Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
File: K1PcIaJCAlQoIMyobiZfioeX0lA.mft (raw, json)
Hash identifier: 7ttV+Pvz85Hy4xr2xOLyLEE4rAIYfnbL0tkj5zOpdR4=
Subject key identifier: E8:D1:D9:2D:D1:9F:FC:FF:4A:A4:54:68:61:55:06:1C:C6:C3:7E:1E
Authority key identifier: 2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
Certificate issuer: /CN=2b53dc21a24202542820cca86e265f8a8797d250
Certificate serial: 019D29616A318E51A417AAC4E9EF0E3FCEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
Manifest number: 9F
Signing time: Thu 26 Mar 2026 09:02:23 +0000
Manifest this update: Thu 26 Mar 2026 09:02:23 +0000
Manifest next update: Fri 27 Mar 2026 09:02:23 +0000
Files and hashes: 1: K1PcIaJCAlQoIMyobiZfioeX0lA.crl (hash: oJ+wDxk4sWdxmDfM1Rk/GxdCyQgakV5bu11r7tbOmrw=)
2: kD6G2PoyT4Y9hFb7K8_JYQqd5fY.roa (hash: GDKNpiIO5829SnDrPg3nh1X5rP785rc0edBI69dLKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:6a:31:8e:51:a4:17:aa:c4:e9:ef:0e:3f:ce:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b53dc21a24202542820cca86e265f8a8797d250
Validity
Not Before: Mar 26 09:02:23 2026 GMT
Not After : Mar 27 09:02:23 2026 GMT
Subject: CN=e8d1d92dd19ffcff4aa454686155061cc6c37e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:7e:a8:3e:60:63:10:e0:27:e6:a6:0d:32:
e2:27:1e:4a:7c:20:29:b7:4d:b1:dd:72:65:76:00:
16:8c:29:9a:41:5d:20:01:ed:03:e8:86:d5:a9:cc:
96:3a:fe:15:9b:12:50:f2:7c:70:53:8b:ed:fe:a9:
21:e0:12:98:07:96:41:0f:3a:15:78:62:42:17:05:
c8:60:70:b5:95:f4:6a:e6:f8:09:e7:69:ac:47:2f:
61:52:85:7b:ff:dc:e6:01:1c:f4:81:a1:d9:22:f5:
11:cc:b0:48:a8:d0:7f:64:2d:b6:a1:e1:32:14:8b:
60:39:92:5e:34:a3:ce:55:91:09:31:1c:34:e0:08:
eb:5e:19:4d:9a:c4:df:80:6b:dc:b6:95:fa:94:e9:
b0:d7:69:17:f8:66:e0:84:48:6a:1b:07:76:71:97:
45:7d:32:be:24:ab:9f:d1:b2:b9:37:60:b5:ff:76:
bd:12:87:07:3f:2a:d6:c0:77:9d:5b:24:07:07:3b:
3d:3c:51:68:ea:c3:29:5d:4a:28:66:81:c4:dd:77:
66:be:bf:de:84:00:ef:c2:62:7d:11:80:88:47:32:
c4:8e:3b:80:35:84:5d:c7:00:e7:ee:f5:d9:0c:4a:
4a:6f:06:40:01:03:05:99:5f:ae:5e:68:d9:15:dd:
11:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D1:D9:2D:D1:9F:FC:FF:4A:A4:54:68:61:55:06:1C:C6:C3:7E:1E
X509v3 Authority Key Identifier:
keyid:2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:99:3e:21:00:c0:30:7b:f5:5e:f7:ce:a7:b7:45:ca:03:2f:
f0:55:ff:1a:d8:ae:36:b8:44:72:7b:e0:0b:64:fd:c8:72:7d:
f9:89:ed:f8:cb:65:9b:b4:1c:ce:bc:79:86:a4:c3:cd:fa:1f:
4b:22:e4:84:8d:f4:0d:3f:e3:cb:aa:93:f5:85:db:b3:77:ba:
29:95:d1:7a:28:32:b3:5d:43:ec:8c:69:97:ce:c3:d4:da:99:
c4:46:c7:e8:d1:70:38:dd:97:b4:2e:0e:a4:8b:ae:c0:3c:ad:
d1:9f:ad:a0:50:17:02:c8:92:b5:97:0e:6a:53:b7:57:30:66:
59:62:16:92:ed:ca:af:18:37:72:ea:47:77:85:67:68:e1:33:
0d:d3:64:85:71:0f:f1:52:bd:eb:f4:f9:9a:9b:d4:20:74:19:
61:cd:ec:89:84:a4:f1:71:ab:60:20:63:6c:41:22:2a:67:c7:
59:b5:cb:22:67:46:f6:05:26:46:75:2e:81:5e:d6:e7:d3:8c:
21:9f:5b:c0:73:63:a7:ff:e8:2a:44:57:25:e2:a2:42:39:47:
35:20:e1:da:d5:64:b3:90:76:4f:95:02:e0:3f:47:14:35:cf:
a1:9f:b4:ee:69:b8:24:8c:a7:88:60:c4:e6:c8:fd:98:dd:80:
b2:a3:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:48 2026 by rpki-client