Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: gBIBr6EZ6fjxCsMFrm4f53mVXCZFMLDdT2ooIG9VHnk=
Subject key identifier: D9:64:C7:D3:9E:AB:C8:7D:BD:1C:1F:FF:06:63:20:68:D5:42:71:3E
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 019D2929AA68A4E5379C9CA38307508E8B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0CA1
Signing time: Thu 26 Mar 2026 08:01:29 +0000
Manifest this update: Thu 26 Mar 2026 08:01:29 +0000
Manifest next update: Fri 27 Mar 2026 08:01:29 +0000
Files and hashes: 1: 3hgJnNfI5vnswL_sYLdOTjf7N5I.roa (hash: ycnn2788sNjMpLJvxytyorXYGLRDzq//A9PgUTbLZIU=)
2: D6gsyuBvq-v8dHbQhkGm5ZATbvc.roa (hash: +ZoEMWFvRto5Iix5Aq4jw/RuVyb6nTqra5qXLRAnIkA=)
3: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: sZawtVNjarMXmBaisKDDDy4g2xObS/eVTBfTHaKyJ/k=)
4: xqsec9z85vJMUxRiD3W9Y4bQe3E.roa (hash: UOrcIqqW2rR89U0mPhlsybqgtqu8jW60WAQNXjjrjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:aa:68:a4:e5:37:9c:9c:a3:83:07:50:8e:8b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Mar 26 08:01:29 2026 GMT
Not After : Mar 27 08:01:29 2026 GMT
Subject: CN=d964c7d39eabc87dbd1c1fff06632068d542713e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:e8:b7:8c:b5:61:d5:bd:d4:ae:51:63:98:
ac:3b:66:59:ba:4f:eb:3f:ec:bb:e7:a2:64:69:6e:
e3:2f:92:d8:ba:7c:54:25:03:e8:2a:10:c7:61:43:
f3:08:d4:a8:ff:a6:94:d6:79:27:90:f6:1c:ae:c4:
88:f2:34:04:7e:78:5f:39:ed:3d:b7:5c:62:f1:57:
63:41:2f:ad:e8:af:7c:45:f9:72:95:b5:88:5a:33:
43:48:fb:d8:4e:99:66:da:6c:43:9e:90:5b:31:f8:
af:e1:6e:2e:66:9c:90:77:f0:1c:6e:49:69:9f:3e:
44:a8:dd:17:2d:46:e7:43:88:d7:ba:ad:ba:f4:a9:
c4:e0:34:49:fc:d7:07:3b:02:68:4b:57:b5:56:6d:
5d:90:f8:90:cb:0d:fa:c3:d8:3b:98:b0:d2:d8:6e:
6c:e8:04:cb:95:24:36:8c:97:06:a5:2f:4a:ff:5b:
5f:3c:38:39:f8:6d:e6:e8:44:e3:36:d3:27:66:b7:
34:d3:b7:16:6b:f9:72:ec:9e:e7:33:09:ba:a3:5c:
8e:31:df:b0:d0:66:c8:45:dc:1e:25:f8:58:c4:e3:
34:ff:67:58:68:58:fc:1f:5b:7a:61:54:5c:8a:19:
5b:d4:0f:30:7a:80:a9:51:83:54:6a:cc:75:b4:dc:
2d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:64:C7:D3:9E:AB:C8:7D:BD:1C:1F:FF:06:63:20:68:D5:42:71:3E
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0f:b4:d1:d6:9f:3d:bf:96:08:a0:39:ae:1e:c4:1e:0b:88:
d4:4a:2c:2b:a3:ee:ea:be:06:51:0b:51:24:1e:a1:12:db:e9:
a0:f1:81:b4:4f:fb:bc:18:fc:bd:22:40:e8:fe:13:b3:e5:b5:
e9:ad:3e:7f:d0:04:3c:0a:c0:df:ee:1e:40:27:92:5a:a6:b2:
48:ab:06:57:27:e4:6e:16:b1:60:87:75:a2:c6:fb:7c:9f:3b:
4b:60:f2:64:e9:80:42:4c:52:43:62:52:fb:7f:a3:12:ec:9c:
5c:11:cd:32:10:77:2c:c7:7f:09:7c:24:39:31:31:e3:41:3b:
df:e4:db:8c:ff:e0:80:4f:86:74:9d:9c:26:3e:cb:ea:c9:42:
2c:db:99:ed:21:46:6a:60:07:a2:40:5c:99:08:19:8a:5e:8f:
50:7d:cc:d7:9a:4f:c2:a3:22:ce:17:02:06:f6:9c:46:f9:cf:
9a:14:af:bb:98:42:59:9f:e4:b5:67:61:15:22:8e:89:4d:cc:
5c:d3:a5:91:ad:ec:ca:9f:db:3a:dd:d5:3c:4d:67:85:2f:5b:
c3:7d:77:d8:e5:a6:44:8c:91:97:14:c6:02:01:a4:90:ec:63:
a9:f7:ef:ea:0b:8a:aa:a1:51:54:e5:fc:8a:ed:d2:dc:9c:88:
b2:b6:b1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:07 2026 by rpki-client