Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
File: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft (raw, json)
Hash identifier: OFKtpZgUezKdiJcPPTBTIQDNdSyMZVHaBhIaWGRamJQ=
Subject key identifier: 7E:96:BA:A0:0D:85:64:E5:3A:8F:F7:AB:7D:88:71:27:3D:11:8B:C0
Authority key identifier: 2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
Certificate issuer: /CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Certificate serial: 01A0F3E872B95A253CEF0E2950CDB10F9361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
Manifest number: 03FF
Signing time: Wed 30 Sep 2026 20:01:32 +0000
Manifest this update: Wed 30 Sep 2026 20:01:32 +0000
Manifest next update: Thu 01 Oct 2026 20:01:32 +0000
Files and hashes: 1: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl (hash: gXNFFIaG2ToMKOHWS39KfIQlZzcG/mqFXdCmNUEmea0=)
2: TV4yZeh5gb-YNu16ne89KzqjkHI.asa (hash: ZF+GnFpj0JJbI8NWDxgtBCaESGA8VYEeovm/zlGZB0A=)
3: b2FwzXwPA4h4cgwtnyc60OtTa88.roa (hash: lkanuRYvWV1r1485k4lQhFz2YZsaICmZonIaOSauHis=)
4: sX-7jKd4Jkup4SzLh7V9fhcXJIY.roa (hash: zRqjfBS/ZWhDgqQc0xO/XDUwPIazRjKs3hCDGDdnfh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 16:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:e8:72:b9:5a:25:3c:ef:0e:29:50:cd:b1:0f:93:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Validity
Not Before: Sep 30 20:01:32 2026 GMT
Not After : Oct 1 20:01:32 2026 GMT
Subject: CN=7e96baa00d8564e53a8ff7ab7d8871273d118bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:7b:15:15:da:73:85:fe:93:4d:49:8a:4d:
2e:0a:1f:5e:73:f2:da:d8:a9:36:a8:38:5a:21:43:
e4:64:a5:0f:c5:8c:13:65:16:47:74:66:0a:03:b1:
12:94:c2:3a:a1:f6:8b:4f:74:be:8a:fe:53:c8:b7:
50:fe:52:2d:ab:51:48:d7:3e:83:b8:ba:38:c8:b4:
11:b7:13:8d:50:a0:6a:43:1e:f2:78:b5:be:ca:03:
a9:f9:62:2a:78:8e:e3:07:e1:3e:9a:d6:4d:b5:84:
62:57:00:c5:0c:22:73:a1:32:15:3e:1a:39:1f:fb:
9c:d5:33:db:7b:17:c2:05:3e:f3:0f:80:51:e3:5c:
cc:cd:6e:e8:2e:25:fb:b6:b0:3b:d4:50:74:f6:84:
44:49:17:5a:c3:c9:23:2c:33:1b:ff:c9:ae:6e:a1:
36:d7:5d:63:f0:09:64:38:a3:d1:96:45:5d:94:98:
4c:28:91:7e:f3:fd:63:0d:9e:a2:0d:fe:40:33:bb:
da:56:6b:5c:c6:e7:c9:c3:a6:05:a4:02:58:9e:92:
d4:c4:3d:29:6a:a4:4c:bc:6d:db:f3:9e:89:bb:fc:
bc:d4:16:55:bb:46:2d:77:97:94:8b:2b:27:b7:31:
7d:0a:5a:09:cd:80:15:ce:1b:f6:93:44:b0:59:b7:
d3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:96:BA:A0:0D:85:64:E5:3A:8F:F7:AB:7D:88:71:27:3D:11:8B:C0
X509v3 Authority Key Identifier:
