Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: cyeNhTN2sItAkg/2JIDaIXbYV/9KnJQUwozbbUnbcu8=
Subject key identifier: 46:4C:B9:98:17:D8:BC:2A:DB:A6:54:19:D5:87:72:1C:BC:A5:3E:BB
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 019E91387FE2E37BFDD8FADB728610DF6886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 1943
Signing time: Thu 04 Jun 2026 06:00:59 +0000
Manifest this update: Thu 04 Jun 2026 06:00:59 +0000
Manifest next update: Fri 05 Jun 2026 06:00:59 +0000
Files and hashes: 1: HXApDbBFjZ5P8YYPxxOP43B_61E.roa (hash: PABHtWG+f2nnmj23DcOFA1VpAaq32GiJAfPfR67Vqzs=)
2: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: nPxRDW8P5UYipqmWfeu3mBaZVWclj4Ahl/Gi7y5Mptg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:38:7f:e2:e3:7b:fd:d8:fa:db:72:86:10:df:68:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Jun 4 06:00:59 2026 GMT
Not After : Jun 5 06:00:59 2026 GMT
Subject: CN=464cb99817d8bc2adba65419d587721cbca53ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:34:8d:70:fd:e7:2a:d7:2f:46:d0:54:80:
97:cd:93:d1:46:5b:8d:cf:0e:a4:a7:52:b4:14:22:
ee:82:bb:0d:3f:f9:7e:4a:f2:54:a0:c1:dd:75:fe:
71:c2:38:81:fb:26:b6:72:52:18:19:12:04:56:48:
52:1d:1d:a2:20:2d:a2:e5:d0:95:f7:87:0b:b5:d3:
be:c5:86:7f:57:88:b6:a1:1d:84:9e:5c:0d:cf:e3:
b1:91:4c:94:b8:55:93:f7:85:4c:4f:86:a4:ab:bf:
07:26:b3:6d:9d:31:00:3d:3a:66:c1:62:d6:59:3e:
66:15:cc:a6:3b:31:6e:69:8a:9a:5b:ed:fb:06:fa:
7d:0b:4a:d1:2d:2f:ad:38:66:f5:8f:60:e7:d7:b0:
47:1b:91:5e:b5:43:a1:1b:9f:49:f0:91:1b:cb:7c:
16:db:7d:b3:b9:ad:f9:2a:e5:89:ec:6c:66:b3:f9:
27:12:bf:46:d4:10:90:57:cb:43:01:aa:6c:52:98:
ba:3b:fe:65:69:57:a4:14:5c:74:79:d9:f8:d1:a9:
63:e0:98:d5:d9:fc:1d:a3:17:59:ed:35:41:aa:0e:
18:aa:2b:8d:2b:74:a4:ff:46:01:e2:be:a8:a0:a1:
25:a7:68:68:bc:ff:25:4f:20:92:1d:b3:ae:6c:97:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4C:B9:98:17:D8:BC:2A:DB:A6:54:19:D5:87:72:1C:BC:A5:3E:BB
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:69:48:e0:5b:45:01:eb:79:6e:d8:c5:e0:de:6f:1d:d8:d7:
f1:65:08:ef:6a:64:d3:2d:0d:db:ce:71:9b:e4:67:9a:9d:72:
03:d7:21:16:43:d7:3f:c8:0e:a2:f2:eb:67:82:e5:25:f5:d3:
72:94:ec:ad:23:f9:cb:1a:0e:48:cf:7c:48:a1:4b:eb:11:a2:
ab:a2:da:eb:7a:53:67:00:f2:d7:5a:70:e9:45:42:d2:b6:bf:
eb:5a:3d:13:dc:22:6c:a4:31:f2:92:af:80:13:50:67:26:66:
bd:2d:a4:fb:db:1c:af:ba:7f:55:ca:ba:34:29:4a:79:8a:22:
40:71:06:14:03:64:7a:70:0e:e0:d0:dc:9e:70:80:aa:c1:12:
ef:30:95:1a:bc:7e:95:55:81:9a:6d:fe:4e:0f:d6:71:97:67:
cf:79:78:a9:0e:ab:56:9c:15:68:4c:42:e1:dd:29:65:7e:18:
2b:af:33:8d:8b:83:34:32:70:b5:1a:7d:62:10:d1:cc:0f:24:
78:44:ea:64:79:27:16:82:1a:f3:b1:b6:ec:c1:87:d0:fa:15:
ce:63:a4:74:4b:50:9b:44:53:fd:2b:f5:5b:86:fc:af:7d:00:
88:8b:85:be:cb:45:96:ed:3b:a9:9e:26:6d:77:d1:b2:0d:61:
7c:2f:84:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:21:20 2026 by rpki-client