Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
File: K67n6kgtYqZxBj6sg3ia8585C3Q.mft (raw, json)
Hash identifier: MFiVH4/axaOv507Rl0BrRYk+RAKUjPIhgmEUC48oPls=
Subject key identifier: 99:12:1D:1B:60:6A:4B:B8:13:A2:B3:F1:D3:7C:86:74:D2:C7:68:A1
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Certificate issuer: /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial: 01A03A83204EA6AA0FAD40E73F38CE0D7159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
Manifest number: 0BDC
Signing time: Tue 25 Aug 2026 20:01:07 +0000
Manifest this update: Tue 25 Aug 2026 20:01:07 +0000
Manifest next update: Wed 26 Aug 2026 20:01:07 +0000
Files and hashes: 1: 57OxBTF4X7lyr00PQWTLC_7l0LM.roa (hash: Qu9Cp0fGN2f6UG2Bu1+rVSKBmfLjLGmUIUXyj9DRqEM=)
2: K67n6kgtYqZxBj6sg3ia8585C3Q.crl (hash: cQDx0OvFN+R+4KR/ZZ3tTD7we6K9Qx/ZNH7nll/kgZc=)
3: qjaJHwzc1W-wHJ5kuxqOmW74G_s.asa (hash: R4ifag0KL4ofvb+CfHhgXUOYRgZ/gtNDck18NNBrhqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:83:20:4e:a6:aa:0f:ad:40:e7:3f:38:ce:0d:71:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
Validity
Not Before: Aug 25 20:01:07 2026 GMT
Not After : Aug 26 20:01:07 2026 GMT
Subject: CN=99121d1b606a4bb813a2b3f1d37c8674d2c768a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:4f:3f:18:69:65:8a:3f:36:1e:9a:31:79:
22:f9:d8:85:7c:0c:0b:9a:05:85:cc:7a:9e:0a:e8:
e7:cc:8b:a0:e0:06:6b:9a:4b:5d:b0:4f:54:c7:d5:
2b:54:bd:d1:08:42:bc:cf:26:67:7c:81:ad:99:6d:
68:90:a1:ea:9b:12:cb:fd:0e:8b:66:ce:2f:e6:b8:
fb:04:1b:8b:78:52:8d:a5:69:d3:d8:af:62:de:74:
83:e0:9c:8e:dd:5f:48:be:49:dd:2a:4f:44:11:8e:
ef:08:43:fe:e9:2e:a8:fc:f5:f6:c7:13:6e:f5:c8:
fa:31:61:03:23:ce:1c:31:6b:9e:8f:5b:62:4c:a3:
b2:27:1f:c0:84:5d:9c:b3:d8:5d:6c:4a:e7:67:5b:
87:26:39:58:f3:c8:13:e5:80:3d:f8:d6:fa:85:83:
72:6e:a3:c2:22:cc:80:3f:95:b9:81:71:73:02:4a:
9f:06:ee:35:fb:c5:0f:c7:9d:f4:b9:f9:a6:d0:df:
fb:f9:67:2b:12:8b:8d:fc:00:a3:b8:16:d7:fc:d1:
35:c9:d6:a5:5b:fe:41:7e:a9:22:b1:e9:e5:f6:b9:
38:9f:c4:15:61:07:ee:1a:22:9b:2f:d6:60:3b:c6:
6a:c8:27:bd:1e:ce:0f:55:74:1d:1a:7d:82:ad:a2:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:12:1D:1B:60:6A:4B:B8:13:A2:B3:F1:D3:7C:86:74:D2:C7:68:A1
X509v3 Authority Key Identifier:
keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f0:fe:7d:4b:64:80:0d:b4:08:5c:f1:b6:44:22:ba:c5:61:
03:f5:c3:0d:cf:e7:8e:59:2d:c6:80:26:a7:76:86:e4:d8:15:
d7:3c:a4:14:75:62:50:f0:91:0b:95:50:8d:60:57:0e:f0:3c:
32:84:cf:ba:22:18:ba:6e:1c:f3:88:c1:f9:0b:68:21:2c:1e:
f2:e8:e0:e7:a1:eb:83:fc:dd:e3:55:4c:71:47:95:f1:3d:01:
4d:d3:d1:b8:29:a5:10:29:9d:f0:df:bf:20:0a:a9:ee:18:70:
a3:09:50:34:b0:7d:80:92:9b:4f:d2:8e:dc:b7:00:18:ab:97:
66:9f:e8:15:98:07:fc:43:00:02:f8:09:d7:1a:1f:a2:6b:a3:
dd:39:e1:e1:74:de:98:27:45:31:c3:ec:60:37:a2:03:ea:52:
1a:7d:12:67:81:b3:54:4e:1b:3e:8f:c7:18:0e:a7:55:fb:39:
e4:02:87:2d:c6:c9:8a:76:30:1c:4f:36:15:a4:5f:dd:fe:85:
87:43:6c:66:91:27:63:74:65:cb:0d:42:f7:aa:54:75:c4:b9:
52:a9:55:ea:db:f2:c2:fb:27:5e:46:b0:64:2a:34:a9:b8:ed:
bd:c3:86:3c:66:70:f6:e6:e2:24:0d:9c:af:ac:4c:74:40:0b:
2c:9e:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 05:04:28 2026 by rpki-client