Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: y/aLgii8qjrvIp8lVaAiq4oMW6qYgoVi/uHfQQDQFPs=
Subject key identifier: B8:9B:69:54:42:99:54:DA:53:7E:4A:FA:7B:69:40:77:95:65:13:CB
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 01A0F0B04116B3D01D50ECC150F64AD4B643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0E96
Signing time: Wed 30 Sep 2026 05:01:17 +0000
Manifest this update: Wed 30 Sep 2026 05:01:17 +0000
Manifest next update: Thu 01 Oct 2026 05:01:17 +0000
Files and hashes: 1: 3hgJnNfI5vnswL_sYLdOTjf7N5I.roa (hash: ycnn2788sNjMpLJvxytyorXYGLRDzq//A9PgUTbLZIU=)
2: D6gsyuBvq-v8dHbQhkGm5ZATbvc.roa (hash: +ZoEMWFvRto5Iix5Aq4jw/RuVyb6nTqra5qXLRAnIkA=)
3: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: r1Nx1h929DpS2zyJTctCLNTV97q119VIMDtVNfpB7w0=)
4: xqsec9z85vJMUxRiD3W9Y4bQe3E.roa (hash: UOrcIqqW2rR89U0mPhlsybqgtqu8jW60WAQNXjjrjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:b0:41:16:b3:d0:1d:50:ec:c1:50:f6:4a:d4:b6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Sep 30 05:01:17 2026 GMT
Not After : Oct 1 05:01:17 2026 GMT
Subject: CN=b89b6954429954da537e4afa7b694077956513cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:35:ed:8a:b2:11:15:be:6a:46:64:ea:b9:
d3:7a:32:09:a9:6d:7a:95:84:37:59:59:ca:5b:81:
d2:d1:9a:85:c7:78:12:03:ad:70:72:2b:02:f5:dc:
07:46:90:af:07:b8:01:1f:46:23:39:51:e3:b8:59:
4f:a0:91:ce:eb:4c:1f:da:c6:25:3f:a1:62:c6:62:
2f:5a:3b:e0:e8:8f:b7:1d:ff:ad:31:14:3d:f1:b1:
74:bb:ec:96:da:86:bd:20:71:f6:06:e9:56:53:ed:
b0:1e:49:08:b2:66:12:1c:99:b1:63:82:a6:98:f7:
e3:d8:17:54:c8:6b:47:21:fd:3f:f9:86:93:aa:5a:
13:93:66:cb:a3:8c:b6:2b:43:e4:43:30:b6:9c:05:
2b:c4:df:9c:41:f3:79:8e:6b:d4:0c:5b:20:3c:4e:
d2:21:3b:b1:7c:0f:b0:58:a9:20:7e:a5:fe:28:14:
4f:ea:78:62:86:97:55:48:1b:77:90:64:d7:a8:3f:
f4:0e:a6:a7:40:16:84:9a:c1:c4:65:e3:29:ea:25:
ab:0e:29:6c:ad:f4:0d:f2:fc:80:1d:71:af:ed:21:
56:b9:5a:7b:92:03:84:6e:53:bf:1a:07:a3:de:e2:
74:c4:29:fc:81:e6:d7:e1:c0:90:46:3e:94:76:4a:
a8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9B:69:54:42:99:54:DA:53:7E:4A:FA:7B:69:40:77:95:65:13:CB
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a6:dd:39:cd:b3:aa:25:08:7c:46:1d:33:31:cc:f6:d2:e1:
f6:ea:05:59:8d:48:53:dd:60:e5:bc:95:35:f5:47:ff:3c:b8:
39:b0:40:1d:9b:9b:76:a2:21:be:92:a0:56:2e:db:ed:51:32:
59:5e:22:c0:cb:a9:de:fd:a9:44:ed:80:d3:b8:21:23:2d:14:
be:f4:41:ee:8b:00:4f:4a:e9:a6:cc:68:27:0d:84:84:e5:5b:
30:70:ed:bd:b8:a5:14:d7:5d:95:34:6c:ad:90:a5:05:d7:77:
b6:1b:19:a0:54:72:ca:0c:96:c7:03:3e:d4:97:6d:43:4d:3a:
c7:61:2c:07:c5:98:78:16:1c:24:bb:b1:30:4a:90:e6:5a:8b:
e7:68:1e:c9:d0:15:92:b7:0d:c9:8b:88:2a:a2:28:71:15:04:
b5:b3:e4:f5:e0:3e:e7:ed:f1:b6:ad:c7:a9:07:15:6f:12:ad:
2e:17:15:7a:40:1a:86:e0:79:ae:35:fe:42:77:85:a0:32:28:
76:34:dc:c1:8d:42:ff:47:c7:2c:28:77:7a:f9:fb:50:e1:57:
e8:fa:ca:8a:66:b8:03:9e:2f:a3:54:e1:8b:4b:d7:fc:df:47:
ef:db:4f:8a:2d:15:a3:60:d8:5b:05:3e:ed:90:7d:79:4a:59:
8a:91:00:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 16:36:09 2026 by rpki-client