Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: aDkQg1Hbwk0appd6gtJYXtIfKs+NriP0lRYPvMKYLB4=
Subject key identifier: 28:26:5C:11:87:BF:61:A8:72:53:F6:02:DF:04:AF:19:CC:CF:07:69
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 01A0DC4D8EB42E371DADCB11A0C54B6CB722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 06:01:05 +0000
Manifest this update: Sat 26 Sep 2026 06:01:05 +0000
Manifest next update: Sun 27 Sep 2026 06:01:05 +0000
Files and hashes: 1: 4o_tAUtgP-njAXhmOmcH5E-LEBE.roa (hash: fh84+EgF1SEM+SjNNhOt/IByRahwjmYLOKwI1U+RRhc=)
2: AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa (hash: qSJNJwwtc55ywmper0Gkw+bq36i69BmtauWb1Skowaw=)
3: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: 3SFhVDlOazmtgLXzlVvUXowASajDQDElAbmTWCOh79I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:8e:b4:2e:37:1d:ad:cb:11:a0:c5:4b:6c:b7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Sep 26 06:01:05 2026 GMT
Not After : Sep 27 06:01:05 2026 GMT
Subject: CN=28265c1187bf61a87253f602df04af19cccf0769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:56:aa:b8:dc:ae:40:7d:dc:8e:b1:22:e8:27:
4a:18:e6:cb:03:60:ae:1f:fa:2f:8f:8d:83:cd:2f:
2d:d7:20:99:e3:49:08:26:d0:98:54:e1:bc:df:60:
95:29:d7:ca:0e:ee:1b:61:07:71:e4:dc:c5:ae:d1:
6c:a8:af:00:c8:bd:53:8e:e8:40:cc:ee:5a:55:52:
c2:09:2a:57:25:dd:a6:48:93:b0:3d:88:60:6f:c0:
c3:02:2b:68:27:ca:1d:87:3e:9e:00:85:eb:d2:28:
20:1c:b7:47:82:d0:82:ee:2a:ab:b3:e1:a6:72:46:
a6:0b:88:b1:22:e0:5f:b2:1d:ae:14:ee:ca:c5:b4:
53:8e:a0:44:f1:3a:e5:22:49:84:46:0f:4b:eb:03:
39:a1:08:df:c1:5a:a2:3a:55:3b:bd:38:1f:7f:de:
68:15:e2:e8:89:c2:47:ec:ac:9e:2b:68:5a:d9:71:
ea:c8:dc:36:fe:fc:3d:95:35:6f:59:c7:b0:e3:7b:
e8:91:63:33:48:17:7b:35:e5:04:c9:c9:f7:41:53:
c6:5f:58:55:11:90:c4:ff:ab:26:8e:66:1b:28:10:
a5:50:d8:4e:41:60:ac:c9:a9:27:c2:45:29:f8:a2:
c2:11:ba:fd:6a:67:81:38:53:62:c6:98:b1:e5:f9:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:26:5C:11:87:BF:61:A8:72:53:F6:02:DF:04:AF:19:CC:CF:07:69
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:bf:02:3b:db:61:1e:6b:6d:84:11:df:75:dc:35:31:fe:af:
a7:c4:f0:d6:14:f3:20:5f:4c:cb:86:4a:4b:c7:30:d0:a4:6d:
5c:ff:dc:e0:f2:f2:3e:b8:41:9f:2e:3b:b6:5d:53:2e:c0:fd:
65:64:dc:1a:41:56:82:98:44:fd:a4:91:05:42:c2:a9:ef:ba:
76:a3:9e:40:7a:b0:02:80:b8:96:c1:95:ef:4e:14:1a:c5:a7:
80:c6:30:ed:0f:16:99:7d:62:91:04:5c:2f:21:9a:99:aa:29:
d8:65:cf:00:33:e2:b7:bf:28:b6:c9:50:90:77:1c:50:b5:54:
f6:01:b9:65:c4:f7:11:37:ea:be:7a:75:f9:1f:61:b6:c2:70:
1e:c8:b0:fd:db:e2:e9:80:22:28:1f:a6:0f:93:6f:1d:c8:76:
16:bb:75:67:7e:45:1f:75:92:7d:88:89:fe:52:93:b0:74:7a:
2b:b1:f2:c4:93:0a:2f:b9:f1:29:d2:e6:21:82:42:ca:51:1f:
75:e6:3f:83:c3:af:c1:c6:e6:48:92:db:27:ef:c5:d3:90:fc:
d3:73:43:07:a7:19:44:f6:d0:e6:80:f9:d8:d0:37:db:32:29:
3c:99:ab:c4:a4:70:6d:5b:11:92:63:bf:ad:55:ed:7d:77:eb:
72:ce:90:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:48:58 2026 by rpki-client