Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
File: K1iORmAJUgViBhvvZbf0gpgomGU.mft (raw, json)
Hash identifier: 7Gs5VfeA5HgqfM/KWk8vBbvijttAatqWHtdI7OZhNBo=
Subject key identifier: 2F:60:CD:55:D3:21:85:3A:F8:DE:BA:22:AD:66:17:45:66:DE:FB:DF
Authority key identifier: 2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
Certificate issuer: /CN=2b588e466009520562061bef65b7f48298289865
Certificate serial: 019D262829E307651FFB468F1DB70C0B2667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
Manifest number: AE
Signing time: Wed 25 Mar 2026 18:00:59 +0000
Manifest this update: Wed 25 Mar 2026 18:00:59 +0000
Manifest next update: Thu 26 Mar 2026 18:00:59 +0000
Files and hashes: 1: BTaxjaAuAYx2Mtyrjvy8RsSBVlA.asa (hash: lfaIjF7uiHYdFf+hzTjn5HPdY1nfdVq2QswXgCrjp4s=)
2: K1iORmAJUgViBhvvZbf0gpgomGU.crl (hash: 6PHsmCJusRNURXmbHbZEvGdAKJvbXstUjQ46WOCqqmY=)
3: z2WbFotJlc5p1cMGvSPUFFihXt0.roa (hash: dUVgzJ6l/KKfEgalE16Upz4cVUb7zxRYQ46guX2wkl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:29:e3:07:65:1f:fb:46:8f:1d:b7:0c:0b:26:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b588e466009520562061bef65b7f48298289865
Validity
Not Before: Mar 25 18:00:59 2026 GMT
Not After : Mar 26 18:00:59 2026 GMT
Subject: CN=2f60cd55d321853af8deba22ad66174566defbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a9:bd:27:42:6d:c1:c6:e2:c9:97:7b:b4:45:
a5:35:2f:61:50:a4:0d:f2:7b:8c:92:68:fb:13:06:
7b:c7:b1:2a:64:54:49:13:e8:d2:ec:54:23:3c:42:
c7:21:89:a2:e2:e1:ea:db:ef:a6:e8:cc:4e:da:4a:
e7:e9:6b:2f:34:61:72:37:39:33:da:7a:4d:a1:67:
20:74:bc:4a:3f:50:9f:8b:48:a5:81:6d:46:9c:4b:
24:5e:cb:83:77:0b:ab:8e:39:04:a1:da:2f:5a:eb:
43:bd:f5:8a:26:ea:7f:24:1f:0a:d4:2a:39:35:15:
93:8a:6f:79:23:9e:8b:69:45:ab:a0:e7:43:61:a9:
a6:a1:68:ca:ef:15:81:e9:5e:47:2d:de:bb:b7:0f:
da:a3:6b:15:dd:b1:39:f3:6b:e3:58:f9:45:2a:62:
09:b6:84:7e:6d:a5:7a:29:a1:33:c4:24:fd:4b:d6:
27:9e:2b:30:8f:c4:01:39:79:18:4a:e1:e0:5b:dd:
91:c9:c2:fe:1f:c4:83:72:00:e7:11:a7:d4:6e:14:
bd:23:c3:89:41:d0:44:cf:03:6e:75:f5:66:bc:87:
bc:88:1d:9a:fc:ec:42:59:be:77:3f:69:11:34:b1:
11:93:8e:57:64:17:56:0a:40:62:fb:9a:3b:28:23:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:60:CD:55:D3:21:85:3A:F8:DE:BA:22:AD:66:17:45:66:DE:FB:DF
X509v3 Authority Key Identifier:
keyid:2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:3e:e5:ed:b0:de:40:2c:70:bf:fa:7b:b1:5d:6c:b9:4e:8f:
6c:dc:87:f2:95:7a:21:5d:fa:f1:dd:17:c5:37:fa:3e:2e:e5:
a0:2c:3c:cc:79:76:51:37:93:b5:7d:34:04:01:4a:bd:93:a3:
ab:20:57:82:6a:06:b2:8e:57:7c:10:1a:e8:3f:41:fd:de:61:
bd:d2:63:0f:8d:3e:66:26:56:8c:7e:53:cb:ce:db:e5:d3:a8:
bf:b9:0f:22:1d:40:1a:31:84:33:d6:87:93:71:e4:08:77:89:
0d:34:7f:34:2d:d4:6d:c1:68:fd:7d:70:24:c4:76:f6:c6:83:
64:7e:7f:9a:b1:af:d8:c7:24:e1:a6:95:ef:51:a3:50:fd:e3:
5c:87:27:30:8c:33:2a:1c:b6:d3:3a:1e:a9:19:29:cd:e7:00:
cb:eb:1e:e0:53:fd:44:22:5c:41:90:c2:1f:1f:b2:d8:cc:66:
2d:6f:c8:b0:a5:4f:ee:d9:75:93:67:79:ad:2c:37:a6:b2:bb:
b4:42:0d:f6:fc:e0:96:a8:ce:6d:7c:33:a4:3e:8f:bc:f5:69:
ef:dd:a3:f4:fd:80:e1:e2:2a:27:62:00:dd:05:91:88:e3:b9:
3a:bf:ad:b8:ab:47:c4:42:d7:e9:04:11:7e:2b:2d:85:2f:77:
3a:02:99:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:35 2026 by rpki-client