Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: n6YDHyl2FSQLfpMbRYX+TuR1E9Pgf2tgo1mO6mDZxtI=
Subject key identifier: 1C:2A:F0:2C:9B:EA:A7:9D:06:28:CD:97:C8:0B:F9:E5:F4:DD:39:7C
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 01A1DD270D5E2F2C9D0592C43040C1B2C528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 03:01:26 +0000
Manifest this update: Sun 15 Nov 2026 03:01:26 +0000
Manifest next update: Mon 16 Nov 2026 03:01:26 +0000
Files and hashes: 1: 4o_tAUtgP-njAXhmOmcH5E-LEBE.roa (hash: fh84+EgF1SEM+SjNNhOt/IByRahwjmYLOKwI1U+RRhc=)
2: AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa (hash: qSJNJwwtc55ywmper0Gkw+bq36i69BmtauWb1Skowaw=)
3: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: y2h2EsV9G9EBOJVZaHEAUKleZGr/DIM4I8NO5k9oMo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:27:0d:5e:2f:2c:9d:05:92:c4:30:40:c1:b2:c5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Nov 15 03:01:26 2026 GMT
Not After : Nov 16 03:01:26 2026 GMT
Subject: CN=1c2af02c9beaa79d0628cd97c80bf9e5f4dd397c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:aa:93:4c:be:ac:1d:07:d6:a1:8b:35:d7:
ab:82:3a:1d:a7:67:5f:de:a8:af:49:5f:1c:fd:ec:
91:b1:36:75:2a:ad:2b:4a:f6:57:fc:a5:71:c8:56:
69:a4:8c:52:bd:32:88:63:47:f2:7d:79:c1:b0:b5:
2a:7e:c5:f4:3e:23:7b:cd:d6:46:81:46:ff:b8:14:
bb:15:23:bc:27:af:b3:15:00:ac:23:63:1d:1c:5f:
fc:89:3d:0e:d3:63:87:ad:1f:30:b3:34:97:f1:e3:
37:34:00:10:8f:da:ac:b9:c2:8c:a2:bb:df:11:5f:
83:c1:f6:92:02:4f:86:3b:c2:01:f6:dd:88:e4:e8:
c3:89:9a:4c:90:0a:60:36:99:7e:a4:3c:29:84:b3:
f6:04:88:18:b2:de:ae:e5:64:2a:e9:c4:20:5a:36:
d3:c5:30:c4:88:dc:01:84:ce:e1:be:f0:9c:9e:0c:
07:4c:62:38:f0:83:8f:be:6e:57:f3:63:70:93:3c:
85:b5:f2:22:b6:49:c2:e7:a5:9a:11:f7:87:2c:5f:
80:6f:76:17:bf:55:b5:b2:a9:ac:02:22:93:5c:01:
aa:0c:cd:da:59:45:97:58:6b:30:8f:17:0f:88:f3:
95:a0:df:0b:54:3a:4a:10:cd:ed:5b:fd:ec:d8:3f:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2A:F0:2C:9B:EA:A7:9D:06:28:CD:97:C8:0B:F9:E5:F4:DD:39:7C
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:aa:16:65:2e:de:01:0b:bc:7d:8a:4d:27:0b:c8:08:02:ba:
e4:50:bd:60:00:43:97:48:0e:c8:96:c5:95:6f:84:07:8f:a2:
4f:c1:5c:32:91:c8:06:2a:09:32:c0:99:e6:a1:dc:c0:55:de:
48:dd:ea:49:fb:b6:1c:ed:da:22:dc:4f:ce:9d:64:26:ad:8d:
e7:ab:e1:80:af:a4:cb:56:c9:a9:8f:af:43:b8:8d:12:b9:3b:
5d:3b:89:31:8f:10:d0:4a:45:f3:8b:96:b5:a6:a9:45:ad:2d:
00:a9:89:f5:82:0b:87:b9:e0:eb:78:06:dd:7c:36:8d:3b:82:
2c:34:e1:28:ce:57:fb:c7:50:fd:10:b7:69:15:d0:78:63:f6:
77:46:44:42:3c:18:1a:00:c7:84:a4:95:47:03:72:a4:92:51:
54:b4:a1:d7:84:38:7b:fd:e5:1f:c4:13:27:6b:e8:0f:86:9e:
ea:4d:f0:52:45:40:f4:16:44:c8:d9:a4:a0:11:19:7b:60:59:
fa:81:67:85:03:56:27:c1:5e:34:61:ec:f7:1a:86:a4:fc:5a:
29:aa:8f:79:af:35:1a:bb:b1:ca:79:6f:b5:4f:fe:8a:bc:f8:
24:82:81:68:7b:b3:77:39:b8:0b:68:2a:c8:de:d7:57:69:46:
3c:3c:10:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:45:02 2026 by rpki-client