Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
File: K67n6kgtYqZxBj6sg3ia8585C3Q.mft (raw, json)
Hash identifier: gEceoT/r4DfwG3B44dsnhQeUZWtqjht480a/rhBefwU=
Subject key identifier: 59:C0:60:6E:B0:D6:BF:99:9E:79:A9:11:0E:79:E1:CF:F6:E1:BB:9F
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Certificate issuer: /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial: 01A199C6806BD65E0DCC9799D3AA702B2467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
Manifest number: 0C95
Signing time: Mon 02 Nov 2026 01:01:25 +0000
Manifest this update: Mon 02 Nov 2026 01:01:25 +0000
Manifest next update: Tue 03 Nov 2026 01:01:25 +0000
Files and hashes: 1: 1-VClqETCNyln9ob_8dljIObR6yw.asa (hash: 7P5DhzceMPG3mzkJvlHW2BWbVjyEeo8Gvhz7Q+pCq3I=)
2: 57OxBTF4X7lyr00PQWTLC_7l0LM.roa (hash: Qu9Cp0fGN2f6UG2Bu1+rVSKBmfLjLGmUIUXyj9DRqEM=)
3: K67n6kgtYqZxBj6sg3ia8585C3Q.crl (hash: L/nKJhXNm6SsVoyZ0FdOsHOBADGoQoHRxaMSxFyXLm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:c6:80:6b:d6:5e:0d:cc:97:99:d3:aa:70:2b:24:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
Validity
Not Before: Nov 2 01:01:25 2026 GMT
Not After : Nov 3 01:01:25 2026 GMT
Subject: CN=59c0606eb0d6bf999e79a9110e79e1cff6e1bb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:32:b4:5e:8f:36:53:f1:41:78:97:43:53:61:
b5:de:fd:a0:6e:e8:f7:12:75:fd:29:5b:35:9d:a2:
ef:74:c1:17:d9:b5:40:7a:ab:22:14:67:92:77:bf:
a0:d7:bb:5b:a7:f1:f9:40:b9:8b:57:60:c0:66:99:
5c:d3:f4:17:74:86:cf:ea:65:c9:63:39:cf:04:a1:
0b:49:d6:86:31:4e:d9:ce:f1:d0:c0:fc:07:84:92:
de:34:8c:91:19:e0:d8:e6:0f:8c:c7:e1:74:ed:41:
c1:fb:28:50:b9:6e:ca:51:bf:3d:bf:12:cd:5c:86:
4e:d4:51:39:88:ac:ea:7e:20:05:74:b4:bf:e0:66:
2b:07:c0:e7:01:25:ed:be:f0:90:a6:7c:5b:89:cc:
ce:f2:1c:fd:9d:1d:ce:01:05:66:84:3c:cd:ea:75:
1e:28:a3:5e:ca:4f:96:0d:2c:95:48:ff:3e:91:db:
72:81:77:de:d5:77:fe:2f:ce:01:0d:d0:af:42:eb:
fe:16:17:61:e2:16:df:46:9a:e3:6b:cf:4f:2d:f7:
f4:d9:15:ef:de:b2:0c:f7:83:80:12:8d:d8:63:90:
89:70:05:00:ba:6a:3a:dc:50:9c:73:81:49:c4:ce:
d1:ef:a1:4d:f1:fe:c4:0b:43:20:49:53:e8:63:15:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C0:60:6E:B0:D6:BF:99:9E:79:A9:11:0E:79:E1:CF:F6:E1:BB:9F
X509v3 Authority Key Identifier:
keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:36:27:f2:40:8b:65:12:02:0d:2a:6d:b1:18:86:d9:6c:99:
