Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
File: K67n6kgtYqZxBj6sg3ia8585C3Q.mft (raw, json)
Hash identifier: lt93jv5j8bv8e7riSSgw8z/u9cP1QT46NFdxZW2XgSA=
Subject key identifier: 20:B3:BA:82:C4:C4:27:58:E3:51:86:F5:2F:48:3C:03:7E:01:19:99
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Certificate issuer: /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial: 019E20240239E2D7D28409A4ECD0377CEFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
Manifest number: 0AC5
Signing time: Wed 13 May 2026 07:01:31 +0000
Manifest this update: Wed 13 May 2026 07:01:31 +0000
Manifest next update: Thu 14 May 2026 07:01:31 +0000
Files and hashes: 1: 57OxBTF4X7lyr00PQWTLC_7l0LM.roa (hash: Qu9Cp0fGN2f6UG2Bu1+rVSKBmfLjLGmUIUXyj9DRqEM=)
2: K67n6kgtYqZxBj6sg3ia8585C3Q.crl (hash: LB/cynXriB/YFmIfua93U0rPz7xcHgfJ1gCb9cVSLtQ=)
3: wLKTHNAi_SKjDTW74BcesnX-WQQ.asa (hash: j48nzI6JGxErzvih/a7iFeEhyD9lYuYhcQYuQ7FCZgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:02:39:e2:d7:d2:84:09:a4:ec:d0:37:7c:ef:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
Validity
Not Before: May 13 07:01:31 2026 GMT
Not After : May 14 07:01:31 2026 GMT
Subject: CN=20b3ba82c4c42758e35186f52f483c037e011999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3c:b5:a5:2d:51:af:d3:6c:1a:68:45:2f:e2:
8f:a4:35:df:75:0f:24:f8:b0:94:3e:7f:d4:ed:f4:
ac:1f:83:89:a9:9c:d8:2c:86:67:1c:ce:22:5d:ec:
c8:80:8a:78:35:5b:e3:69:14:85:63:94:bf:14:c5:
ca:8c:d9:6f:7d:83:6d:da:5a:be:06:18:96:bc:7f:
b2:2a:52:0e:e0:0f:86:4a:7c:ee:10:ea:aa:7c:a6:
22:98:d5:90:b6:97:49:4c:0c:04:d4:49:16:f5:e3:
2b:c9:3a:f3:4b:ed:c6:32:ff:c9:31:5c:ed:87:43:
22:e1:f5:86:dc:58:d6:ce:a8:26:88:10:86:1b:e5:
52:7c:d4:b8:b9:27:2a:be:9b:78:67:f2:b5:4a:21:
2e:fd:60:d7:14:cf:3e:05:0a:c6:01:2a:46:9a:f1:
a0:f6:7b:2f:b8:bd:90:89:f8:70:9a:9d:d5:5f:9d:
db:46:e0:2d:f2:bb:06:50:18:63:37:11:96:ba:50:
99:db:27:1a:5b:af:ca:1a:1f:08:ae:21:70:1f:c0:
54:1b:f8:96:fc:45:94:38:b3:3c:f4:cc:1f:bf:44:
c7:e1:42:be:be:7b:2f:20:ef:94:a4:b9:82:22:02:
56:c5:a0:64:e0:f7:52:79:28:43:38:a1:a7:10:d3:
17:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B3:BA:82:C4:C4:27:58:E3:51:86:F5:2F:48:3C:03:7E:01:19:99
X509v3 Authority Key Identifier:
keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b0:7c:2f:03:27:2b:14:62:7d:53:87:c0:34:54:4b:0d:05:
90:94:b2:df:1b:31:b5:83:53:42:06:37:f3:65:00:85:04:ca:
29:11:c5:3b:ee:78:94:66:4c:c7:75:b7:79:1f:bf:08:ee:47:
e9:3f:f2:03:9f:9e:13:a7:0a:86:51:2d:ab:39:73:91:47:5c:
46:b8:1f:c2:a0:bf:27:69:72:39:18:7a:55:f5:81:47:f0:2b:
dc:89:15:8e:52:44:b5:95:a4:35:93:38:b7:89:2e:c8:fd:db:
a3:8b:e0:a8:96:17:53:1c:27:a7:15:e6:83:71:ca:81:12:76:
3c:45:74:ae:ee:c3:be:fc:02:b6:ea:85:84:2e:b4:dd:5d:9e:
a4:e9:51:ee:e4:6c:54:7e:0a:9b:39:42:24:6a:13:cc:45:21:
79:77:7d:d2:f5:58:af:25:59:c0:0a:54:c4:27:29:3d:2f:14:
6e:8e:b2:56:36:f5:e2:04:e3:97:ba:4c:dd:20:d2:b8:02:21:
14:8b:d3:0f:ab:4e:47:c0:70:04:73:8c:3b:ab:f9:5d:16:7c:
c5:be:2c:16:fa:a7:85:d8:8d:27:6d:1a:91:01:9d:8c:05:d4:
d7:6b:2f:53:e4:9e:c8:10:5d:7a:74:60:b1:5d:f7:cf:f6:6b:
03:86:ab:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:06:19 2026 by rpki-client