Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
File: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft (raw, json)
Hash identifier: ItNq4G4QqHuRvq1pBp16zOVaISlbzsizvbz97TdvoTk=
Subject key identifier: 17:BC:68:A7:0B:0C:9C:03:57:2A:5B:C7:0C:DA:8A:DF:84:92:18:39
Authority key identifier: 2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
Certificate issuer: /CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Certificate serial: 01A1DF4C1C97F6B200728A5D03C3BF472078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
Manifest number: 04C8
Signing time: Sun 15 Nov 2026 13:01:09 +0000
Manifest this update: Sun 15 Nov 2026 13:01:09 +0000
Manifest next update: Mon 16 Nov 2026 13:01:09 +0000
Files and hashes: 1: 86Fyb3G7SUYyzM6ueZuWLb_1Xuo.roa (hash: FgOm/4PuINnAyRzINOUNWX0n6lD1Ih45a+4EbNgehTY=)
2: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl (hash: 1QRZH5/PeLsijMa0jb467QOerlQ/gzdu7T+901IhvME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:1c:97:f6:b2:00:72:8a:5d:03:c3:bf:47:20:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Validity
Not Before: Nov 15 13:01:09 2026 GMT
Not After : Nov 16 13:01:09 2026 GMT
Subject: CN=17bc68a70b0c9c03572a5bc70cda8adf84921839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:43:3f:a1:c6:02:10:b9:2a:05:86:a5:71:
fc:d3:b6:d3:d7:6e:e6:ce:83:68:91:a7:3f:e1:11:
2c:23:d8:41:75:19:94:3e:81:f4:3a:ae:b2:35:fd:
1a:cc:b3:72:f0:1b:21:1f:b7:02:65:15:ad:12:dd:
04:93:f8:ee:48:e1:8e:4c:12:e8:e7:2d:96:7b:66:
af:41:50:7d:31:79:5c:d6:70:28:87:c9:52:c0:b6:
13:05:02:6a:33:3f:22:79:89:0b:a3:f9:c8:41:61:
85:61:4e:0f:31:99:d1:bb:bf:92:bf:66:67:57:2c:
50:e3:2c:7a:96:94:4b:66:05:8f:85:18:13:91:4e:
4c:fb:f7:f6:ea:4f:f0:d7:a1:99:22:c9:d9:f0:ab:
9b:4a:5c:c9:1c:d7:1a:ac:00:ab:41:50:f4:79:ee:
20:6a:7e:06:15:12:53:99:80:39:c3:4a:b3:10:90:
1c:e4:12:37:ba:c6:9d:1b:95:8e:3e:eb:ee:54:44:
ce:3f:e8:73:0c:d6:97:29:17:87:5c:6b:3f:e9:e9:
54:e9:52:9e:83:b1:2f:f4:5b:d6:9d:9f:50:51:2b:
cf:a8:cc:95:5a:6a:ee:8f:27:16:17:8c:48:ea:45:
a2:bb:c3:8e:05:db:b8:d1:f2:6c:80:d2:f6:05:bc:
58:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BC:68:A7:0B:0C:9C:03:57:2A:5B:C7:0C:DA:8A:DF:84:92:18:39
X509v3 Authority Key Identifier:
keyid:2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:33:ac:69:6b:07:dd:81:95:76:19:00:ea:8f:16:86:77:de:
95:c3:ea:f3:af:cd:e2:a2:61:d8:00:81:56:5c:e1:50:e6:9e:
7b:47:98:e7:b7:20:0a:a3:cc:51:56:d0:c3:05:fb:6b:55:73:
f7:6b:97:40:c4:59:b3:25:93:7e:27:39:c5:25:95:5c:67:4d:
c7:ee:78:66:12:c7:c2:fc:0e:9e:31:38:ad:1c:b9:67:e6:0e:
b0:07:21:9d:64:44:6f:ae:cd:cb:92:c6:b3:ad:43:33:f2:a1:
fa:07:81:b1:7d:fc:7e:43:78:d1:d4:d7:3b:25:5f:a7:66:c4:
99:b2:86:c8:de:c5:38:f3:e2:a8:2c:e2:fe:09:fe:ed:8f:58:
22:be:bd:2e:5d:b6:38:82:c0:be:f4:bc:8d:ad:c1:9f:67:ac:
fe:b1:47:d6:ba:3b:db:40:87:95:dc:9f:94:ca:c0:e5:6a:89:
5a:93:b2:6b:3a:5e:99:d4:b3:10:a3:e6:cb:59:5a:0c:b1:81:
2b:d2:ab:22:52:4b:08:48:22:8f:c6:f8:1b:52:00:b8:61:44:
fe:62:ec:d0:59:84:ca:5d:21:bf:bf:da:f6:98:fc:b3:67:a3:
60:4c:75:91:23:d9:b5:b9:48:9c:c5:00:36:85:57:e4:f9:be:
1f:1f:e7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:11 2026 by rpki-client