Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
File: K1PcIaJCAlQoIMyobiZfioeX0lA.mft (raw, json)
Hash identifier: 1+a2ietz56HkmzERd3qz5gZmP9epqyv8CFdg3/MWPw8=
Subject key identifier: B8:F5:D5:61:F4:26:0C:59:54:0D:E4:53:3A:0A:A8:28:11:9E:8C:82
Authority key identifier: 2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
Certificate issuer: /CN=2b53dc21a24202542820cca86e265f8a8797d250
Certificate serial: 019F916CEE6701FA87B04F39778B866D83DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
Manifest number: 01DE
Signing time: Fri 24 Jul 2026 00:01:02 +0000
Manifest this update: Fri 24 Jul 2026 00:01:02 +0000
Manifest next update: Sat 25 Jul 2026 00:01:02 +0000
Files and hashes: 1: K1PcIaJCAlQoIMyobiZfioeX0lA.crl (hash: CVqNMVZc65aU0rLDHF9In0gA5xi/xA7zMFHbB5Apgjc=)
2: kD6G2PoyT4Y9hFb7K8_JYQqd5fY.roa (hash: GDKNpiIO5829SnDrPg3nh1X5rP785rc0edBI69dLKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:ee:67:01:fa:87:b0:4f:39:77:8b:86:6d:83:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b53dc21a24202542820cca86e265f8a8797d250
Validity
Not Before: Jul 24 00:01:02 2026 GMT
Not After : Jul 25 00:01:02 2026 GMT
Subject: CN=b8f5d561f4260c59540de4533a0aa828119e8c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:85:a8:87:a6:6c:33:97:2c:ec:54:68:26:
fb:a5:37:c2:12:72:e8:fd:d7:a0:23:c3:cf:f9:3f:
c0:78:38:01:6d:ef:69:2a:e4:58:e9:f2:85:e3:90:
25:0b:55:ea:d2:40:91:fa:95:73:f1:3d:cc:ca:f0:
71:c1:80:4e:7c:0d:75:88:b5:31:66:4c:c9:45:23:
e8:41:81:e3:ce:9d:33:4a:af:ca:48:5b:2c:a5:fd:
34:49:87:2b:49:3f:dd:f8:6f:d8:5a:dc:0d:99:19:
92:d8:fc:c5:20:8b:14:ab:44:31:bd:28:5d:4c:a1:
6a:a5:02:91:ed:75:42:48:b0:60:bb:a0:87:50:ff:
ac:b4:4f:2f:dd:89:e7:99:da:91:d5:f5:e7:55:c7:
7c:6b:5a:1a:6a:9d:2a:a7:dd:71:7c:95:c1:b9:3c:
23:d8:6e:51:ef:8f:bd:17:a4:45:dd:b5:95:db:83:
10:ee:df:3a:2e:d3:c0:65:e0:a4:10:5c:c4:0a:19:
d5:42:3a:ab:25:77:28:88:0a:6c:e5:e4:79:d9:69:
5a:98:26:c3:d0:19:63:c2:95:62:4a:cc:3e:3e:16:
f8:7e:32:f6:4f:a4:0a:f1:0c:1d:d6:b6:e8:4f:08:
df:80:c6:9a:9f:2e:2d:2e:a4:3c:de:15:5f:7b:d3:
7f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F5:D5:61:F4:26:0C:59:54:0D:E4:53:3A:0A:A8:28:11:9E:8C:82
X509v3 Authority Key Identifier:
keyid:2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:07:d2:1e:ab:d0:09:75:af:59:2a:89:88:f3:1e:4b:4b:14:
50:fc:0c:72:45:40:be:17:17:82:22:c7:8b:fd:56:00:87:b2:
