Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
File: K1iORmAJUgViBhvvZbf0gpgomGU.mft (raw, json)
Hash identifier: F3qzHcORYsZa+h3qNUPfAmKkF10ttesdwHsHvOM3bmo=
Subject key identifier: 8B:EB:36:2C:B8:3D:C0:4A:B9:9D:4D:E2:6B:15:3B:66:E5:B6:2D:32
Authority key identifier: 2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
Certificate issuer: /CN=2b588e466009520562061bef65b7f48298289865
Certificate serial: 01A0D87264B20451DCC44F46CCF184CF2190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
Manifest number: 0298
Signing time: Fri 25 Sep 2026 12:02:50 +0000
Manifest this update: Fri 25 Sep 2026 12:02:50 +0000
Manifest next update: Sat 26 Sep 2026 12:02:50 +0000
Files and hashes: 1: BTaxjaAuAYx2Mtyrjvy8RsSBVlA.asa (hash: lfaIjF7uiHYdFf+hzTjn5HPdY1nfdVq2QswXgCrjp4s=)
2: K1iORmAJUgViBhvvZbf0gpgomGU.crl (hash: sCfCVO3FnC2glPI4M+2l6meKU254OQhvTn634pDEjRY=)
3: z2WbFotJlc5p1cMGvSPUFFihXt0.roa (hash: dUVgzJ6l/KKfEgalE16Upz4cVUb7zxRYQ46guX2wkl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:64:b2:04:51:dc:c4:4f:46:cc:f1:84:cf:21:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b588e466009520562061bef65b7f48298289865
Validity
Not Before: Sep 25 12:02:50 2026 GMT
Not After : Sep 26 12:02:50 2026 GMT
Subject: CN=8beb362cb83dc04ab99d4de26b153b66e5b62d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:31:7e:8c:ad:b2:5c:2c:85:37:e7:18:dc:95:
44:dc:04:4f:75:00:2e:8a:ed:2d:9b:ef:84:34:16:
12:02:63:0c:00:aa:1b:92:81:4b:ca:3e:96:a1:03:
36:ee:50:a9:0d:3c:ed:90:98:16:53:65:42:f9:ad:
2d:f2:ea:0a:e8:16:5d:0c:24:a4:c7:e8:5c:0a:cf:
94:f4:cc:db:6c:27:3e:e8:a7:72:ab:5a:aa:48:a1:
9e:30:53:ab:75:09:b0:7d:96:f8:31:38:2c:4f:51:
ae:b9:31:8c:a6:e1:49:31:69:2b:ee:27:c4:60:1f:
18:e1:fc:6d:1f:9c:42:55:2e:a6:f2:de:f1:4d:31:
74:14:c4:d5:cc:fe:d6:43:b8:d8:fb:6f:c5:47:68:
23:f1:3e:65:bc:0a:6f:32:f5:c3:04:55:0d:1e:04:
1c:5f:d2:c3:de:99:69:12:77:96:a6:65:dd:1c:4a:
90:8c:7a:de:ae:b3:84:a9:18:f8:de:c1:e5:ae:86:
34:23:7c:b5:d0:28:8f:92:3e:60:50:bd:6f:5b:46:
69:9b:54:51:fc:4e:f0:d3:2d:b8:44:c1:79:5d:98:
0c:eb:65:96:0c:de:10:b6:07:f7:cd:4f:3c:34:42:
61:df:41:a1:91:aa:e2:51:ca:f7:73:bf:e1:67:68:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EB:36:2C:B8:3D:C0:4A:B9:9D:4D:E2:6B:15:3B:66:E5:B6:2D:32
X509v3 Authority Key Identifier:
keyid:2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a6:23:72:df:cc:d5:7e:05:26:ac:0c:e1:c6:fd:b6:b0:df:
c5:04:19:f6:c7:6a:13:4a:f0:40:e5:10:1e:8a:58:8d:27:5d:
f3:23:32:05:a9:37:b4:2a:16:d5:e3:36:91:5f:c9:8c:1f:dc:
7e:26:50:bf:27:ab:98:31:30:bc:22:92:04:d5:28:8b:ea:e1:
d6:92:32:de:ef:c4:5a:c1:ea:9c:45:32:6c:34:37:90:ff:33:
25:ec:80:4d:a0:53:d9:4a:a4:f3:5b:3a:a1:a0:4d:1d:07:15:
3b:73:b3:1f:40:f9:2a:22:76:de:b1:0a:00:e9:f6:94:65:be:
e0:2e:58:6c:08:7e:aa:8f:c2:4b:9d:a6:8e:8c:6d:50:c4:cc:
41:c5:48:49:4c:b5:40:c9:12:86:60:3f:2c:84:7c:35:80:11:
ec:f8:d1:8d:46:9b:49:86:e0:f0:da:f5:99:ec:84:03:28:c5:
4f:5a:a3:71:cc:39:ce:df:cd:d1:fe:b0:1c:38:ce:92:80:ee:
66:a8:b7:57:7a:67:87:f2:53:93:92:6e:f8:74:98:3b:ae:f6:
1e:a0:30:63:88:ca:ab:87:16:d0:e4:cd:61:6d:22:4a:d7:e0:
78:19:21:2b:b0:42:f2:fc:a2:b3:5a:ab:dd:84:b3:69:60:90:
7a:39:66:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:35:02 2026 by rpki-client