Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
File: K1wFUAyGXpJL3esa7nsuuMupJ8k.mft (raw, json)
Hash identifier: IGfX4cYvuDkxxkNoXvoqggErOR4OOosM89ZhcTryg7Q=
Subject key identifier: E1:E6:3D:AC:7F:49:96:6A:EC:70:1B:2E:21:63:9F:F6:4B:7C:C6:79
Authority key identifier: 2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
Certificate issuer: /CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Certificate serial: 01A0EC9D42075B98ECF5AA4E81595F239BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
Manifest number: 0580
Signing time: Tue 29 Sep 2026 10:02:03 +0000
Manifest this update: Tue 29 Sep 2026 10:02:03 +0000
Manifest next update: Wed 30 Sep 2026 10:02:03 +0000
Files and hashes: 1: K1wFUAyGXpJL3esa7nsuuMupJ8k.crl (hash: lsvDTiTasjH0zCjO6MRERdSk071i5nqvAUKJ6K5u3Pk=)
2: a4tcSb4rS0ZTyQ0HQWUrw9ZU1WI.roa (hash: 6y7B5mYALV8RuAK+rFKCQl3TCy8ZRF7yNkPXxeMdXfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9d:42:07:5b:98:ec:f5:aa:4e:81:59:5f:23:9b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Validity
Not Before: Sep 29 10:02:03 2026 GMT
Not After : Sep 30 10:02:03 2026 GMT
Subject: CN=e1e63dac7f49966aec701b2e21639ff64b7cc679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:b9:4d:76:dc:19:4a:dd:97:9a:02:fb:b2:
a2:0f:98:e9:64:44:60:df:b6:ed:da:c7:e4:63:b2:
08:fd:81:4b:81:51:f5:9a:d6:6c:fa:18:ab:60:9c:
3b:21:ef:79:b6:ec:91:33:2f:0a:7a:cd:a6:60:c3:
fe:9f:57:70:67:1f:23:db:3b:88:a3:1e:86:9d:ae:
90:ad:26:94:68:3d:0b:f7:89:c9:00:26:20:90:db:
33:67:71:43:1e:6a:af:31:74:a6:03:90:ec:41:0d:
b3:64:90:b8:c5:69:59:14:72:ed:2f:db:06:27:8c:
b8:dc:f8:70:f9:e9:eb:6c:aa:dc:fb:db:c6:10:d3:
6e:77:6c:38:e5:b9:d2:b8:fd:67:c1:84:3c:9a:1a:
f5:12:86:85:d6:db:96:6b:f8:cd:de:75:52:60:9b:
cb:dc:d6:6d:31:93:94:3a:19:41:96:3c:86:69:06:
ad:18:80:25:2a:ec:96:cf:19:f9:2f:1c:bb:0a:06:
64:4d:6a:23:f1:7e:39:c4:11:84:18:ad:f1:32:77:
a5:fd:74:2b:bf:1f:d2:13:f0:a9:12:13:cc:36:92:
4b:66:d5:50:df:3d:23:e0:1c:67:f2:45:e5:e6:69:
a9:c6:a6:67:c8:b4:2d:f6:ed:21:12:64:26:df:da:
20:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:3D:AC:7F:49:96:6A:EC:70:1B:2E:21:63:9F:F6:4B:7C:C6:79
X509v3 Authority Key Identifier:
keyid:2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:44:6a:30:c4:7f:b1:5c:1f:ed:47:a3:2b:29:15:8f:82:94:
f1:e2:73:45:f9:54:8e:8e:5a:65:d0:d5:43:55:23:06:b3:65:
a5:98:90:1c:64:92:c7:8a:9e:6c:2e:aa:1c:ce:dd:e8:09:7c:
67:05:b7:cf:ed:15:69:7a:9c:18:10:3c:e5:e3:b0:e0:1e:88:
0b:28:7e:cc:55:0c:15:8b:de:04:19:86:06:aa:a0:a6:11:15:
ad:49:68:b6:55:ac:74:3c:68:00:f1:4a:d0:13:af:a7:ec:1b:
d6:02:31:7f:11:6e:d0:31:3c:88:d8:9b:50:a7:f0:67:4d:06:
71:3a:89:41:96:82:04:51:25:c6:89:3a:f9:6f:7d:67:a0:77:
3e:92:08:93:29:c3:54:0f:1d:2e:d6:7e:98:55:8c:da:0e:52:
43:0b:b0:a4:71:8b:81:ba:08:ff:77:82:98:a0:f0:13:d5:02:
25:d2:06:7a:99:5a:48:a5:8a:d0:44:f4:e2:7c:aa:d3:9a:fb:
a1:8e:56:c0:9a:9a:83:78:51:65:1d:f7:4c:47:64:44:16:ef:
40:f7:11:0e:dd:e4:dc:95:8c:8f:19:fa:45:a8:b0:de:87:0a:
6b:42:d4:fd:f7:c7:52:a4:6d:99:df:62:7b:3a:0a:9d:df:55:
19:da:cd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:51:39 2026 by rpki-client