Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: Lz96cvPwJ/6EWoAyWLFMpArIMFNt7PrL3jLJRedHeMc=
Subject key identifier: 88:00:68:2F:43:5A:1D:D1:15:B0:5E:AC:9E:77:07:49:CE:03:93:CD
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 019F848C5B873AB1E252557752DEB3C05951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 19C1
Signing time: Tue 21 Jul 2026 12:00:18 +0000
Manifest this update: Tue 21 Jul 2026 12:00:18 +0000
Manifest next update: Wed 22 Jul 2026 12:00:18 +0000
Files and hashes: 1: HXApDbBFjZ5P8YYPxxOP43B_61E.roa (hash: PABHtWG+f2nnmj23DcOFA1VpAaq32GiJAfPfR67Vqzs=)
2: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: pBpyUJBvdVnuBeO6NkQPkuYx+yCnCtRtXtuvizWrpsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:5b:87:3a:b1:e2:52:55:77:52:de:b3:c0:59:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Jul 21 12:00:18 2026 GMT
Not After : Jul 22 12:00:18 2026 GMT
Subject: CN=8800682f435a1dd115b05eac9e770749ce0393cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:58:9f:a0:89:64:a7:f7:59:cc:ed:e2:ef:
50:3d:1a:c3:39:2c:db:82:d3:aa:cd:42:eb:2e:af:
0a:7f:06:27:bc:52:d3:5e:dd:0d:6b:8a:9b:17:bb:
a1:23:08:72:8a:e2:94:bd:4a:40:04:72:e2:4a:83:
e1:97:55:19:07:8f:cf:90:0b:18:c7:a9:10:14:07:
57:18:d1:8d:77:2c:e9:82:85:e1:d3:e5:f7:07:d4:
6d:00:35:e6:e4:4a:32:fa:ba:b2:4b:b6:48:6d:4f:
52:2f:b4:c5:3b:62:27:9a:48:e7:e0:02:2e:fb:83:
1d:74:61:d7:84:18:5e:a6:0d:cd:3f:b5:8b:94:dc:
13:0a:3f:d9:25:d9:a2:f2:ff:5e:73:1b:97:4d:c3:
05:fa:e8:4e:d1:8a:4d:5f:c2:14:63:cd:51:14:da:
56:64:12:93:3c:10:aa:99:8e:f8:5a:fe:07:d8:58:
af:d4:1f:d5:b5:15:fa:07:07:ed:c7:87:bd:0b:5c:
78:3a:4e:61:b5:03:0f:26:bf:21:89:64:bd:2e:a3:
8d:2b:11:66:d9:1a:d9:95:10:92:ca:f1:85:c8:d7:
a5:2d:96:4b:40:46:dd:c4:b3:ff:bc:9f:2f:1c:f9:
a5:84:86:8b:b1:0a:c7:74:7c:5a:81:d5:a8:bd:82:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:00:68:2F:43:5A:1D:D1:15:B0:5E:AC:9E:77:07:49:CE:03:93:CD
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a2:25:10:cf:63:cd:f9:2e:96:91:0c:06:6b:0c:5c:45:71:
61:f0:06:89:77:5e:47:c2:00:75:58:5d:41:38:e9:6b:e5:41:
e1:b7:d5:42:d5:ed:5c:11:82:7d:a6:45:8e:9f:45:41:1a:76:
4f:06:a1:ca:05:48:0c:6a:05:83:e7:d4:5b:88:ad:9d:62:d7:
24:63:35:42:ce:82:2a:ca:41:87:28:76:d7:cd:35:75:28:d7:
64:66:c6:8b:70:c1:15:fc:d5:13:75:d4:54:dd:b8:f0:23:6d:
4d:d1:a2:51:14:6e:a2:63:3f:f4:a9:f2:bf:46:e6:41:04:5b:
f4:5e:5a:f3:ea:65:76:d2:b2:50:95:c1:f7:bd:80:6f:0d:0c:
c5:e5:ba:28:a3:c8:21:2f:6c:cd:76:98:70:1e:ec:0f:d0:cc:
f6:9d:89:c0:61:aa:a7:eb:b0:38:34:21:dc:18:66:70:1c:58:
22:01:02:22:ec:1a:9b:a8:70:6e:32:d9:7b:91:78:04:c2:73:
f0:fe:b2:82:16:c3:11:81:fd:94:ad:87:b8:72:fc:26:a3:99:
73:ac:d3:78:3a:25:ba:4c:0d:cd:08:6e:50:50:85:6e:03:11:
b7:c7:f3:58:0c:c3:b0:8f:7d:03:bb:0c:36:e9:01:8f:5a:a6:
76:a7:45:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:18:52 2026 by rpki-client