Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
File: K1iORmAJUgViBhvvZbf0gpgomGU.mft (raw, json)
Hash identifier: gSAVXetepXSBhdI5oWDnHPhEZYFq+XuPkO1Q8uMMa0w=
Subject key identifier: FD:C7:1F:15:DC:07:CA:83:4B:E3:07:2A:B9:96:DF:1F:28:84:F4:64
Authority key identifier: 2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
Certificate issuer: /CN=2b588e466009520562061bef65b7f48298289865
Certificate serial: 019F90233F0DFFBBB1DF204B89C8D5688883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
Manifest number: 01EE
Signing time: Thu 23 Jul 2026 18:00:56 +0000
Manifest this update: Thu 23 Jul 2026 18:00:56 +0000
Manifest next update: Fri 24 Jul 2026 18:00:56 +0000
Files and hashes: 1: BTaxjaAuAYx2Mtyrjvy8RsSBVlA.asa (hash: lfaIjF7uiHYdFf+hzTjn5HPdY1nfdVq2QswXgCrjp4s=)
2: K1iORmAJUgViBhvvZbf0gpgomGU.crl (hash: GU4F1C+05m5gflx2ajW0+cpE0PTOml3QrOFtwTNhpPg=)
3: z2WbFotJlc5p1cMGvSPUFFihXt0.roa (hash: dUVgzJ6l/KKfEgalE16Upz4cVUb7zxRYQ46guX2wkl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:3f:0d:ff:bb:b1:df:20:4b:89:c8:d5:68:88:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b588e466009520562061bef65b7f48298289865
Validity
Not Before: Jul 23 18:00:56 2026 GMT
Not After : Jul 24 18:00:56 2026 GMT
Subject: CN=fdc71f15dc07ca834be3072ab996df1f2884f464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d9:9c:28:6f:2e:81:09:44:c8:df:fc:dc:e8:
50:a5:22:f1:b5:8a:12:1d:9f:4d:63:97:ce:c3:79:
7b:cc:61:76:18:6f:57:db:7f:18:5e:0d:d6:af:0b:
4c:1c:d5:65:3a:51:b5:59:04:e7:84:ed:d5:1e:e4:
5c:ea:a0:8b:5e:e1:dd:43:2c:d8:a9:37:e9:d2:d1:
3e:62:42:bd:4b:04:18:da:9f:57:80:d5:e4:1a:93:
b6:9c:1b:b7:f7:a3:fe:86:4f:93:80:a4:30:f0:c0:
0d:b5:96:6a:02:0b:19:f7:cb:43:6d:09:f2:96:3d:
2a:c4:13:71:50:f2:c8:d4:8c:52:f0:d1:21:33:22:
c6:ae:d1:c8:ed:87:70:18:87:94:19:49:1a:0f:5a:
e3:d8:ab:1e:4e:3b:5d:a0:3e:e9:04:ec:3b:85:5a:
dc:7e:66:07:e3:a8:b0:92:05:e5:a4:82:f3:57:4b:
6e:86:43:63:b9:db:8b:7c:26:80:44:38:a0:14:4c:
62:94:2e:b1:25:25:d1:3b:bb:2f:7d:70:11:2c:af:
1a:04:06:5f:c8:6a:12:dd:74:eb:f1:67:52:fe:45:
e8:47:eb:a6:58:07:44:22:39:13:25:e1:bc:83:89:
3a:ec:30:41:ad:cb:f3:78:8c:99:09:c8:ac:47:fb:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C7:1F:15:DC:07:CA:83:4B:E3:07:2A:B9:96:DF:1F:28:84:F4:64
X509v3 Authority Key Identifier:
keyid:2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9e:65:ec:35:10:67:c3:71:8e:e1:f9:78:19:f9:f1:3e:0c:
09:3b:35:07:bd:f6:7e:94:f4:2d:1a:84:09:ce:63:d6:2a:1c:
0f:da:de:4e:de:3a:a7:f2:88:08:92:90:21:91:4c:a3:35:2f:
59:d5:7e:2f:b6:b3:61:c5:61:5a:de:fd:2d:bb:cd:6b:e3:95:
0c:0e:72:c3:68:72:0d:ce:ac:6f:ee:05:00:3f:a0:65:80:d5:
93:5e:a7:92:30:55:15:ef:b9:84:ec:bb:c1:33:76:36:66:3a:
6c:43:a7:40:0a:c8:5c:7d:9b:6c:9c:20:e1:41:5f:b5:db:45:
30:ae:cd:b2:f8:23:a6:d1:c3:75:83:42:3a:7e:6a:7b:6e:8e:
1a:70:90:47:a3:02:16:f1:b9:fd:86:09:a3:bc:9b:ff:65:b1:
a0:55:71:7e:d7:97:ac:6e:ac:56:bd:7f:89:3e:a8:0f:e5:57:
24:c0:1c:5a:42:27:25:69:e8:6c:7f:27:d7:9c:18:37:cd:21:
f5:99:ff:c7:c5:f3:56:14:df:cc:12:6d:d0:2c:70:a0:26:73:
58:e0:b3:0b:30:61:55:09:db:84:5f:98:1a:60:da:ec:7e:40:
88:82:b1:0b:88:7d:cb:2c:4d:77:4d:ed:f7:2f:07:71:56:1f:
79:30:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:44:19 2026 by rpki-client