Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: GVtRr+Fnm6BWKkOu9cfppwIQhiTOjGds2LKtszmbZE4=
Subject key identifier: 6B:F0:D9:D5:7B:22:E9:89:88:B3:25:1E:15:B6:9B:DB:21:4F:AA:4D
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 01A0CEC8B5F4F8A6CE0D81E73329B61094D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 15:00:55 +0000
Manifest this update: Wed 23 Sep 2026 15:00:55 +0000
Manifest next update: Thu 24 Sep 2026 15:00:55 +0000
Files and hashes: 1: 4o_tAUtgP-njAXhmOmcH5E-LEBE.roa (hash: fh84+EgF1SEM+SjNNhOt/IByRahwjmYLOKwI1U+RRhc=)
2: AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa (hash: qSJNJwwtc55ywmper0Gkw+bq36i69BmtauWb1Skowaw=)
3: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: AWY/ao0TJyQKfJGBKHth0QO522EefwR6qt1FvN1h2TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:b5:f4:f8:a6:ce:0d:81:e7:33:29:b6:10:94:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Sep 23 15:00:55 2026 GMT
Not After : Sep 24 15:00:55 2026 GMT
Subject: CN=6bf0d9d57b22e98988b3251e15b69bdb214faa4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:02:09:c3:c8:48:ba:26:52:cd:ff:07:41:
6b:1c:e4:79:43:8e:d3:f7:2e:86:83:f1:0b:d2:bf:
52:5c:90:cd:6e:db:1a:d0:7f:58:89:87:5f:d9:27:
ad:20:e1:0e:df:34:aa:a2:8f:b1:6a:0e:9c:23:0a:
08:b3:7b:3e:a7:5f:70:e9:96:b5:2a:c2:a2:fc:78:
ef:29:37:70:7f:e6:d9:11:65:a7:66:ae:be:46:d0:
35:94:dd:37:ad:b5:63:63:62:4f:b2:74:ba:f0:2f:
07:07:da:39:eb:2e:c7:3e:a2:46:6e:83:22:33:f5:
9e:87:24:32:fc:20:92:f9:a4:88:4c:38:ca:a4:2e:
62:f6:3e:d0:9b:4e:69:e9:53:40:e1:86:16:ea:6d:
ff:b0:c3:70:9a:ab:c5:d7:f8:c4:7a:89:6d:80:ae:
5b:72:03:8b:a3:f3:3f:b7:4c:99:5b:88:b8:51:12:
6b:a5:a0:57:d5:4b:21:a5:14:56:91:c1:4f:42:1c:
16:36:07:89:70:6d:c4:ee:28:18:e9:1f:54:91:ca:
ce:35:5c:87:a7:a6:03:e7:4c:30:e4:14:8b:5e:52:
c4:67:11:d9:12:b1:29:15:c6:28:f0:26:9e:65:c8:
ea:be:8c:05:ba:a2:91:14:36:15:bf:14:e4:c2:b2:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F0:D9:D5:7B:22:E9:89:88:B3:25:1E:15:B6:9B:DB:21:4F:AA:4D
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:8f:50:f7:28:f6:82:63:d9:9c:c0:5f:1a:64:ce:c9:43:0b:
16:66:04:e6:a0:83:c7:81:00:6e:7c:ce:72:21:01:fb:a5:79:
ed:a9:e2:57:c5:92:bd:bf:6d:a9:f3:ee:52:a3:76:24:3c:d6:
bd:aa:16:33:84:1e:94:04:85:0f:dc:4b:f0:76:aa:ea:49:9a:
1f:b2:1a:83:85:d8:1b:cc:05:bd:0a:57:be:ab:be:c7:51:ab:
f9:1c:9b:f1:8b:ca:94:77:a7:7b:22:f6:03:b0:2d:c6:0d:4a:
0d:94:50:69:1f:1d:4a:61:0a:ee:5f:f9:a6:d8:41:4f:a2:71:
3f:83:27:c6:47:ae:28:af:24:07:59:5d:df:a6:c5:9e:71:c9:
2a:9d:ff:2f:09:d2:0a:fe:1e:49:d6:a4:16:e3:a2:a8:2a:99:
3a:f0:f0:53:7c:c4:75:fb:41:8d:d4:7a:0a:8e:8b:95:3e:cf:
b0:ca:b3:f3:9c:a6:fe:6f:3d:62:d6:b8:6f:29:fa:ba:2a:19:
b4:14:25:3a:5e:c4:a7:27:76:b0:db:1c:33:06:ba:89:b7:3f:
05:cf:17:32:cb:5a:5c:47:bd:90:ea:f2:ac:a3:6e:12:16:2d:
e0:f5:73:73:07:7a:91:ba:36:d9:6d:46:ac:f0:7f:82:76:d1:
a2:b7:ef:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:58:50 2026 by rpki-client