Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: R/e9a44ll/dRVEQCUh6FIQ5JBZUEOirgXrwuy8jE+q0=
Subject key identifier: B6:C6:D6:B4:7D:EC:64:C2:DC:D8:3F:32:DB:74:DE:23:BC:9F:32:06
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 01A155F7E189DDE6C987E0C39B1EB001E0D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 1AB2
Signing time: Mon 19 Oct 2026 21:01:10 +0000
Manifest this update: Mon 19 Oct 2026 21:01:10 +0000
Manifest next update: Tue 20 Oct 2026 21:01:10 +0000
Files and hashes: 1: HXApDbBFjZ5P8YYPxxOP43B_61E.roa (hash: PABHtWG+f2nnmj23DcOFA1VpAaq32GiJAfPfR67Vqzs=)
2: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: gomhhalWHoDUQXbjX5/Jhv1xH0WYOfFl43jpJwcT+Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:f7:e1:89:dd:e6:c9:87:e0:c3:9b:1e:b0:01:e0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Oct 19 21:01:10 2026 GMT
Not After : Oct 20 21:01:10 2026 GMT
Subject: CN=b6c6d6b47dec64c2dcd83f32db74de23bc9f3206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4e:35:47:fd:d0:c1:63:4f:3e:e3:17:26:56:
b5:9e:aa:21:8b:2d:7a:1d:93:e0:ab:a5:88:dc:8f:
37:ea:94:81:0c:c4:72:58:22:44:08:0c:0b:54:7b:
9a:1a:96:85:54:a9:bd:eb:5d:cc:74:52:79:b5:0b:
4b:1c:1f:ed:ed:41:bd:35:66:dc:a4:c8:a2:b6:b6:
18:ea:db:89:96:a7:4a:e1:74:85:59:33:3b:49:85:
8c:fc:19:aa:36:e6:a8:50:ce:03:16:9f:31:64:b3:
a3:44:6e:78:8e:31:11:3e:fc:80:35:9d:6c:8e:6d:
cf:2b:b7:c2:ff:7b:72:64:89:9e:ed:0f:b7:d4:3d:
47:fb:55:c0:f1:94:87:85:f1:1b:56:46:43:4d:42:
1b:eb:45:14:ff:84:c3:38:55:74:8a:9b:6b:86:4e:
1b:e1:52:73:14:ef:43:f6:9b:51:89:5c:61:cb:b9:
97:11:42:53:23:09:da:ed:91:78:3e:f5:58:01:f8:
29:38:e0:25:06:c6:c7:0e:08:01:bf:ce:1a:a8:f7:
e9:11:09:8b:05:f0:c0:c0:f5:ad:9d:2d:4b:4b:a9:
03:81:e3:69:aa:2d:90:52:42:a7:c4:41:a7:e6:5e:
a1:03:e7:85:8f:bf:de:20:54:57:85:c6:93:b6:7d:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C6:D6:B4:7D:EC:64:C2:DC:D8:3F:32:DB:74:DE:23:BC:9F:32:06
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:18:d4:14:82:24:d6:52:8f:bb:bb:ad:41:3d:09:06:da:ab:
c8:0e:72:28:4d:53:6b:ca:77:c0:8e:12:72:f7:88:7f:c6:ed:
1b:d0:30:ac:63:c6:b7:f4:25:0a:ba:32:39:cc:99:fe:6a:e6:
db:b6:b7:ac:b2:aa:04:26:28:e4:b9:61:66:8b:ce:14:d4:aa:
26:99:f4:39:90:4b:7c:9c:ea:f0:4c:05:cf:37:4c:64:74:c3:
a7:b3:4a:af:ee:14:f5:d4:da:aa:df:80:1c:89:89:ac:82:78:
45:06:fd:68:02:09:6e:8c:2a:fe:9e:2a:ee:42:10:53:8f:1b:
22:ad:e7:d4:22:3f:92:8e:50:f8:76:3e:fe:f3:a1:58:00:01:
3c:4d:d5:13:82:fa:9a:02:3c:59:18:80:7f:73:af:51:d8:10:
43:2b:61:f4:cc:c9:43:3a:19:ab:35:7f:d9:4b:34:c5:48:21:
fb:81:45:08:1a:c3:40:db:84:29:ca:22:96:bc:f9:46:4b:e4:
51:8d:1f:9f:d8:e1:13:17:a2:73:fd:da:56:1d:87:d4:60:85:
72:03:ef:0a:16:0f:3d:a8:88:aa:ca:a6:61:b4:a7:6d:05:b9:
97:9b:10:93:76:e9:e5:08:0f:8b:9e:47:98:d4:e8:be:e0:20:
55:1b:ee:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 03:36:39 2026 by rpki-client