e7:07:89:fb:5d:a8:13:b0:41:73:b1:86:5c:62:71:44:21:1a:
ca:e6:bb:e7:c4:76:5c:b8:84:89:ca:56:5f:89:67:ec:d6:a9:
f6:0e:02:9d:02:a8:43:61:1b:20:7c:12:f5:a6:03:9c:83:10:
15:27:8d:63:f0:99:85:8b:47:7c:c2:a3:3c:99:5a:30:fc:73:
14:23:86:38:b0:b0:8e:db:f2:5f:5c:fa:ef:45:5b:0c:08:e4:
fa:4d:04:60:30:5f:74:62:18:2a:67:39:a0:0d:6f:b1:59:7b:
76:2c:c1:ec:ad:5b:d5:7e:db:d7:64:71:28:b1:a7:fe:2f:41:
50:e5:db:27:49:e1:98:86:ab:7d:0b:f2:71:d0:19:c3:75:66:
3a:59:17:7a:87:23:96:09:f7:2b:ca:3f:12:3f:5a:fa:30:e1:
77:bf:b1:80:69:e4:02:8a:af:fc:3d:77:a9:fb:f3:4e:6f:74:
72:08:55:70:d8:0a:d4:63:f5:39:fa:94:69:74:b0:2d:b5:3a:
0e:3e:17:14:d4:5f:40:b4:fa:9f:f9:56:22:7f:31:d8:38:ca:
99:9d:ca:84:f3:85:88:f8:12:e6:e0:be:a6:63:8d:9d:86:b0:
97:1d:25:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGZxoBr1l4NzJeZ06pwKyRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYWVlN2VhNDgyZDYyYTY3MTA2M2VhYzgzNzg5YWYzOWYz
OTBiNzQwHhcNMjYxMTAyMDEwMTI1WhcNMjYxMTAzMDEwMTI1WjAzMTEwLwYDVQQD
Eyg1OWMwNjA2ZWIwZDZiZjk5OWU3OWE5MTEwZTc5ZTFjZmY2ZTFiYjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zK0Xo82U/FBeJdDU2G13v2gbuj3
EnX9KVs1naLvdMEX2bVAeqsiFGeSd7+g17tbp/H5QLmLV2DAZplc0/QXdIbP6mXJ
YznPBKELSdaGMU7ZzvHQwPwHhJLeNIyRGeDY5g+Mx+F07UHB+yhQuW7KUb89vxLN
XIZO1FE5iKzqfiAFdLS/4GYrB8DnASXtvvCQpnxbiczO8hz9nR3OAQVmhDzN6nUe
KKNeyk+WDSyVSP8+kdtygXfe1Xf+L84BDdCvQuv+Fhdh4hbfRprja89PLff02RXv
3rIM94OAEo3YY5CJcAUAumo63FCcc4FJxM7R76FN8f7EC0MgSVPoYxXcdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnAYG6w1r+ZnnmpEQ554c/24bufMB8GA1UdIwQY
MBaAFCuu5+pILWKmcQY+rIN4mvOfOQt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTU3ODQtMzcwNS00MThhLWI5OTQt
NzUyMWFmMWNlMjU5LzEvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMTU3ODQtMzcwNS00MThhLWI5OTQtNzUyMWFmMWNlMjU5
LzEvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDYn8kCL
ZRICDSptsRiG2WyZ5weJ+12oE7BBc7GGXGJxRCEayua758R2XLiEicpWX4ln7Nap
9g4CnQKoQ2EbIHwS9aYDnIMQFSeNY/CZhYtHfMKjPJlaMPxzFCOGOLCwjtvyX1z6
70VbDAjk+k0EYDBfdGIYKmc5oA1vsVl7dizB7K1b1X7b12RxKLGn/i9BUOXbJ0nh
mIarfQvycdAZw3VmOlkXeocjlgn3K8o/Ej9a+jDhd7+xgGnkAoqv/D13qfvzTm90
cghVcNgK1GP1OfqUaXSwLbU6Dj4XFNRfQLT6n/lWIn8x2DjKmZ3KhPOFiPgS5uC+
pmONnYawlx0lcw==
-----END CERTIFICATE-----
Generated at Mon Nov 2 07:35:31 2026 by rpki-client