c6:fe:b3:e2:f4:29:f8:
04:64:58:d0:40:2a:62:28:a3:e0:b4:b0:1d:68:5d:
90:b5:84:93:c5:be:ac:0f:5c:db:f9:79:b0:63:7f:
49:2d:41:0a:24:41:89:ba:89:8d:d0:c5:02:a4:91:
1b:e2:fe:af:52:0c:af:0c:0c:2c:c7:b4:5f:ef:70:
ee:d2:ce:fb:82:d1:1a:f0:c8:3d:bb:0e:04:d0:2a:
3d:06:1b:65:23:26:8f:98:8b:61:93:49:7d:0d:7e:
3c:d6:52:cb:d7:3a:d9:ca:96:ad:3b:eb:3d:a8:57:
e1:f3:97:be:db:3c:a3:87:69:d2:f7:0a:15:fd:75:
dd:ef:4f:82:80:b8:eb:db:bd:06:94:95:d3:9e:61:
0e:30:1c:b2:f2:8c:8f:b8:46:48:d7:af:ee:c9:c9:
ee:9a:8d:1f:9d:c6:24:01:2c:62:ff:b5:d2:b9:00:
c1:37:7d:01:21:be:65:01:72:2a:17:95:9e:e9:2e:
88:c9:be:84:78:61:d4:c1:b2:a7:ec:4f:0b:bf:f7:
ff:12:61:af:4a:44:3e:2b:e7:90:1d:e0:fd:31:05:
db:1a:d7:6f:f8:67:37:25:95:d2:a9:b7:fb:f1:f6:
cf:11:c4:45:92:a7:34:a1:99:01:10:bc:b9:5b:9b:
6a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4A:E4:19:82:E6:27:B9:D2:9B:95:71:A0:29:23:36:14:E2:47:54
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6e:e4:06:ea:97:ce:32:d3:95:2f:c4:9e:c3:4f:c2:ff:07:
6f:d4:87:7f:83:53:8b:f1:44:fc:40:12:e8:e0:c8:70:8c:00:
a8:7b:c9:0b:63:a4:cc:56:74:63:8f:ce:0f:e9:40:a7:b0:85:
ac:65:7e:b8:5d:4c:f3:43:b3:09:a5:c9:9d:a7:a3:b0:39:2e:
bf:3b:99:07:98:ae:51:62:36:20:ac:72:3f:ad:98:de:b0:86:
bf:84:f2:59:2e:af:01:a2:36:25:03:1b:ba:fe:8a:14:e8:34:
ad:5b:c1:03:6f:a2:78:96:52:03:64:8d:74:80:2d:6e:76:00:
d1:87:64:0e:36:e9:ac:cb:ca:14:8e:d6:91:38:2d:5d:9a:20:
e2:d1:c8:7b:45:db:dd:59:41:d7:25:d4:47:d4:35:11:1a:1b:
9f:5f:3f:8b:d7:60:d1:05:4d:d5:bb:f2:c1:11:f0:3b:a2:c7:
b6:8d:8a:fd:0d:1a:a9:9e:7e:56:65:d5:27:0c:a3:dd:f1:9b:
5f:38:34:76:f4:1b:4d:f9:30:72:5e:07:12:ee:40:b0:7a:b0:
b4:74:6f:01:0f:93:86:78:48:98:ba:4a:f6:89:74:02:00:3f:
30:92:74:a5:86:9c:12:de:b9:e2:15:54:7e:22:23:63:60:99:
fb:07:5d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:24:49 2026 by rpki-client