Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: pxTkl0TQLWSMQqZWM5LjDnLMuSbDimVgu87smufo/uo=
Subject key identifier: 42:1B:CB:DB:D7:D7:CE:92:BA:F2:38:AF:9F:96:78:3E:DD:7E:82:90
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 01A1DB3870D9D8D44C7EB9B6A936EDD99E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 1AF7
Signing time: Sat 14 Nov 2026 18:01:11 +0000
Manifest this update: Sat 14 Nov 2026 18:01:11 +0000
Manifest next update: Sun 15 Nov 2026 18:01:11 +0000
Files and hashes: 1: HXApDbBFjZ5P8YYPxxOP43B_61E.roa (hash: PABHtWG+f2nnmj23DcOFA1VpAaq32GiJAfPfR67Vqzs=)
2: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: +t4iXJYdn+gRonWZhsL2QrZRSLnG4xKVP86TAErXonA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:70:d9:d8:d4:4c:7e:b9:b6:a9:36:ed:d9:9e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Nov 14 18:01:11 2026 GMT
Not After : Nov 15 18:01:11 2026 GMT
Subject: CN=421bcbdbd7d7ce92baf238af9f96783edd7e8290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c9:2d:26:be:15:10:09:ab:01:9a:49:0f:9a:
ab:fa:c6:f8:d6:04:3f:8a:84:a4:d4:ba:31:37:ba:
1c:b1:81:d3:9a:6d:1e:9d:71:64:18:a0:6c:12:96:
00:f7:9e:18:b8:a7:de:e3:fb:29:76:29:5c:21:3f:
18:23:3f:1d:db:fe:ad:21:f6:26:f6:1f:d0:ad:12:
84:9e:26:7a:34:12:d8:46:bc:a4:2e:02:38:30:04:
03:2c:4f:35:d0:d3:69:62:4d:80:f7:39:c2:ef:62:
d8:ea:78:be:f9:a6:59:ef:f9:77:52:a5:22:cf:db:
98:dd:8a:14:73:8f:4e:bb:af:9f:aa:43:55:61:b0:
92:f9:7d:93:3e:ce:ea:7a:a2:97:30:e0:47:0a:a8:
0d:1e:66:17:3d:a8:e8:77:61:be:f3:46:98:29:fe:
ac:29:49:99:3b:83:97:c3:9a:c0:4f:63:12:51:5c:
a9:92:5b:c6:2e:82:92:b3:71:31:95:e2:f1:56:25:
e1:a7:7b:86:e0:ad:4e:6d:87:c5:fe:26:79:a9:19:
6e:a2:fe:df:16:70:9a:59:b3:c9:b5:52:5d:88:60:
fa:a2:bc:42:a6:aa:51:4a:94:88:c9:4e:b5:3c:e2:
de:fe:6f:01:e8:21:6f:38:91:d8:3f:ec:2b:bf:9f:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1B:CB:DB:D7:D7:CE:92:BA:F2:38:AF:9F:96:78:3E:DD:7E:82:90
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2c:01:e6:3e:22:e2:77:75:a1:8b:b1:c8:47:2c:7f:f3:de:
93:d0:09:be:14:13:00:83:2a:56:5a:73:a9:c8:df:13:31:eb:
8f:69:c6:ae:9b:ba:3e:0f:94:a8:70:4b:d7:d1:56:9c:e9:4f:
f6:3f:92:fa:48:70:d9:e0:e1:04:8a:6d:37:cc:b1:53:10:10:
64:b5:1e:dd:39:87:80:e4:17:1e:e9:32:d9:a1:e8:d5:92:71:
ce:7c:a7:38:9f:e9:89:55:e1:2a:69:5b:0e:b3:61:65:bf:bc:
2c:45:cd:fc:c7:9e:06:09:b0:68:52:40:73:81:0f:02:2f:89:
83:ea:ea:79:75:05:a2:51:31:51:4b:d8:f8:1d:03:00:f6:12:
c7:b0:6c:eb:80:ad:bc:f5:db:cd:09:e2:50:23:8f:71:f1:30:
6b:59:64:33:0e:b8:00:97:03:3c:ab:00:cd:a5:8b:ff:01:76:
94:41:5a:a8:9e:ee:43:46:c1:ae:20:66:b5:fc:de:fb:f5:3c:
53:34:07:c5:df:47:01:17:e9:d2:87:e9:73:fb:3d:09:29:81:
99:01:31:cc:15:86:4b:e4:7f:9b:a3:57:32:61:d3:be:06:1d:
df:62:a4:a3:8b:e2:20:46:fb:0f:75:85:fa:c6:9c:54:a1:5b:
25:9f:7d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:11:06 2026 by rpki-client