Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
File: K1iORmAJUgViBhvvZbf0gpgomGU.mft (raw, json)
Hash identifier: HcE97adXhINRLH46QM9fJzpg1JEYeExnWUhWBkw1MYM=
Subject key identifier: 32:8C:D7:51:71:58:5F:8B:6A:F5:8B:F3:9C:28:83:05:1E:5B:26:77
Authority key identifier: 2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
Certificate issuer: /CN=2b588e466009520562061bef65b7f48298289865
Certificate serial: 019F9211986E7F03B51945F69BF5FBCF257A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
Manifest number: 01EF
Signing time: Fri 24 Jul 2026 03:00:54 +0000
Manifest this update: Fri 24 Jul 2026 03:00:54 +0000
Manifest next update: Sat 25 Jul 2026 03:00:54 +0000
Files and hashes: 1: BTaxjaAuAYx2Mtyrjvy8RsSBVlA.asa (hash: lfaIjF7uiHYdFf+hzTjn5HPdY1nfdVq2QswXgCrjp4s=)
2: K1iORmAJUgViBhvvZbf0gpgomGU.crl (hash: amyQNTcgMKWE3xuf+ULVXtoBtgbrpF14FSPCV1+i5wk=)
3: z2WbFotJlc5p1cMGvSPUFFihXt0.roa (hash: dUVgzJ6l/KKfEgalE16Upz4cVUb7zxRYQ46guX2wkl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:98:6e:7f:03:b5:19:45:f6:9b:f5:fb:cf:25:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b588e466009520562061bef65b7f48298289865
Validity
Not Before: Jul 24 03:00:54 2026 GMT
Not After : Jul 25 03:00:54 2026 GMT
Subject: CN=328cd75171585f8b6af58bf39c2883051e5b2677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:81:c1:08:00:ae:86:76:97:e9:b7:ec:84:
9b:e3:79:9f:88:a3:81:33:1e:90:18:03:f9:c0:88:
e9:e1:77:2d:95:4b:06:90:5c:11:c9:66:22:22:eb:
7d:75:b5:46:39:a5:1d:c5:bf:d2:e3:c1:90:8d:2a:
a7:ea:c7:86:00:ec:73:a4:63:cd:4e:76:74:a7:d3:
ff:31:c4:9a:1c:45:59:fc:d1:9e:fe:7f:29:ea:cc:
b4:fe:fb:b9:9b:e8:7d:38:9d:5c:fa:9d:52:87:a1:
96:59:c0:63:b0:a0:26:c3:a4:ac:4d:3d:aa:fc:be:
d2:86:71:3b:46:0d:37:bc:f1:fd:b6:1d:73:3f:3b:
ca:3a:c5:1f:2b:c9:cd:f2:31:84:e2:14:bc:39:5b:
70:cc:fa:e9:cb:07:42:3d:a2:f1:f0:48:31:e4:9b:
99:4f:c1:24:b9:1b:dc:ac:76:d6:2d:48:30:38:a2:
00:69:92:d4:48:1b:11:f7:7f:78:08:d6:8b:bb:27:
2a:79:50:e8:41:45:f1:be:6b:29:fd:09:96:04:d8:
84:ce:3c:af:5b:d1:0b:0e:65:9f:0f:ac:9c:dd:42:
18:37:cd:ce:b9:c8:ab:ae:45:7a:eb:66:c8:15:7b:
50:c3:b2:e3:b6:4b:15:5f:1f:d1:c8:65:c7:30:39:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8C:D7:51:71:58:5F:8B:6A:F5:8B:F3:9C:28:83:05:1E:5B:26:77
X509v3 Authority Key Identifier:
keyid:2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:04:f8:53:28:58:ae:46:29:34:3d:55:5f:13:c4:52:b0:1c:
27:88:32:b1:0b:e1:a9:31:bb:0e:47:12:e4:d9:42:cd:22:dc:
2a:77:16:ee:2c:d1:3e:24:62:1a:ed:a3:70:e3:d6:b6:45:d5:
d9:7e:e1:c0:d9:7b:64:5c:7f:4c:ab:33:1a:36:09:c9:9b:be:
1a:86:21:d2:33:9f:cd:81:b7:67:98:d2:5d:eb:c5:19:33:8b:
b8:55:2b:cb:81:26:60:76:cc:a8:54:20:2c:45:52:dc:f0:cf:
41:10:62:3c:c8:c4:09:9e:b6:94:7e:24:ba:f7:c8:c2:1b:d0:
6a:31:ad:4a:b9:e3:d6:90:a6:e5:e0:25:4d:73:42:90:1d:16:
73:cb:50:ec:62:5c:7f:b6:06:17:22:0e:39:65:cf:51:69:12:
7b:bf:07:1e:92:ca:74:c6:47:66:e1:40:5f:eb:4b:cf:1f:91:
c5:6b:f7:a8:41:f5:85:1f:98:e1:ef:bd:63:c9:e3:cf:89:62:
81:ff:ba:b2:c2:bc:72:cc:b0:fb:0d:fe:ae:4c:96:62:13:73:
30:32:86:78:26:b8:7d:2e:5b:0f:9c:e0:26:4d:a6:7b:80:10:
5a:44:21:ab:9f:56:aa:af:48:e7:38:1d:52:8a:a3:a9:6e:9f:
7f:dc:d5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:17 2026 by rpki-client