Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: k3nymcnYJF7V4xPIrAHcd7dzrf8zYCUIwGCaxrY/g1o=
Subject key identifier: 34:D7:E2:1D:A1:B6:48:49:DC:36:BA:8D:35:5F:D0:B6:5C:AB:EC:B0
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 01A0CEC87DED6BCCE2F00F54999587567FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 15:00:40 +0000
Manifest this update: Wed 23 Sep 2026 15:00:40 +0000
Manifest next update: Thu 24 Sep 2026 15:00:40 +0000
Files and hashes: 1: HXApDbBFjZ5P8YYPxxOP43B_61E.roa (hash: PABHtWG+f2nnmj23DcOFA1VpAaq32GiJAfPfR67Vqzs=)
2: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: vItcLwyUvnXDMPBMBjhhU0wPDAylkhEyxhYgTcyobSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:7d:ed:6b:cc:e2:f0:0f:54:99:95:87:56:7f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Sep 23 15:00:40 2026 GMT
Not After : Sep 24 15:00:40 2026 GMT
Subject: CN=34d7e21da1b64849dc36ba8d355fd0b65cabecb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:25:5f:4f:cc:f6:38:09:aa:17:28:f9:ae:
d1:4d:4f:80:d7:63:b6:27:52:f9:9b:8d:4f:be:09:
ca:54:60:db:e2:bb:32:46:b7:c5:a2:a1:c0:d6:06:
69:89:a5:f6:3b:7a:34:d7:c8:a1:55:9b:b3:c3:17:
f4:ab:f1:6b:89:2c:8c:f5:3a:9c:d5:43:0b:eb:90:
74:94:a5:b6:18:38:0a:62:b2:2d:a7:4f:0c:d2:a1:
f3:48:7b:7a:17:b5:84:de:ad:a5:0c:00:17:93:64:
e3:ec:46:ed:21:c6:40:cf:c5:06:03:82:17:10:e5:
e1:36:ef:34:43:da:d2:9a:7f:0e:64:ee:00:19:a3:
74:a4:73:54:18:33:18:ec:6e:4e:78:c2:43:e3:4b:
ae:cd:d5:a3:07:bb:bd:ec:a0:48:0e:34:a4:ae:9a:
4d:14:a8:5b:ab:fc:6b:b9:33:2c:10:28:93:2a:bf:
98:39:98:46:65:8b:87:ae:74:8b:71:29:cc:e2:25:
4c:da:a6:05:ba:c7:5a:58:8b:f5:a4:f4:69:e6:b3:
68:7d:89:b2:dc:19:52:83:9e:66:5b:a5:b7:e1:72:
4d:0e:c6:72:78:80:26:07:ed:2c:97:5b:5e:ee:57:
8b:1e:86:7b:9c:93:53:c2:b6:a1:03:5d:b5:38:ba:
b7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D7:E2:1D:A1:B6:48:49:DC:36:BA:8D:35:5F:D0:B6:5C:AB:EC:B0
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:67:a0:49:08:29:fd:c4:41:1f:1e:70:d6:da:65:b3:04:86:
df:11:2b:18:64:56:2c:ea:b1:0d:d5:d8:18:5c:b4:2b:69:81:
d5:c9:fa:60:d7:f6:53:65:52:fe:1d:a7:37:da:43:7e:da:1f:
1b:ee:76:c7:ac:52:8b:99:64:73:85:42:22:60:20:b4:e5:ce:
02:75:a6:cc:c1:e0:f4:89:ed:ba:81:9c:9d:4f:76:83:34:09:
fd:86:2e:62:48:7f:aa:15:c0:55:ba:4c:d0:23:00:f0:32:8b:
d3:e5:24:12:e5:93:d7:4d:a4:69:f3:1d:dd:ee:f4:06:4e:28:
2e:33:18:9f:f4:5b:e2:6c:61:dc:cd:68:1f:69:a2:60:64:c4:
9c:3c:90:f1:b6:8c:f7:9f:ed:62:e3:58:a1:9e:16:8b:44:8e:
4e:3a:09:b6:03:3f:4a:77:52:6a:f6:c9:0f:8d:9a:92:a6:9a:
e1:f8:77:fd:3c:0e:de:1d:07:cb:00:38:63:9d:57:11:f7:4d:
83:11:55:bc:1c:ed:3f:5b:df:fb:ac:1d:f5:c7:d3:60:05:72:
a5:9a:07:b2:50:a8:8c:e3:5b:52:c2:32:9c:35:3b:f7:b5:03:
03:5e:f3:b9:3d:58:8c:0d:ad:eb:df:27:20:a2:27:0d:cb:40:
62:88:a8:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOyH3ta8zi8A9UmZWHVn+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZDJjMzcyODRkODQ0MjZmMDVlMzI1YjZiMDQ3YWQ1Y2Yz
ZmU0ZjIwHhcNMjYwOTIzMTUwMDQwWhcNMjYwOTI0MTUwMDQwWjAzMTEwLwYDVQQD
EygzNGQ3ZTIxZGExYjY0ODQ5ZGMzNmJhOGQzNTVmZDBiNjVjYWJlY2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunMlX0/M9jgJqhco+a7RTU+A12O2
J1L5m41PvgnKVGDb4rsyRrfFoqHA1gZpiaX2O3o018ihVZuzwxf0q/FriSyM9Tqc
1UML65B0lKW2GDgKYrItp08M0qHzSHt6F7WE3q2lDAAXk2Tj7EbtIcZAz8UGA4IX
EOXhNu80Q9rSmn8OZO4AGaN0pHNUGDMY7G5OeMJD40uuzdWjB7u97KBIDjSkrppN
FKhbq/xruTMsECiTKr+YOZhGZYuHrnSLcSnM4iVM2qYFusdaWIv1pPRp5rNofYmy
3BlSg55mW6W34XJNDsZyeIAmB+0sl1te7leLHoZ7nJNTwrahA121OLq3SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTX4h2htkhJ3Da6jTVf0LZcq+ywMB8GA1UdIwQY
MBaAFCvSw3KE2EQm8F4yW2sEetXPP+TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMt
NTNkOWQzYTQ0ZmNmLzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMtNTNkOWQzYTQ0ZmNm
LzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmegSQgp
/cRBHx5w1tplswSG3xErGGRWLOqxDdXYGFy0K2mB1cn6YNf2U2VS/h2nN9pDftof
G+52x6xSi5lkc4VCImAgtOXOAnWmzMHg9IntuoGcnU92gzQJ/YYuYkh/qhXAVbpM
0CMA8DKL0+UkEuWT102kafMd3e70Bk4oLjMYn/Rb4mxh3M1oH2miYGTEnDyQ8baM
95/tYuNYoZ4Wi0SOTjoJtgM/SndSavbJD42akqaa4fh3/TwO3h0HywA4Y51XEfdN
gxFVvBztP1vf+6wd9cfTYAVypZoHslCojONbUsIynDU797UDA17zuT1YjA2t698n
IKInDctAYoioeQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:03:33 2026 by rpki-client