keyid:2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0a:7b:3b:7a:a0:40:36:5b:6c:eb:a1:8d:c0:d3:10:c3:c8:
65:c8:d5:cf:95:bf:e7:6c:80:5a:cd:92:d6:9c:3b:c2:c3:cd:
70:c4:94:48:28:f1:74:44:c5:1c:4e:d7:d6:c6:c6:1f:05:2b:
91:fc:80:8b:b7:21:7e:b3:6b:bf:ef:69:03:26:58:0c:d0:e1:
5f:71:b5:dd:7d:c2:66:ce:7c:74:8e:3f:35:ff:1a:c0:47:55:
8d:88:81:fc:21:1a:92:bf:89:b9:16:dd:db:20:52:6a:e9:7f:
b4:44:b0:cc:64:46:90:0e:b3:ce:2f:ee:76:65:25:42:58:4a:
96:ea:02:35:6d:7a:c5:8c:2c:94:51:30:b3:94:99:69:70:63:
37:c6:d3:b4:e5:1e:e5:12:32:0f:a1:f7:3c:ae:1a:de:a2:8b:
1e:4b:45:83:dc:6f:66:67:9a:f2:23:83:cc:00:61:7a:a0:6b:
fa:3f:5e:7a:b8:96:5a:fd:3f:12:fe:db:4e:64:f9:00:28:df:
ee:d0:85:e2:e8:be:8f:9d:a2:2c:f2:1a:6b:67:de:c7:79:aa:
ee:1c:c8:a5:36:e4:65:a2:ea:76:6c:50:90:e0:8c:8d:90:d7:
55:fb:46:c6:30:f7:18:c2:1d:3a:49:05:7c:9f:c8:d6:66:0d:
19:50:b2:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDz6HK5WiU87w4pUM2xD5NhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTM2MTQ5NjU3YTYyYmUzMmUwZTE1NzE4MjdjMmIyZjM1
YTBkM2QwHhcNMjYwOTMwMjAwMTMyWhcNMjYxMDAxMjAwMTMyWjAzMTEwLwYDVQQD
Eyg3ZTk2YmFhMDBkODU2NGU1M2E4ZmY3YWI3ZDg4NzEyNzNkMTE4YmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf17FRXac4X+k01Jik0uCh9ec/La
2Kk2qDhaIUPkZKUPxYwTZRZHdGYKA7ESlMI6ofaLT3S+iv5TyLdQ/lItq1FI1z6D
uLo4yLQRtxONUKBqQx7yeLW+ygOp+WIqeI7jB+E+mtZNtYRiVwDFDCJzoTIVPho5
H/uc1TPbexfCBT7zD4BR41zMzW7oLiX7trA71FB09oRESRdaw8kjLDMb/8mubqE2
111j8AlkOKPRlkVdlJhMKJF+8/1jDZ6iDf5AM7vaVmtcxufJw6YFpAJYnpLUxD0p
aqRMvG3b856Ju/y81BZVu0Ytd5eUiysntzF9CloJzYAVzhv2k0SwWbfTGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6WuqANhWTlOo/3q32IcSc9EYvAMB8GA1UdIwQY
MBaAFCuTYUllemK+MuDhVxgnwrLzWg09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVOaFNXVjZZcjR5NE9GWEdDZkNzdk5hRFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jM2U0MTktODY5MC00NWUwLTg1NGIt
NzgyMGE1MWVkODM0LzEvSzVOaFNXVjZZcjR5NE9GWEdDZkNzdk5hRFQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9jM2U0MTktODY5MC00NWUwLTg1NGItNzgyMGE1MWVkODM0
LzEvSzVOaFNXVjZZcjR5NE9GWEdDZkNzdk5hRFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgp7O3qg
QDZbbOuhjcDTEMPIZcjVz5W/52yAWs2S1pw7wsPNcMSUSCjxdETFHE7X1sbGHwUr
kfyAi7chfrNrv+9pAyZYDNDhX3G13X3CZs58dI4/Nf8awEdVjYiB/CEakr+JuRbd
2yBSaul/tESwzGRGkA6zzi/udmUlQlhKluoCNW16xYwslFEws5SZaXBjN8bTtOUe
5RIyD6H3PK4a3qKLHktFg9xvZmea8iODzABheqBr+j9eeriWWv0/Ev7bTmT5ACjf
7tCF4ui+j52iLPIaa2fex3mq7hzIpTbkZaLqdmxQkOCMjZDXVftGxjD3GMIdOkkF
fJ/I1mYNGVCyjg==
-----END CERTIFICATE-----
Generated at Thu Oct 1 04:31:54 2026 by rpki-client