Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json)
Hash identifier: NlXxfPWVXO/dkRXUw8H+oDGhuqFoEQL6u4M2HZd3/Ic=
Subject key identifier: C1:29:B9:97:72:66:C3:F0:24:BB:AD:A7:DC:F7:87:A5:99:5C:CF:B2
Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566
Certificate serial: 01A1317DA39F46B851107080D39F8DC27DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
Manifest number: 1A9D
Signing time: Mon 12 Oct 2026 19:01:19 +0000
Manifest this update: Mon 12 Oct 2026 19:01:19 +0000
Manifest next update: Tue 13 Oct 2026 19:01:19 +0000
Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: NZOjp56DKUr6/1Od0Kel5EtxwxbpjfM+S8RWkArDN5E=)
2: n4FzGfOnav3SfPJfBEXT0u_w5Gs.roa (hash: sICEtaK7xm2Dr27UIi1Ga/8/sweTHAtwdDoH5h6MJ1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:7d:a3:9f:46:b8:51:10:70:80:d3:9f:8d:c2:7d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566
Validity
Not Before: Oct 12 19:01:19 2026 GMT
Not After : Oct 13 19:01:19 2026 GMT
Subject: CN=c129b9977266c3f024bbada7dcf787a5995ccfb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:d4:63:96:39:a5:db:fa:4b:c1:ed:e5:d9:
b7:aa:7f:5b:82:51:51:58:51:08:f8:ca:b0:c0:cc:
24:78:a2:60:c8:0c:fd:51:72:71:87:07:3a:bc:a3:
48:91:e4:ee:02:ed:89:6a:f2:6a:ab:a5:a5:3b:04:
e2:1a:76:ad:3c:18:2a:09:48:79:d0:8a:0d:b1:7e:
0e:3b:f8:6b:1d:18:b0:24:35:ce:54:49:bd:f8:9a:
00:0b:9b:0a:9e:81:d1:48:2b:a7:84:08:ba:38:f0:
7e:a4:3b:98:cd:1b:ec:36:16:44:e7:f8:68:a5:7a:
46:40:b6:8d:73:ba:a8:77:6a:ed:c9:65:16:b6:02:
a0:9d:49:5d:8c:70:08:13:bc:0a:ef:70:76:9c:02:
f0:2e:72:b5:9e:64:6a:a6:75:da:8c:fa:3b:82:eb:
3f:74:ec:b4:e3:0f:f7:4e:56:7c:c9:57:6a:55:7f:
89:0c:33:22:1d:09:08:07:d5:62:88:a6:03:0f:e5:
c1:ec:4c:d8:62:b3:02:29:a6:cf:b1:87:56:45:f3:
26:90:7a:84:92:f9:4c:04:cc:e5:0c:90:7d:49:6d:
38:e9:c7:48:50:92:97:62:73:4f:06:26:e8:f6:8a:
a0:a5:f1:6c:91:20:47:ee:4e:db:79:d1:52:5c:80:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:29:B9:97:72:66:C3:F0:24:BB:AD:A7:DC:F7:87:A5:99:5C:CF:B2
X509v3 Authority Key Identifier:
keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b5:d3:80:b3:d8:67:5b:a5:87:7d:e9:37:87:91:0e:cc:c9:
81:78:52:bf:84:ca:72:8b:e1:24:17:c7:d0:5a:5f:1f:3c:09:
16:d2:48:0f:65:ec:9e:12:b0:6b:5c:ad:0a:ad:3c:1a:de:ed:
13:74:d3:59:a3:11:fb:e1:89:34:13:a8:d0:f7:b0:91:a7:e1:
6e:52:bf:cc:13:1d:40:c2:6f:7b:d8:a0:79:40:9a:32:c4:b1:
7b:f1:e6:e6:9a:22:26:bc:4a:7f:f2:3f:67:c3:56:73:a9:83:
e4:aa:8c:df:6d:ed:b2:b5:f4:8b:87:29:f8:e5:28:8c:85:07:
57:bc:20:e3:d8:44:b1:2c:5f:5b:ca:7c:ea:99:37:2b:d4:05:
09:ee:5d:60:73:50:61:b1:53:c0:40:a5:1e:76:ad:fe:eb:40:
a8:1b:be:69:5b:83:b7:3e:27:f6:9d:41:08:53:6e:fb:59:62:
c8:8d:b4:fa:02:86:d1:f6:58:6b:ec:c7:a7:48:c2:8c:3a:00:
09:92:8b:2a:d0:7b:a0:99:3a:e4:f6:c7:9c:86:0e:08:30:af:
32:82:f3:49:f6:8e:35:14:34:43:53:b1:2c:fe:0e:00:ed:09:
ab:3f:2b:dd:5a:b2:b3:1a:89:02:d8:9d:18:89:d7:d5:b0:46:
3f:2a:19:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:52:20 2026 by rpki-client