Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: hT2vTbLouIceVBy/LGQQMeJCawh1U0/kbkcOp9w5p7I=
Subject key identifier: 0F:F7:28:4A:F2:DD:45:1D:43:E1:E9:98:89:06:E0:18:F4:E3:E4:0F
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 019E1E6C290DE76C93BA69C06D772CFF6E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0D20
Signing time: Tue 12 May 2026 23:01:05 +0000
Manifest this update: Tue 12 May 2026 23:01:05 +0000
Manifest next update: Wed 13 May 2026 23:01:05 +0000
Files and hashes: 1: 3hgJnNfI5vnswL_sYLdOTjf7N5I.roa (hash: ycnn2788sNjMpLJvxytyorXYGLRDzq//A9PgUTbLZIU=)
2: D6gsyuBvq-v8dHbQhkGm5ZATbvc.roa (hash: +ZoEMWFvRto5Iix5Aq4jw/RuVyb6nTqra5qXLRAnIkA=)
3: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: NRgznmZESv5E0sjjMUD8nPTScKjZJhm99oRLuvoW+6o=)
4: xqsec9z85vJMUxRiD3W9Y4bQe3E.roa (hash: UOrcIqqW2rR89U0mPhlsybqgtqu8jW60WAQNXjjrjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:29:0d:e7:6c:93:ba:69:c0:6d:77:2c:ff:6e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: May 12 23:01:05 2026 GMT
Not After : May 13 23:01:05 2026 GMT
Subject: CN=0ff7284af2dd451d43e1e9988906e018f4e3e40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:22:62:bc:1b:63:75:45:b6:66:ca:21:ae:
a1:c2:f7:14:7f:ed:3b:4c:f8:bb:3b:3a:d9:bd:80:
f1:5f:6e:b1:66:c5:24:e2:5d:f6:a1:59:8c:36:ae:
77:7a:b2:b6:a2:a0:30:05:0a:5c:0d:8f:c8:43:82:
a0:dc:1a:2d:31:64:79:d9:f1:7c:4d:74:2f:9f:53:
43:83:03:9c:60:3c:ee:3e:99:16:29:a0:9a:31:78:
72:17:02:04:ef:47:15:71:81:bf:7c:65:4c:68:d7:
95:30:2f:7f:58:ed:47:8a:79:22:c8:48:0c:af:20:
b6:3b:c2:68:60:4a:76:55:db:36:e5:9c:7c:48:eb:
f3:ac:97:39:79:c9:bc:b2:5f:65:4f:71:25:be:97:
d8:66:a4:2d:de:b0:50:41:1d:81:99:7c:3e:98:80:
99:9c:1d:aa:b2:d0:0c:24:f3:b9:d0:ea:97:83:84:
42:31:c4:50:d4:0a:e9:59:68:69:cd:b4:1c:ac:60:
dc:b5:f1:d5:a1:61:18:5c:68:5a:09:d2:8b:c2:46:
20:ca:d8:d7:51:cc:cb:91:0e:0b:2e:fd:c1:a2:3d:
a2:6f:18:06:77:3b:62:5e:b9:7b:9f:58:34:c7:d1:
ab:20:c3:98:f5:87:37:f2:0b:5f:32:f1:a4:72:9f:
98:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F7:28:4A:F2:DD:45:1D:43:E1:E9:98:89:06:E0:18:F4:E3:E4:0F
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9f:21:6a:97:39:98:f2:24:99:94:50:25:4c:e1:eb:d7:13:
46:f8:11:ab:a0:c3:59:f3:f5:bb:fb:19:0f:ba:69:6c:28:10:
76:90:e0:6c:80:11:b6:bb:f4:e3:ab:48:48:f4:a2:42:92:1f:
f0:d9:42:5f:c4:fb:9e:d8:a5:6e:61:57:76:0a:6e:f8:9a:58:
23:47:d7:7a:1a:78:28:e7:28:97:a6:05:5b:db:e3:7b:06:a8:
0e:ad:c6:12:2d:b2:85:0f:7a:6d:a4:52:6d:ad:43:e2:c8:3e:
b9:62:b9:85:fb:7e:82:4f:a2:03:a5:c4:7b:06:2d:44:6b:29:
bc:65:1b:b4:b7:38:24:fb:cb:c7:66:bd:22:a7:d2:01:ce:f6:
d9:51:df:b0:8a:93:19:45:a8:be:20:c0:42:98:7e:f7:e6:30:
be:52:cd:87:a0:b8:9c:b4:c1:22:87:1a:3c:60:28:af:75:45:
dc:7b:78:c6:75:af:2c:d1:ba:0b:f5:3e:f1:8f:44:9b:f0:01:
7b:15:08:5f:b1:cc:00:67:bf:6d:2c:3d:77:fe:3d:a2:54:1b:
29:e7:52:9d:df:53:96:ba:86:43:41:a7:68:25:2e:25:91:f8:
eb:e5:24:1e:38:df:4a:76:d7:ed:3d:f7:a3:a9:75:6b:9b:2c:
7f:3b:e2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:35:35 2026 by rpki-client