Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: nPSKB0kCvHGK86sFwZ4gE01JdEASKzJx3EUeayhtM9Y=
Subject key identifier: 7F:BA:65:1B:E7:9D:31:94:B2:2C:27:25:96:99:72:3D:09:10:28:07
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 019F9323B7806323BD9A055C8D0E04F5A486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0DE1
Signing time: Fri 24 Jul 2026 08:00:19 +0000
Manifest this update: Fri 24 Jul 2026 08:00:19 +0000
Manifest next update: Sat 25 Jul 2026 08:00:19 +0000
Files and hashes: 1: 3hgJnNfI5vnswL_sYLdOTjf7N5I.roa (hash: ycnn2788sNjMpLJvxytyorXYGLRDzq//A9PgUTbLZIU=)
2: D6gsyuBvq-v8dHbQhkGm5ZATbvc.roa (hash: +ZoEMWFvRto5Iix5Aq4jw/RuVyb6nTqra5qXLRAnIkA=)
3: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: 1eoJFv1BWFgVaGIMx1RWm4FVW2vo/rpuNNnhP9PvOcw=)
4: xqsec9z85vJMUxRiD3W9Y4bQe3E.roa (hash: UOrcIqqW2rR89U0mPhlsybqgtqu8jW60WAQNXjjrjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:b7:80:63:23:bd:9a:05:5c:8d:0e:04:f5:a4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Jul 24 08:00:19 2026 GMT
Not After : Jul 25 08:00:19 2026 GMT
Subject: CN=7fba651be79d3194b22c27259699723d09102807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f4:29:1c:97:1b:3b:b4:85:96:49:ad:cb:89:
46:b1:3f:6f:ac:90:da:d5:55:32:9d:38:04:03:f8:
26:3c:e6:d5:1a:fd:6c:c4:74:9a:0d:db:b4:56:5e:
b7:2c:5b:e8:25:bf:d3:c5:b7:df:6b:87:77:d4:1a:
84:2b:4c:b0:83:be:cb:7c:08:56:86:fc:8f:db:dd:
bb:58:e8:be:2f:fb:4d:bc:c7:88:99:74:e0:d6:22:
6a:96:93:2e:a8:fd:f7:2c:08:ad:ce:87:b3:5b:6f:
ea:3f:88:35:dc:2f:26:88:ab:8e:0a:90:72:ea:21:
e1:82:76:65:a3:43:7b:49:1e:7b:02:6b:f3:75:6e:
05:1e:2f:7c:8b:10:0b:4c:80:a3:e1:7e:de:d9:39:
58:87:c4:65:b7:d3:53:41:cb:a0:4a:64:f6:7a:1e:
85:4e:50:39:38:82:2e:a6:c6:be:d1:a6:83:e2:9c:
05:bd:35:f2:e8:db:2e:39:dd:45:49:ff:9f:8b:c4:
84:58:66:d7:d2:85:f9:bc:6b:81:e8:3e:f0:82:2b:
a0:7a:99:15:be:42:a2:f1:cf:32:1a:84:0d:57:cf:
d3:60:e0:01:9c:cb:15:64:7b:c3:ee:fb:25:72:7b:
71:ae:28:2f:23:84:2f:2d:88:be:3e:c8:3f:86:99:
6d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BA:65:1B:E7:9D:31:94:B2:2C:27:25:96:99:72:3D:09:10:28:07
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9a:70:fd:47:0b:14:15:17:95:ad:16:1c:f3:3d:15:f4:a7:
70:46:8e:a9:c2:06:94:7d:98:08:f3:80:93:20:68:44:3b:17:
a7:bb:2e:20:fe:17:b3:77:75:26:4c:3f:a1:2b:17:4b:f1:d4:
2b:ef:f2:04:92:35:9e:74:2b:3c:01:00:e2:85:9c:61:f9:da:
b4:f1:d5:a2:2a:fc:03:aa:7a:8a:e6:35:7c:53:06:11:8d:7b:
82:0f:e3:54:9c:ba:92:d9:e5:9b:25:6b:95:d9:0e:b5:55:67:
0e:cd:ad:25:e2:7a:40:b9:5e:f1:62:dd:2a:5f:fc:4a:5d:d3:
18:a9:b1:1e:52:1f:8c:e8:ef:ab:fb:1d:48:6c:48:c6:e3:21:
bc:60:b8:63:0d:38:32:53:b1:da:e4:46:6d:7e:38:71:12:78:
b3:4e:d7:53:58:31:0a:e7:6a:28:96:80:00:56:88:61:58:75:
a5:58:24:e5:c1:ed:bb:4a:3f:9c:60:75:07:09:e6:90:a4:13:
b8:59:e1:c7:77:62:de:6d:28:2d:82:c7:97:9e:66:07:27:95:
ef:a4:df:ea:e7:88:b1:18:3b:a4:19:b4:d1:4c:f9:ca:fb:e8:
62:30:8d:8e:9c:92:a2:35:e3:bf:33:f5:5e:73:cc:12:c8:a2:
2c:51:39:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:44:06 2026 by rpki-client