Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
File: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft (raw, json)
Hash identifier: HFh8DasU7mZONW606PV/y51R3FX/79kcnBjv2TTbPIc=
Subject key identifier: E3:37:5E:DC:33:4A:7D:4D:EF:A7:6E:04:EA:14:33:F9:0B:E7:32:7E
Authority key identifier: 2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
Certificate issuer: /CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Certificate serial: 01A0D8A860058AB915731EC1DCFFCC7E294A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
Manifest number: 0440
Signing time: Fri 25 Sep 2026 13:01:48 +0000
Manifest this update: Fri 25 Sep 2026 13:01:48 +0000
Manifest next update: Sat 26 Sep 2026 13:01:48 +0000
Files and hashes: 1: 86Fyb3G7SUYyzM6ueZuWLb_1Xuo.roa (hash: FgOm/4PuINnAyRzINOUNWX0n6lD1Ih45a+4EbNgehTY=)
2: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl (hash: dqtMR464edGKYFPD6m57Bfmle/Z6DuXClZQ/PrRFqXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:60:05:8a:b9:15:73:1e:c1:dc:ff:cc:7e:29:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Validity
Not Before: Sep 25 13:01:48 2026 GMT
Not After : Sep 26 13:01:48 2026 GMT
Subject: CN=e3375edc334a7d4defa76e04ea1433f90be7327e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:a4:e7:03:19:5c:c2:5c:52:3e:a9:7e:1c:
57:47:05:75:6c:f0:44:02:a5:d4:2f:e1:a0:bd:3d:
5d:eb:66:ba:b9:62:85:96:ab:25:5b:5e:ac:bc:05:
21:80:47:de:63:79:e8:6a:a8:30:d5:37:b6:e3:ac:
11:fe:a2:46:c6:eb:41:e3:f0:92:d8:63:c1:9e:40:
06:37:1e:b8:07:aa:e6:69:7c:82:51:c2:3d:03:76:
8a:38:79:3b:e5:6a:ca:04:64:44:0a:b3:69:e6:03:
56:f1:91:6d:dd:eb:85:02:ae:23:b5:a3:fc:e6:b9:
0b:6c:13:ec:ae:21:22:16:ce:5c:3f:40:60:df:3a:
f0:6f:32:3c:2b:5f:49:77:6f:72:9d:87:77:1b:0f:
fa:96:a5:7c:95:54:ad:38:f9:1e:98:ce:60:d0:66:
0b:a9:71:fa:8d:8e:34:e9:1e:8d:d6:2e:7a:c6:d2:
cc:9b:02:98:70:74:90:bf:5c:b0:03:f3:e5:51:62:
0c:f1:7e:21:13:5f:87:30:90:bb:86:10:2b:77:9e:
1d:46:fd:dc:0f:4c:a6:44:9e:a8:85:72:0d:3b:6a:
6e:85:66:11:c7:f9:3f:5e:7f:5a:fc:17:1c:0f:60:
bc:31:3e:be:2d:27:c2:f5:6b:e4:a1:64:76:11:af:
b9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:37:5E:DC:33:4A:7D:4D:EF:A7:6E:04:EA:14:33:F9:0B:E7:32:7E
X509v3 Authority Key Identifier:
keyid:2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d7:89:9d:8e:ce:03:6f:9f:60:51:39:a1:7d:89:04:8a:d8:
69:ef:35:72:d3:3b:db:e0:36:3d:90:b2:eb:ed:c5:2a:84:56:
bb:4d:a2:ed:cb:4d:38:75:3b:5d:0c:f1:1c:83:80:9f:d7:46:
03:29:2c:a7:64:be:10:11:f8:cc:a5:bd:0a:27:45:51:1d:82:
5e:d7:b0:21:1b:28:8d:53:9f:c5:57:c0:62:9b:59:8c:31:d3:
2b:a9:f4:6f:52:c3:bb:5b:b3:2f:63:3e:08:b3:37:3e:1a:63:
fa:f5:1e:25:b9:e4:72:8b:57:db:0b:9f:b0:66:a4:35:61:56:
38:b2:21:4a:00:df:cd:e1:44:2f:dc:a2:5c:89:d3:a3:8e:04:
d3:3c:eb:8f:65:14:95:ba:81:af:01:31:9c:a4:ec:38:48:bb:
6a:65:ac:80:ad:ec:32:92:58:a8:d7:61:a9:12:80:ac:9c:30:
e4:08:71:db:61:fb:cb:e6:81:84:f6:d3:f8:78:cd:8b:35:1e:
9f:e6:27:9b:34:cc:fb:0d:cb:b9:a5:d9:42:91:fc:de:f9:6c:
37:97:02:1b:a8:c1:6c:ba:d7:6b:5f:4d:6e:bf:50:41:9b:43:
44:c6:eb:19:0b:76:99:20:3a:4d:04:23:38:06:ad:16:7c:2d:
07:5b:74:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:02:22 2026 by rpki-client