Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: z+2aQkqidOO+ATr8m+78krnFe82o6c8cgKMcS4/xbMU=
Subject key identifier: E8:24:55:11:19:DD:A0:EC:60:A8:E6:C0:C0:99:28:47:AD:BD:BD:36
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 019E1D5969E90ED81C0B49CB84F07F8FD7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 18:00:59 +0000
Manifest this update: Tue 12 May 2026 18:00:59 +0000
Manifest next update: Wed 13 May 2026 18:00:59 +0000
Files and hashes: 1: HXApDbBFjZ5P8YYPxxOP43B_61E.roa (hash: PABHtWG+f2nnmj23DcOFA1VpAaq32GiJAfPfR67Vqzs=)
2: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: EGGQqfdvR4o+6Wp/Zn8JWg6RBEheLgmWvRHkgo8alL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:69:e9:0e:d8:1c:0b:49:cb:84:f0:7f:8f:d7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: May 12 18:00:59 2026 GMT
Not After : May 13 18:00:59 2026 GMT
Subject: CN=e824551119dda0ec60a8e6c0c0992847adbdbd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:bc:e6:fc:a8:a1:f4:f9:62:f5:37:3f:ae:
98:07:fa:84:42:c0:36:74:6b:9f:4b:0d:f9:81:9e:
3e:b7:8c:f3:69:07:b4:11:92:b5:86:03:aa:59:db:
69:53:8a:4b:53:67:c7:27:95:17:10:5b:06:5b:93:
35:90:04:3a:5c:6b:f0:e5:38:01:37:98:57:8c:bd:
3d:43:b7:d7:30:ab:99:04:5e:31:5e:cf:d3:97:0d:
18:8e:a6:af:59:4d:ff:ac:43:51:0d:1d:e9:85:f2:
75:39:7f:8f:6e:e1:ba:b1:9f:da:a0:09:f4:51:ff:
17:5e:f6:8b:f4:b4:d9:28:06:67:57:fc:3b:b2:c6:
d5:07:3b:0d:cb:72:39:da:8d:a7:f3:84:50:fb:f4:
18:66:1c:82:2a:f8:4b:99:5b:63:15:f5:42:64:d1:
35:78:36:90:d1:36:e8:01:59:b2:c1:1c:21:62:34:
07:18:42:76:e3:73:32:e3:3c:96:5b:fa:36:6f:3b:
8e:fc:28:d2:c4:c2:6d:14:a8:4c:bb:35:cd:cb:09:
76:98:87:bf:6f:24:5b:c5:94:8f:a9:b2:ff:f0:ae:
89:c2:b9:70:b6:8c:4e:c6:77:72:f0:34:30:43:99:
c1:d4:c7:10:29:0b:34:12:fe:a2:2c:38:1d:88:d5:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:24:55:11:19:DD:A0:EC:60:A8:E6:C0:C0:99:28:47:AD:BD:BD:36
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ef:38:06:82:1e:d7:c3:94:9e:55:76:e6:4b:bd:a5:4b:71:
d0:93:06:8e:a1:e8:db:4f:07:6a:b0:cc:70:53:dc:62:b4:e0:
46:fa:d1:4b:9c:b3:ce:b9:fb:b9:5b:85:92:32:8a:e8:52:ea:
a7:92:72:2e:7d:ad:5c:57:d2:e0:d0:db:2d:c7:fe:3b:38:0b:
4f:64:66:6a:16:7b:08:66:20:4d:86:f3:97:13:d0:36:ee:cf:
f4:96:d2:a0:4f:ee:af:cd:25:a4:03:36:cd:c3:e9:2f:2a:65:
9d:36:15:3b:5f:d8:06:3e:0b:fe:54:5c:a6:84:da:d6:53:64:
f8:5c:66:50:81:63:6d:aa:5c:fa:6b:23:db:cb:f7:76:ca:5a:
4f:b9:15:2d:6e:c0:da:b5:89:92:ae:75:ae:a2:21:b3:5a:d4:
a0:f2:33:fc:05:d2:63:17:90:c8:de:42:93:bd:53:68:9d:13:
25:db:1c:56:f9:b1:be:97:a2:59:7c:a3:bc:45:72:7d:2c:c1:
e8:66:2c:e2:8d:58:55:a4:31:1a:31:3a:8f:6d:29:13:62:18:
78:62:e8:53:dd:2d:a8:91:ab:2f:92:3c:dd:e0:cd:80:2c:3e:
d6:0f:81:a4:65:16:0b:47:9e:50:f4:42:6a:d2:93:04:d4:e5:
e9:53:b5:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWWnpDtgcC0nLhPB/j9foMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZDJjMzcyODRkODQ0MjZmMDVlMzI1YjZiMDQ3YWQ1Y2Yz
ZmU0ZjIwHhcNMjYwNTEyMTgwMDU5WhcNMjYwNTEzMTgwMDU5WjAzMTEwLwYDVQQD
EyhlODI0NTUxMTE5ZGRhMGVjNjBhOGU2YzBjMDk5Mjg0N2FkYmRiZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04m85vyoofT5YvU3P66YB/qEQsA2
dGufSw35gZ4+t4zzaQe0EZK1hgOqWdtpU4pLU2fHJ5UXEFsGW5M1kAQ6XGvw5TgB
N5hXjL09Q7fXMKuZBF4xXs/Tlw0YjqavWU3/rENRDR3phfJ1OX+PbuG6sZ/aoAn0
Uf8XXvaL9LTZKAZnV/w7ssbVBzsNy3I52o2n84RQ+/QYZhyCKvhLmVtjFfVCZNE1
eDaQ0TboAVmywRwhYjQHGEJ243My4zyWW/o2bzuO/CjSxMJtFKhMuzXNywl2mIe/
byRbxZSPqbL/8K6JwrlwtoxOxndy8DQwQ5nB1McQKQs0Ev6iLDgdiNVcxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgkVREZ3aDsYKjmwMCZKEetvb02MB8GA1UdIwQY
MBaAFCvSw3KE2EQm8F4yW2sEetXPP+TyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMt
NTNkOWQzYTQ0ZmNmLzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jNDY0ZDYtMGNiZC00ZWZkLTk4YWMtNTNkOWQzYTQ0ZmNm
LzEvSzlMRGNvVFlSQ2J3WGpKYmF3UjYxYzhfNVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+84BoIe
18OUnlV25ku9pUtx0JMGjqHo208HarDMcFPcYrTgRvrRS5yzzrn7uVuFkjKK6FLq
p5JyLn2tXFfS4NDbLcf+OzgLT2RmahZ7CGYgTYbzlxPQNu7P9JbSoE/ur80lpAM2
zcPpLyplnTYVO1/YBj4L/lRcpoTa1lNk+FxmUIFjbapc+msj28v3dspaT7kVLW7A
2rWJkq51rqIhs1rUoPIz/AXSYxeQyN5Ck71TaJ0TJdscVvmxvpeiWXyjvEVyfSzB
6GYs4o1YVaQxGjE6j20pE2IYeGLoU90tqJGrL5I83eDNgCw+1g+BpGUWC0eeUPRC
atKTBNTl6VO1jg==
-----END CERTIFICATE-----
Generated at Wed May 13 01:22:06 2026 by rpki-client