Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft
File: K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft (raw, json)
Hash identifier: JEgvMnn8SpTQE5vytW1ieYlNXFaQurgxvMbGwjChWVg=
Subject key identifier: 95:C6:E4:01:DD:DC:5B:F2:29:1B:60:26:BE:D6:E9:E7:56:F0:22:84
Authority key identifier: 2B:F8:97:E0:E5:52:26:E4:2A:E3:10:62:4D:0C:DC:8D:97:39:36:CA
Certificate issuer: /CN=2bf897e0e55226e42ae310624d0cdc8d973936ca
Certificate serial: 01A10436C608B109250C27811F3210012507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_iX4OVSJuQq4xBiTQzcjZc5Nso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft
Manifest number: 0100
Signing time: Sun 04 Oct 2026 00:01:00 +0000
Manifest this update: Sun 04 Oct 2026 00:01:00 +0000
Manifest next update: Mon 05 Oct 2026 00:01:00 +0000
Files and hashes: 1: K_iX4OVSJuQq4xBiTQzcjZc5Nso.crl (hash: Wq2ZqShhj1cAysQZz4SnUXbWsVwjne356AtFAN9vBks=)
2: NRBS6ZtboB2iimKF471rwSY1gJo.roa (hash: TinIeELIj1280SRdWKZnK8lTmk3dSvkgs4pLOxMqj3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_iX4OVSJuQq4xBiTQzcjZc5Nso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:36:c6:08:b1:09:25:0c:27:81:1f:32:10:01:25:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf897e0e55226e42ae310624d0cdc8d973936ca
Validity
Not Before: Oct 4 00:01:00 2026 GMT
Not After : Oct 5 00:01:00 2026 GMT
Subject: CN=95c6e401dddc5bf2291b6026bed6e9e756f02284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:bb:ab:6e:71:98:e8:97:ef:bf:c4:93:6c:
f6:b1:d4:d1:f6:7f:28:eb:21:db:d0:30:46:c1:09:
b8:28:f6:9d:7d:ea:b3:f2:7e:8e:5e:76:5a:41:a7:
70:e3:72:ad:36:e4:6e:8d:69:76:f1:64:e5:f9:36:
19:19:b0:c0:89:7c:8f:93:de:a4:b9:55:5f:e4:0b:
e3:c0:1d:2a:bb:d5:f9:5f:86:23:35:ac:d9:7a:41:
ff:4a:8a:5d:6c:83:7e:c3:57:4f:29:8b:bd:80:e8:
af:2f:dd:56:82:ae:a2:ea:59:0a:94:70:cf:c8:7c:
02:4c:30:69:34:14:51:61:6a:02:24:38:38:ea:14:
56:cf:b0:a0:3f:ae:2b:e2:3c:d2:fe:3e:65:fc:27:
6f:8d:e1:ed:b5:c7:5d:53:df:6a:d3:90:0a:b9:b7:
a3:38:e5:6e:5a:bb:63:4c:3b:75:d5:b2:41:d4:ae:
6e:7b:57:c1:35:6a:3d:c0:cf:d9:b5:9a:6f:7f:3c:
2a:bd:26:d6:f6:88:24:df:f0:e7:ba:96:f9:e9:52:
77:67:0a:0b:4d:ca:e2:69:53:f9:cf:63:32:45:21:
c5:2a:a0:f7:a5:24:77:93:c9:cb:e5:01:5c:b1:c0:
68:f8:14:96:d7:25:fa:14:66:32:61:17:5e:95:4c:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C6:E4:01:DD:DC:5B:F2:29:1B:60:26:BE:D6:E9:E7:56:F0:22:84
X509v3 Authority Key Identifier:
keyid:2B:F8:97:E0:E5:52:26:E4:2A:E3:10:62:4D:0C:DC:8D:97:39:36:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_iX4OVSJuQq4xBiTQzcjZc5Nso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:39:bc:8d:2e:d7:0d:51:19:3f:68:d9:0a:78:7b:d1:96:25:
cb:81:1f:c4:90:08:21:cf:06:84:ae:2b:d4:b9:b8:93:65:51:
f6:03:f5:29:c5:45:f5:15:00:a4:f4:95:e5:0b:ca:e0:27:d8:
a1:a9:fd:fc:a2:f6:2e:3c:b5:02:37:11:20:f6:3e:d0:59:e0:
82:e9:07:1c:a4:af:43:82:74:41:6f:ec:9e:fd:ed:54:f4:46:
eb:fb:64:14:a3:78:f9:73:80:3b:0b:81:ab:8e:f1:8c:e8:85:
eb:92:26:a3:71:17:16:7b:9f:0e:bf:3b:fb:f2:32:48:a0:35:
dc:59:2d:d5:3e:cf:35:0c:45:b3:ff:6f:b5:f3:e0:6a:a4:08:
1f:68:2a:5e:e5:58:b7:af:7c:4e:25:38:a0:87:71:98:ec:7f:
41:2f:63:75:ef:87:d6:5b:7f:a2:d5:72:93:50:6d:ec:f0:53:
a1:7d:d9:fa:9c:f4:a8:bc:e3:74:26:02:cf:f4:4b:47:43:77:
1a:fc:9e:3a:8c:33:67:6e:c6:2b:81:cc:75:65:80:01:d9:fa:
d0:cd:ec:64:73:e5:22:c5:b9:51:f5:7b:6e:23:f8:95:bc:75:
3e:5d:fe:ae:8e:7a:fe:04:fa:ea:9f:ba:dd:9a:40:8e:ac:41:
7f:40:42:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:38:35 2026 by rpki-client