Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
File: K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft (raw, json)
Hash identifier: z6vmpEkbtSQzlRgtKpuG3NHgxR2NC5DeqEOAcrTajS0=
Subject key identifier: 57:32:EF:DD:B8:B0:FF:81:B4:1E:1A:1E:05:79:1C:6D:41:94:0C:EC
Authority key identifier: 2B:44:DF:4E:07:2E:18:78:63:E8:2E:4F:BE:3A:7A:CE:AF:44:96:63
Certificate issuer: /CN=2b44df4e072e187863e82e4fbe3a7aceaf449663
Certificate serial: 019F935C52A9B1D686C5A88BA9BEB8AA71D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:02:08 +0000
Manifest this update: Fri 24 Jul 2026 09:02:08 +0000
Manifest next update: Sat 25 Jul 2026 09:02:08 +0000
Files and hashes: 1: K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl (hash: GIpKgVd1+pbuVKTTRQ/U/mFaa2GnYEzIHJ1m8ctmIhc=)
2: MCJHMq3DaEcsDlBngovhIGwxerY.roa (hash: ceSH2iap4Ad4G5FgYSyum63drzQRVImpBZ3iM3Jeasw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:52:a9:b1:d6:86:c5:a8:8b:a9:be:b8:aa:71:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b44df4e072e187863e82e4fbe3a7aceaf449663
Validity
Not Before: Jul 24 09:02:08 2026 GMT
Not After : Jul 25 09:02:08 2026 GMT
Subject: CN=5732efddb8b0ff81b41e1a1e05791c6d41940cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:7f:07:79:2e:61:f4:fa:4a:dd:3f:5a:7b:
4f:a4:5b:1e:90:50:7a:6a:d5:fc:f8:45:60:5a:14:
cb:02:63:97:fc:13:9f:b5:4e:8c:c3:bd:fe:85:2c:
70:6e:21:b9:52:99:f8:e3:7f:31:bf:45:89:95:79:
33:83:53:47:bb:aa:bb:9c:02:84:86:d6:52:20:3d:
26:84:60:63:b4:fc:47:8b:f5:9e:28:0c:fe:1c:f3:
9c:2c:14:10:9d:3b:8f:c5:54:db:a8:f4:41:2e:05:
c3:af:39:54:3b:12:2b:bb:fb:6f:94:b4:60:9b:50:
6c:5d:4e:68:b0:69:45:64:7c:ad:97:37:fa:8d:98:
26:1a:fd:4b:a8:50:d2:c9:a5:ec:83:a0:28:24:ec:
0b:60:4f:8b:70:68:2c:1d:9d:84:b9:97:8c:a5:15:
95:02:a1:88:95:74:1a:0c:08:1a:c1:bd:d9:d4:a5:
02:b4:cc:fd:a9:05:76:e7:90:a3:95:42:27:ff:41:
f5:f0:12:c6:72:b1:1f:4f:62:db:bd:30:aa:c6:79:
b0:c8:49:85:67:00:9f:aa:1e:bf:4c:eb:26:da:05:
aa:7b:c7:cd:03:89:da:d8:25:b4:95:64:f5:f9:9e:
a7:ac:29:8f:50:ca:40:be:b6:68:b3:69:d6:27:39:
b1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:32:EF:DD:B8:B0:FF:81:B4:1E:1A:1E:05:79:1C:6D:41:94:0C:EC
X509v3 Authority Key Identifier:
keyid:2B:44:DF:4E:07:2E:18:78:63:E8:2E:4F:BE:3A:7A:CE:AF:44:96:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2a:ba:fa:70:1e:13:7c:d3:60:93:a1:bf:fd:61:37:5b:fa:
47:9e:ea:bf:96:9c:86:73:a4:ef:e0:c0:99:d6:77:4b:79:e7:
de:36:28:d1:e1:13:b7:38:a9:23:82:c6:d9:f0:80:8c:81:30:
c9:bf:9e:b9:7a:44:74:88:06:ca:f2:01:04:d3:36:61:30:77:
cc:c6:1e:97:e5:c7:05:9c:38:55:2b:b2:b2:54:a4:fb:6f:e2:
c8:c7:bf:66:4c:6e:7e:a6:cf:e0:45:d1:86:48:ef:8c:0e:b8:
ed:43:68:e2:e5:bb:5c:8c:6c:06:e9:39:57:c5:4c:d9:d2:76:
7a:36:fa:a4:c9:c1:49:68:5c:fd:09:0c:fd:03:50:7a:e6:4d:
9c:df:f1:35:8d:fe:b9:38:4c:71:cf:f5:62:a0:c5:39:95:3a:
c0:6c:9e:7a:15:47:6a:b8:1d:a4:6a:af:a3:ee:c1:92:d1:58:
47:34:b6:b8:3c:71:2e:6e:5f:ed:8f:5a:b6:6d:ec:b0:81:fd:
0d:8b:ee:a9:a2:4d:73:e7:1e:08:70:b7:75:61:7e:d7:62:3f:
f1:5a:c0:9d:13:14:64:e4:bd:6a:b8:6f:05:93:41:50:7c:4c:
c3:cf:e6:a2:61:fc:dd:82:4a:65:25:c2:6f:a7:d4:e0:b4:0d:
02:15:35:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:21:10 2026 by rpki-client