Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
File: K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json)
Hash identifier: z3j/WGb+HLtZVNKNapS53OqGGBdTvFrny787yualqj4=
Subject key identifier: 0F:B5:45:A4:42:DD:82:CD:C4:27:75:E7:25:82:05:81:38:63:58:9C
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial: 01A0E1071B3949104F311F48BB3257890543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
Manifest number: 1A7A
Signing time: Sun 27 Sep 2026 04:02:14 +0000
Manifest this update: Sun 27 Sep 2026 04:02:14 +0000
Manifest next update: Mon 28 Sep 2026 04:02:14 +0000
Files and hashes: 1: 5seVusnKx_Ys9lX6helV3VYtD2U.roa (hash: PZFyRFcdx9T5Z2TzIZsPirDrvtRVVFWfye1bbVqWbBc=)
2: 9btJARByxb1iHyonPUVBkRTOsVo.roa (hash: OoaKNkwSuE9swZGc5WUnPf4K5AgnLBPyAFCvevkhF9U=)
3: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: p9JGGFjEcorzpc5LqjYY6mDD905ZbzBvquztlJPjL6Q=)
4: XWrsnRZ3w0e0DoMnOjNkuaIXctc.roa (hash: hKOZKXZd+O54dyQoUT1ViJz0QYsGp84f/gyggnOHiyY=)
5: _VixDRlDHcr6PrncvZUZ-GW6afw.roa (hash: XqMR9xWk1nvAk22Z7sQHJKRu3wfO9rwjwEWrKeLB+8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:07:1b:39:49:10:4f:31:1f:48:bb:32:57:89:05:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Validity
Not Before: Sep 27 04:02:14 2026 GMT
Not After : Sep 28 04:02:14 2026 GMT
Subject: CN=0fb545a442dd82cdc42775e7258205813863589c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:d8:06:a0:82:2c:87:dc:59:36:08:bb:e2:
4e:8b:54:c5:de:c2:15:8d:42:66:a4:e4:a2:bf:18:
b2:d5:b1:97:bf:a6:b5:d0:46:b5:80:60:61:26:66:
b9:bb:37:fe:5f:f7:4a:99:b8:93:7f:23:26:c9:8a:
20:3a:87:81:36:c0:14:ac:3b:e0:ed:34:70:49:6c:
6c:1a:57:b0:4e:b7:6d:fd:06:cf:d2:67:39:69:7e:
cd:59:4b:da:00:7d:5c:ef:5b:74:e9:2f:09:20:46:
b7:8e:12:12:14:15:4d:d8:f9:82:67:91:42:9a:e6:
70:5c:28:b2:c1:ba:c2:bc:c0:05:a9:f8:5c:39:ea:
f5:40:f7:4c:06:39:39:ac:ec:36:fe:74:1c:78:75:
cc:f6:de:65:61:7a:5a:c8:6d:44:7d:c6:de:00:bb:
4b:19:25:61:04:f8:fd:1d:1b:27:ce:3e:19:a1:e6:
ad:13:dd:2f:90:65:e3:6a:83:16:ef:9a:70:e1:af:
27:b8:b2:52:9a:e5:a1:38:f2:b2:ba:65:1f:67:10:
da:3d:67:47:1b:87:62:26:fb:cc:bb:de:80:6f:df:
ca:01:fa:0f:34:5b:cb:39:88:9d:08:88:b9:c4:23:
eb:86:58:ac:84:5e:bc:73:53:24:66:c2:c4:90:11:
71:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B5:45:A4:42:DD:82:CD:C4:27:75:E7:25:82:05:81:38:63:58:9C
X509v3 Authority Key Identifier:
keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9f:00:51:8c:3a:39:23:8c:6f:a0:b6:1e:66:ca:a1:51:68:
2b:45:64:9c:77:ff:14:7b:53:bc:37:21:51:3e:f9:bb:33:0c:
57:f4:1a:87:d4:fa:c1:2d:2c:df:a7:1c:17:6f:e9:41:87:e4:
83:18:78:84:3d:1b:d4:2b:c2:f8:75:96:27:4e:2c:57:1c:b7:
6b:4e:cd:bd:fe:58:b7:cf:8c:ec:a4:29:29:f6:a1:29:dd:93:
ec:26:d8:70:05:d0:a0:00:9a:b6:25:e8:7d:9e:4a:54:a9:66:
97:df:01:8e:82:bf:75:fa:d0:f7:e0:7a:00:29:1b:27:24:23:
ac:ae:c5:72:75:96:20:3e:2e:5e:74:2e:e4:28:1b:29:38:12:
8a:d8:89:09:b3:a2:61:72:7b:b5:82:aa:9f:b1:2c:73:6f:a5:
d4:56:82:53:89:db:d7:c9:d5:69:29:bf:54:4d:7c:df:ee:60:
8a:72:5e:58:ec:0e:94:b4:4c:6f:28:24:2e:d1:7f:76:53:6c:
05:36:9c:3c:41:a4:c7:8e:11:d4:6e:db:01:9f:7e:ec:0b:0a:
60:19:01:49:37:a1:cc:4c:15:a9:f3:73:d7:25:00:d8:32:bd:
a3:ba:ae:e7:98:43:12:50:e8:b9:48:98:57:b8:83:ab:a2:3c:
95:68:1c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:05:51 2026 by rpki-client