bf:31:4b:63:a2:a1:d1:ce:57:83:5e:39:6f:de:57:20:6d:f7:
6c:61:13:37:93:ac:b7:1b:19:21:31:76:64:c6:a8:4f:93:a4:
e2:70:46:95:d1:08:9c:19:93:eb:92:53:24:17:43:b7:1c:94:
94:f5:56:18:91:1c:08:3f:23:6e:34:52:b2:c0:2a:dc:2a:55:
47:99:0e:98:db:d0:b0:66:0a:01:9a:a6:ed:44:6b:22:b2:cd:
7f:ab:d9:da:f8:12:e2:3e:ff:c1:90:06:72:5e:6a:ad:02:a4:
29:77:d1:3f:e9:cd:2e:6a:a3:1f:92:4d:9e:03:2f:fd:2c:ac:
6a:b1:96:87:78:01:4f:46:49:a5:e0:ef:e4:84:c9:c3:61:55:
41:cc:e5:85:54:95:8f:7e:bd:09:07:35:9a:10:9a:9a:36:dc:
d5:48:7e:d2:60:8b:da:18:ac:51:d7:d6:58:7d:27:1f:8c:20:
c6:8d:50:2a:9d:33:43:2f:6a:b3:d5:eb:7a:da:86:dc:08:c0:
9d:02:60:1f:5a:ca:41:56:09:f7:ca:79:34:04:d6:b5:81:4c:
8c:39:b8:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbO5nAfqHsE85d4uGbYPcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNTNkYzIxYTI0MjAyNTQyODIwY2NhODZlMjY1ZjhhODc5
N2QyNTAwHhcNMjYwNzI0MDAwMTAyWhcNMjYwNzI1MDAwMTAyWjAzMTEwLwYDVQQD
EyhiOGY1ZDU2MWY0MjYwYzU5NTQwZGU0NTMzYTBhYTgyODExOWU4YzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uqFqIembDOXLOxUaCb7pTfCEnLo
/degI8PP+T/AeDgBbe9pKuRY6fKF45AlC1Xq0kCR+pVz8T3MyvBxwYBOfA11iLUx
ZkzJRSPoQYHjzp0zSq/KSFsspf00SYcrST/d+G/YWtwNmRmS2PzFIIsUq0QxvShd
TKFqpQKR7XVCSLBgu6CHUP+stE8v3YnnmdqR1fXnVcd8a1oaap0qp91xfJXBuTwj
2G5R74+9F6RF3bWV24MQ7t86LtPAZeCkEFzEChnVQjqrJXcoiAps5eR52WlamCbD
0BljwpViSsw+Phb4fjL2T6QK8Qwd1rboTwjfgMaany4tLqQ83hVfe9N/4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLj11WH0JgxZVA3kUzoKqCgRnoyCMB8GA1UdIwQY
MBaAFCtT3CGiQgJUKCDMqG4mX4qHl9JQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzFQY0lhSkNBbFFvSU15b2JpWmZpb2VYMGxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGJjZGItYjVlMi00Mzc3LWI1MzAt
ODM1OTNhZmJiNzUzLzEvSzFQY0lhSkNBbFFvSU15b2JpWmZpb2VYMGxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81NGJjZGItYjVlMi00Mzc3LWI1MzAtODM1OTNhZmJiNzUz
LzEvSzFQY0lhSkNBbFFvSU15b2JpWmZpb2VYMGxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAogfSHqvQ
CXWvWSqJiPMeS0sUUPwMckVAvhcXgiLHi/1WAIeyvzFLY6Kh0c5Xg145b95XIG33
bGETN5OstxsZITF2ZMaoT5Ok4nBGldEInBmT65JTJBdDtxyUlPVWGJEcCD8jbjRS
ssAq3CpVR5kOmNvQsGYKAZqm7URrIrLNf6vZ2vgS4j7/wZAGcl5qrQKkKXfRP+nN
LmqjH5JNngMv/SysarGWh3gBT0ZJpeDv5ITJw2FVQczlhVSVj369CQc1mhCamjbc
1Uh+0mCL2hisUdfWWH0nH4wgxo1QKp0zQy9qs9XretqG3AjAnQJgH1rKQVYJ98p5
NATWtYFMjDm48A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:06:31 2026 by rpki-client