Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: cO+BO/ShBrJBiubNPDT7rTpjbfYfMbM2KfzNUvDadTo=
Subject key identifier: 42:9B:EB:91:57:C0:8A:60:34:C1:83:AA:0E:C6:FA:FE:DF:87:A5:53
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 01A1084A76B475492CF4DED0FF8234FC1424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 0EDF
Signing time: Sun 04 Oct 2026 19:00:59 +0000
Manifest this update: Sun 04 Oct 2026 19:00:59 +0000
Manifest next update: Mon 05 Oct 2026 19:00:59 +0000
Files and hashes: 1: 7kADj_Exqnkd_NooXivCTNgHMTw.roa (hash: xbxLEV7EBAsCMdM5vvQNxcgu+GmkqM8Q10yUTCA4kNA=)
2: FilFuxaHNlZodlAIrDOhTmh6ldo.roa (hash: uhGLiCFEBOn6o6kgW6SCO1d0PO9VmCMZayR7rM7fOKo=)
3: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: XaKTjWmGN/A0EXv4UrGopkfkf0GvuLcgGWxTQoHYgV8=)
4: b2hDoC2QeOdetXxS8h0K7-tyYmI.roa (hash: 9C3SPDVj2hN5qln0VFtPBwpA+3WenkqM7y2GLRnn6bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:4a:76:b4:75:49:2c:f4:de:d0:ff:82:34:fc:14:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Oct 4 19:00:59 2026 GMT
Not After : Oct 5 19:00:59 2026 GMT
Subject: CN=429beb9157c08a6034c183aa0ec6fafedf87a553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a5:6c:3d:cb:8f:b1:50:57:e8:8b:18:e4:1b:
d5:a6:06:a0:52:d7:16:2e:0c:64:22:4f:6c:9b:c6:
38:62:ae:9e:11:a9:e9:c3:f3:9f:c9:7d:30:5c:b2:
1d:f9:d1:0a:30:d7:ce:94:d7:e1:98:28:8f:c2:59:
df:ea:fe:b4:16:56:8f:91:71:fc:0c:07:10:7a:9d:
23:f1:5f:01:da:99:c2:2a:79:34:43:6b:f8:b3:b8:
64:bc:0b:d3:3e:c0:41:d1:2a:95:2d:30:39:9e:4d:
71:22:8a:4d:35:78:c0:a0:46:10:29:bd:c2:81:72:
3d:30:d0:3e:e8:e6:a6:56:d0:c8:11:90:8b:06:87:
be:45:a5:73:e1:5f:c5:aa:23:20:7e:7b:98:fd:52:
45:8c:af:fd:79:98:5a:be:73:8c:04:3a:59:de:7b:
2f:a0:82:33:9f:a8:ec:30:60:ed:84:ef:0b:44:ca:
95:b3:5d:78:82:22:0d:ed:d2:d8:08:40:f2:39:d3:
fb:fd:01:1d:5f:1a:68:7a:ff:9f:0a:4f:22:75:3b:
47:c2:3a:5a:64:ac:5b:e8:4d:40:53:1a:b7:3d:16:
67:a7:fd:e0:d6:5e:02:38:10:5b:59:f2:c1:58:b3:
7a:61:55:3a:a5:98:b8:da:46:f2:a8:98:c5:a1:25:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9B:EB:91:57:C0:8A:60:34:C1:83:AA:0E:C6:FA:FE:DF:87:A5:53
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a9:67:ea:53:79:52:64:62:1b:30:71:6e:aa:e6:0b:8f:85:
d4:5a:c3:2e:41:5f:8a:28:39:22:52:80:7f:2e:77:75:88:6d:
f8:08:12:04:e4:59:de:3c:5e:da:69:5c:3e:af:cd:8d:e9:36:
55:f6:82:5d:81:35:69:91:a1:f1:75:9f:38:31:12:5a:d1:38:
d8:aa:6f:09:eb:21:f5:bf:f7:9e:8a:1e:3f:66:7f:62:31:96:
ec:b9:ff:8c:08:6b:d2:73:f2:25:83:05:f7:35:8b:3b:19:10:
50:78:ac:31:81:2d:69:e9:b8:a2:f4:91:5e:cf:26:d6:7e:7e:
28:bf:f7:29:75:92:f5:c9:b0:40:62:bf:d7:63:62:c4:d4:e9:
44:f3:be:10:87:1a:01:b8:f6:65:8c:f0:35:32:53:f5:50:f2:
7e:bc:64:44:59:0c:8e:d7:84:bc:e6:ec:d9:c9:f0:e8:7b:af:
4e:53:5b:2f:31:02:5b:c7:60:85:49:7c:b8:a4:62:da:19:73:
87:be:b7:e9:1d:cc:b9:25:d3:fe:4d:87:a6:b7:10:17:16:de:
a8:de:9b:35:c5:b3:c3:d2:50:bb:b2:16:0e:6a:5a:5f:2f:98:
36:87:6e:9f:84:d7:7c:a8:7f:b1:5b:99:ba:6c:d5:5e:77:e8:
a5:4c:d9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:37:15 2026 by rpki-client