Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: Fdr4aaiD1VFzJxHeZARWR/FatqxBQzGtZ3vZ8SXFPSI=
Subject key identifier: 4A:17:D3:27:19:8E:22:A1:2E:0D:8A:41:90:1D:09:E8:66:95:DB:64
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 01A130D8E21F7FE6D1E946B5DEA666327658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 0EF4
Signing time: Mon 12 Oct 2026 16:01:22 +0000
Manifest this update: Mon 12 Oct 2026 16:01:22 +0000
Manifest next update: Tue 13 Oct 2026 16:01:22 +0000
Files and hashes: 1: 7kADj_Exqnkd_NooXivCTNgHMTw.roa (hash: xbxLEV7EBAsCMdM5vvQNxcgu+GmkqM8Q10yUTCA4kNA=)
2: FilFuxaHNlZodlAIrDOhTmh6ldo.roa (hash: uhGLiCFEBOn6o6kgW6SCO1d0PO9VmCMZayR7rM7fOKo=)
3: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: Pxl1XDRs71JtvlcJbWUV1g+RvmGa3hd5bv3N9egxzLQ=)
4: b2hDoC2QeOdetXxS8h0K7-tyYmI.roa (hash: 9C3SPDVj2hN5qln0VFtPBwpA+3WenkqM7y2GLRnn6bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:d8:e2:1f:7f:e6:d1:e9:46:b5:de:a6:66:32:76:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Oct 12 16:01:22 2026 GMT
Not After : Oct 13 16:01:22 2026 GMT
Subject: CN=4a17d327198e22a12e0d8a41901d09e86695db64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:24:cd:ae:13:3d:67:2a:4b:77:4b:3c:26:
ef:32:2e:96:20:77:1c:af:20:8d:6a:c2:5a:18:e9:
76:f6:e2:cf:df:37:44:ea:ec:0d:30:17:05:fa:40:
81:26:2b:89:96:81:0d:c6:02:35:67:62:ad:35:00:
3c:a2:de:cb:27:69:c9:2d:e5:ec:3f:2d:f6:26:94:
69:d0:af:5a:29:d9:d8:22:72:fc:9a:de:e8:ec:f3:
52:e6:ae:6f:3f:5b:fe:c2:e7:7a:40:ee:60:92:26:
0f:e8:b9:51:07:b8:ab:95:80:2d:6e:49:1c:e7:cc:
a7:ab:94:bd:44:8f:45:b9:2c:55:59:a6:d4:69:14:
d0:44:ff:1b:d5:4b:b9:dd:91:e1:43:0f:2d:18:91:
b1:58:55:33:2f:06:bf:c8:36:0f:e2:b5:e5:73:75:
ac:ff:58:4c:37:15:f6:ee:4a:b0:95:41:ac:28:85:
d8:d7:aa:d9:c4:63:4f:60:ff:b9:4b:33:18:70:78:
21:21:a8:bb:e0:e7:2d:54:c4:77:2e:af:31:f4:76:
2c:4b:6a:27:ee:24:e7:29:55:12:55:96:c8:cd:56:
e9:f4:e6:d6:48:fa:06:b1:cf:fa:ac:32:78:a3:a4:
87:19:84:d6:cc:02:f6:a5:f4:2e:b5:2a:2d:c5:f6:
cc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:17:D3:27:19:8E:22:A1:2E:0D:8A:41:90:1D:09:E8:66:95:DB:64
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bd:f8:ff:7f:f2:56:0b:32:6e:6c:9a:c2:86:a7:70:55:ad:
4d:23:3d:15:6c:2f:87:ec:83:64:a1:09:6c:b2:67:a2:f3:2d:
c8:68:33:c2:c5:3c:02:05:09:0e:aa:a9:06:78:dd:29:e0:c8:
e5:c6:b8:67:22:8e:a4:eb:e6:11:6e:88:18:a1:87:03:2b:38:
cf:94:8f:0e:aa:cb:b9:cd:2e:0c:58:d7:ba:e3:ef:3a:a9:2a:
fd:ac:07:63:6c:67:02:a2:49:db:65:1e:af:48:0f:f2:c4:79:
6d:6a:ae:8f:c1:e8:ff:90:0c:b7:32:d7:35:fe:9a:21:b9:a1:
95:44:8a:3b:cd:20:c7:a0:7e:87:ae:c5:2b:d1:39:f4:7e:e2:
a5:0c:fc:51:f6:4d:4b:e3:27:52:d3:09:9b:ba:eb:f6:dd:6a:
50:c3:19:52:64:1d:b2:85:cd:43:30:78:d1:a6:ae:aa:25:5e:
62:52:ff:12:8d:44:b1:b9:38:f1:95:b1:37:39:a4:ad:3e:0d:
2d:2d:40:bc:9c:dc:33:6a:de:b0:d6:6d:53:b0:7d:e3:95:46:
68:15:e8:65:14:57:14:c4:f3:7d:3f:a5:ea:1e:1a:0a:73:1f:
80:8d:50:56:4c:b4:c9:7c:84:f5:41:8e:05:a3:29:5e:96:57:
ba:91:bd:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEw2OIff+bR6Ua13qZmMnZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZTUzZDM0MGE4YmY0N2MxYmYzNGQzMjU1ZTEwMmVmYjE4
MWFkMTkwHhcNMjYxMDEyMTYwMTIyWhcNMjYxMDEzMTYwMTIyWjAzMTEwLwYDVQQD
Eyg0YTE3ZDMyNzE5OGUyMmExMmUwZDhhNDE5MDFkMDllODY2OTVkYjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT4kza4TPWcqS3dLPCbvMi6WIHcc
ryCNasJaGOl29uLP3zdE6uwNMBcF+kCBJiuJloENxgI1Z2KtNQA8ot7LJ2nJLeXs
Py32JpRp0K9aKdnYInL8mt7o7PNS5q5vP1v+wud6QO5gkiYP6LlRB7irlYAtbkkc
58ynq5S9RI9FuSxVWabUaRTQRP8b1Uu53ZHhQw8tGJGxWFUzLwa/yDYP4rXlc3Ws
/1hMNxX27kqwlUGsKIXY16rZxGNPYP+5SzMYcHghIai74OctVMR3Lq8x9HYsS2on
7iTnKVUSVZbIzVbp9ObWSPoGsc/6rDJ4o6SHGYTWzAL2pfQutSotxfbMoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoX0ycZjiKhLg2KQZAdCehmldtkMB8GA1UdIwQY
MBaAFCvlPTQKi/R8G/NNMlXhAu+xga0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEt
NzRmMGMzZTY2M2NiLzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEtNzRmMGMzZTY2M2Ni
LzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVL34/3/y
VgsybmyawoancFWtTSM9FWwvh+yDZKEJbLJnovMtyGgzwsU8AgUJDqqpBnjdKeDI
5ca4ZyKOpOvmEW6IGKGHAys4z5SPDqrLuc0uDFjXuuPvOqkq/awHY2xnAqJJ22Ue
r0gP8sR5bWquj8Ho/5AMtzLXNf6aIbmhlUSKO80gx6B+h67FK9E59H7ipQz8UfZN
S+MnUtMJm7rr9t1qUMMZUmQdsoXNQzB40aauqiVeYlL/Eo1Esbk48ZWxNzmkrT4N
LS1AvJzcM2resNZtU7B945VGaBXoZRRXFMTzfT+l6h4aCnMfgI1QVky0yXyE9UGO
BaMpXpZXupG9rA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 20:48:21 2026 by rpki-client