Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json)
Hash identifier: JweHq1d2FOk4jvLzIzYhleuiDpf5rNWOLT+yH/LGSyI=
Subject key identifier: 32:AF:E5:48:06:C6:57:AD:D2:22:82:F6:6F:D3:5E:70:95:04:7B:F7
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial: 019D26288C958F0A4222451122C536748516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
Manifest number: 0F6C
Signing time: Wed 25 Mar 2026 18:01:24 +0000
Manifest this update: Wed 25 Mar 2026 18:01:24 +0000
Manifest next update: Thu 26 Mar 2026 18:01:24 +0000
Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: j32iD6SsO//CdKdGPWDdsHBukw0HGwlZn0tmYQI4TLg=)
2: j9BouMciNW9kiR4MYbw5nEI18Lk.roa (hash: 0POuwWC/mY+BSIA395HwTOeczjcetqnwxmUcBFaUV1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:8c:95:8f:0a:42:22:45:11:22:c5:36:74:85:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
Validity
Not Before: Mar 25 18:01:24 2026 GMT
Not After : Mar 26 18:01:24 2026 GMT
Subject: CN=32afe54806c657add22282f66fd35e7095047bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:58:48:15:30:d9:55:95:50:ba:be:b6:ad:63:
06:49:11:1c:ba:c0:3f:a6:90:9e:28:b0:72:e3:4d:
42:9f:2d:cf:6a:68:fc:e6:c2:8a:8f:57:2f:bc:fb:
12:87:c5:07:a5:a3:5d:31:2a:85:29:9c:ee:2a:aa:
09:e0:a1:0b:64:85:fe:7e:90:46:2b:6c:66:bc:29:
ac:0e:0d:d2:13:6d:2b:f2:06:3a:64:55:f0:5e:b9:
71:d6:22:b9:82:16:3c:25:d7:86:b9:52:44:9e:ce:
80:67:2e:9a:e6:0a:76:dc:47:34:bf:ed:e1:02:86:
80:fb:b7:33:da:51:83:0e:d7:ee:ac:6a:4d:50:6a:
41:a7:ef:02:b8:9b:42:30:1a:ab:f5:fb:23:13:a3:
82:ad:ef:bb:81:fd:b8:85:56:8d:ed:cd:cf:b9:a9:
33:68:80:19:e3:96:91:1b:f8:b9:ee:74:13:11:50:
ca:23:41:b1:66:00:fa:c4:c5:3b:7c:64:16:07:d4:
bf:ff:1d:49:bd:a2:44:db:a2:57:af:73:b5:13:bc:
d2:f9:56:24:6f:99:a8:89:b6:44:3c:66:a6:20:63:
c3:e0:b4:27:44:61:2f:7b:9c:90:e9:b6:6a:d8:44:
aa:f3:0b:93:9d:f9:61:a5:93:89:2c:35:89:6b:12:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AF:E5:48:06:C6:57:AD:D2:22:82:F6:6F:D3:5E:70:95:04:7B:F7
X509v3 Authority Key Identifier:
keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:be:db:3a:28:0a:17:9b:d5:0e:4e:5c:5d:7f:1f:cc:5e:b4:
6e:a8:dd:e9:a5:78:9c:2f:e2:e2:99:fa:fc:1c:fe:53:9c:ce:
49:42:5b:ff:0e:7a:14:36:0f:99:53:58:e1:d7:b2:4f:b6:f6:
b8:22:33:93:33:28:09:a7:76:03:a5:e7:ee:e6:8b:a5:ee:c0:
d2:9c:9d:f9:47:87:f6:17:f5:07:0d:f5:f0:1a:f0:d7:a1:28:
a0:8a:83:fb:39:08:ee:f2:54:5f:c6:dc:74:ea:51:ee:11:79:
b4:09:18:ec:44:9c:c6:4e:75:05:dd:54:1f:1a:ea:52:bc:21:
86:24:20:a0:48:ac:6c:3b:f1:aa:e6:54:e9:50:1f:9f:0a:95:
37:30:1a:7c:c2:64:3d:7f:5a:78:14:05:0b:6e:fd:85:49:9e:
a9:18:4b:6e:9e:89:a3:cc:a6:28:f0:22:9c:2b:ab:e2:5a:70:
1d:68:52:e4:8b:1b:5d:ae:96:1d:ad:d4:99:76:5d:8e:8a:1c:
99:78:28:92:2e:8a:88:a1:52:3f:2f:89:00:a0:07:24:39:63:
51:2c:39:05:8c:72:3e:23:39:a8:52:a9:ed:63:cd:03:2e:67:
b5:99:74:52:9d:44:2a:36:da:50:c4:11:1a:a5:01:c0:1d:ad:
98:70:81:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:12 2026 by rpki-client