Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft
File: K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft (raw, json)
Hash identifier: VzYWxogxTk5prQUYw1660bw5Wv01J76B8sgLTc90P5g=
Subject key identifier: 58:5F:0B:21:B0:31:6B:B2:6B:0F:90:66:9D:B0:54:87:2D:D7:0D:8D
Authority key identifier: 2B:F8:97:E0:E5:52:26:E4:2A:E3:10:62:4D:0C:DC:8D:97:39:36:CA
Certificate issuer: /CN=2bf897e0e55226e42ae310624d0cdc8d973936ca
Certificate serial: 01A0DD97CB8A08A6A4C0FDA5BE111965B7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_iX4OVSJuQq4xBiTQzcjZc5Nso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:01:47 +0000
Manifest this update: Sat 26 Sep 2026 12:01:47 +0000
Manifest next update: Sun 27 Sep 2026 12:01:47 +0000
Files and hashes: 1: K_iX4OVSJuQq4xBiTQzcjZc5Nso.crl (hash: svvN/jbWS71rZuJaTfk3RdZrkXnZVqxu9Ytsi0EplGE=)
2: NRBS6ZtboB2iimKF471rwSY1gJo.roa (hash: TinIeELIj1280SRdWKZnK8lTmk3dSvkgs4pLOxMqj3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_iX4OVSJuQq4xBiTQzcjZc5Nso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:cb:8a:08:a6:a4:c0:fd:a5:be:11:19:65:b7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf897e0e55226e42ae310624d0cdc8d973936ca
Validity
Not Before: Sep 26 12:01:47 2026 GMT
Not After : Sep 27 12:01:47 2026 GMT
Subject: CN=585f0b21b0316bb26b0f90669db054872dd70d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a1:93:12:4b:c4:0c:0f:cd:f3:93:05:45:ba:
4a:74:c6:cf:72:2f:d9:bc:55:d0:e1:94:b1:3e:1a:
a8:16:31:ba:e2:7b:a1:2c:fd:10:4c:22:0b:29:09:
c0:86:6c:bd:da:90:aa:04:1c:44:0e:31:70:6d:46:
0d:00:22:ef:43:a0:5c:25:f7:23:98:a7:6f:26:f7:
10:8e:73:f6:5e:36:29:50:1d:a6:64:53:5c:ca:b7:
fc:a1:cd:3d:1e:5a:dd:90:df:3b:b6:26:29:c0:ae:
ca:a9:cf:82:65:f3:a6:d9:d8:d4:b5:68:bb:f9:c2:
8d:01:91:b5:5d:55:e1:bd:5b:f6:2f:f8:61:c0:2e:
dd:fe:e1:c2:b7:6e:ba:4a:8f:8a:a0:cf:e4:2f:5e:
47:9b:39:d2:31:9a:27:f5:a4:2a:65:cd:da:86:27:
d8:02:cc:ee:ff:b9:f2:b3:e6:7c:fe:80:b9:2d:d3:
f0:8b:00:91:a3:c2:8d:10:a8:b3:11:df:8e:c3:ec:
d8:d7:e1:99:81:7a:85:27:7b:9c:19:f4:59:1b:ab:
91:b6:ec:39:b3:d0:7b:1d:4c:66:89:64:81:c9:57:
61:65:28:e9:8b:2f:81:21:0a:7a:87:ed:8b:14:48:
93:b6:29:11:11:65:be:b4:7b:94:09:ce:cc:8b:6e:
00:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5F:0B:21:B0:31:6B:B2:6B:0F:90:66:9D:B0:54:87:2D:D7:0D:8D
X509v3 Authority Key Identifier:
keyid:2B:F8:97:E0:E5:52:26:E4:2A:E3:10:62:4D:0C:DC:8D:97:39:36:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_iX4OVSJuQq4xBiTQzcjZc5Nso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:68:58:23:05:52:c1:46:5b:cf:a9:f9:1b:dc:c4:27:7f:c8:
dd:4c:bb:87:87:f5:64:eb:33:45:59:e5:84:e9:3e:5d:e7:1b:
56:54:e5:14:3f:29:e0:48:db:ab:4f:b7:b5:9d:04:b5:50:8c:
eb:18:7d:f7:df:5f:7c:68:80:91:3c:dc:f5:e0:f8:3d:45:30:
7c:61:6c:98:24:aa:e6:d1:39:df:89:53:c2:51:c5:78:55:13:
fb:dd:d1:70:ff:69:1b:4f:e1:ef:ae:70:dd:8e:c5:a2:01:78:
b1:26:eb:11:31:57:9e:91:9c:5d:25:80:39:29:26:eb:47:e8:
89:7e:e4:b8:71:0d:3e:77:98:09:b6:fa:ea:76:02:6e:36:9f:
fc:5a:b6:01:54:14:6f:9e:91:bb:d8:a7:e5:81:33:97:37:69:
75:ca:b2:83:89:c2:9e:1a:32:9c:ff:af:fb:83:53:5f:1d:65:
96:8d:87:55:88:2c:f6:30:52:11:1a:2e:64:02:0c:79:bf:4d:
9f:ab:c1:93:f8:b9:e8:24:e9:31:a6:3f:ed:21:a6:d6:f5:0c:
57:69:33:7d:47:54:6b:68:16:18:97:06:c7:84:38:15:f3:c0:
57:31:a2:d2:65:2f:f2:97:dd:e3:b3:13:20:5c:9b:2c:0c:c6:
81:87:65:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:44:22 2026 by rpki-client