Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
File: K_CgGXhoxtjDTdFrP0TezF5CNvU.mft (raw, json)
Hash identifier: mWQq1/hDb3qjRdxUr2YqyEI6a2Big83jvcDN74Ep+gA=
Subject key identifier: BD:9C:75:4A:4D:B8:19:F0:E1:C3:05:14:A7:6B:A3:50:09:2E:CC:98
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial: 019F935AFB8C68CA565494F5FB734864E13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
Manifest number: 1180
Signing time: Fri 24 Jul 2026 09:00:41 +0000
Manifest this update: Fri 24 Jul 2026 09:00:41 +0000
Manifest next update: Sat 25 Jul 2026 09:00:41 +0000
Files and hashes: 1: 5MvGTIWvypnynatSCOFj8eEvQKU.roa (hash: zlpMkBrcV9PcuGvhpfeVQrRYScHNx6B9kKbHDGTMD3Y=)
2: K_CgGXhoxtjDTdFrP0TezF5CNvU.crl (hash: ultDsJ4QrLIJzX597vSkdqVmbEAr+K9L52hXNEjWaDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:fb:8c:68:ca:56:54:94:f5:fb:73:48:64:e1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Validity
Not Before: Jul 24 09:00:41 2026 GMT
Not After : Jul 25 09:00:41 2026 GMT
Subject: CN=bd9c754a4db819f0e1c30514a76ba350092ecc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:ba:71:9e:fe:91:a8:db:17:c8:b9:d0:7f:
f0:d3:34:69:e3:a0:f6:ea:a6:ca:7d:b9:6d:76:6c:
ea:a6:ad:cb:36:dc:c0:28:f4:de:02:6d:46:2a:68:
24:e3:97:b0:df:0c:4e:2e:76:9a:4d:af:e3:a4:74:
aa:b4:22:ba:8c:4e:80:6d:f3:41:bb:fc:fa:4a:03:
c6:1a:53:30:5a:20:ac:72:2c:cd:44:fa:42:e0:ef:
24:ac:03:12:91:28:24:d2:65:6c:5f:c2:d8:d8:b9:
c7:99:5f:42:2e:22:9d:2e:ce:6b:d8:2e:32:db:e7:
30:5d:0e:5f:7e:5d:7e:d6:b2:28:ea:c5:28:d3:03:
41:ab:f2:fa:e9:55:13:a7:7c:a9:8b:d3:97:33:5d:
a7:cb:8c:f3:8a:fb:81:ba:40:61:95:c1:2d:96:04:
fe:be:28:7f:b9:14:5c:09:58:42:68:8f:a3:21:ed:
21:b7:09:ea:b7:38:ab:d1:b8:b9:38:c1:11:13:90:
63:0b:c1:cd:fa:1b:7f:9c:fb:12:29:c7:ef:b1:af:
4b:82:34:02:85:7d:ba:c6:47:61:94:2d:c4:29:cc:
7d:7b:33:7c:a3:be:f5:29:e2:18:32:cc:11:91:7a:
98:31:ef:76:dd:9f:18:94:1b:02:81:d2:dd:be:01:
5e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9C:75:4A:4D:B8:19:F0:E1:C3:05:14:A7:6B:A3:50:09:2E:CC:98
X509v3 Authority Key Identifier:
keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ec:47:5b:5f:f0:c6:6e:f3:08:c0:fa:f9:2d:3e:dc:e1:02:
93:43:6d:d3:b1:18:9e:47:e6:54:4a:36:f0:53:93:1c:43:65:
6a:27:b4:2a:2d:8b:cf:0e:1e:c1:15:a3:ea:6f:bf:d4:2a:73:
7f:f6:ac:ee:8b:fd:e7:5f:79:fb:9d:b1:cc:e0:ac:b1:b0:97:
b7:bb:05:68:35:ed:bc:09:f5:81:8f:54:12:59:df:c1:29:b3:
8c:f5:3d:eb:2b:cc:a5:b7:3f:c1:17:c0:52:2e:ea:fc:16:20:
26:8a:6f:f2:72:ee:25:67:d0:c0:e4:e1:96:b9:98:46:ee:92:
1f:8e:d1:d2:17:ff:78:cc:d2:fa:b0:31:55:78:27:75:bf:9d:
70:b1:3c:60:19:25:f3:76:c5:8c:6e:62:08:87:52:d9:6d:18:
e7:6f:36:28:1f:22:7d:59:89:44:77:43:99:4c:cc:78:3d:bf:
e2:f3:0f:85:69:87:3e:cb:be:e1:52:29:a4:5f:84:01:fa:12:
85:fa:50:37:70:f2:86:89:93:91:a1:c6:44:d9:5c:5b:e2:9b:
9a:d5:d3:bf:c2:98:d0:70:c3:8d:b0:9c:f6:5a:7c:dc:db:d2:
9b:db:0b:9f:30:c9:6c:cc:c4:58:11:69:7a:fa:37:3d:8b:34:
e9:8f:4f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:12 2026 by rpki-client