Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
File: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft (raw, json)
Hash identifier: poCAsZd+huYMQfXPv/HcE1XD963K5wEr9q03r5M4zJs=
Subject key identifier: 0F:F0:61:86:DA:4F:C3:E6:26:C0:14:B8:2E:C2:AB:B4:ED:0F:B8:C7
Authority key identifier: 2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
Certificate issuer: /CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Certificate serial: 01A178F17F074D5ECA5CF1C11B6F9C4328DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
Manifest number: 0493
Signing time: Mon 26 Oct 2026 16:00:54 +0000
Manifest this update: Mon 26 Oct 2026 16:00:54 +0000
Manifest next update: Tue 27 Oct 2026 16:00:54 +0000
Files and hashes: 1: 86Fyb3G7SUYyzM6ueZuWLb_1Xuo.roa (hash: FgOm/4PuINnAyRzINOUNWX0n6lD1Ih45a+4EbNgehTY=)
2: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl (hash: q/sKjA5EY8uoTmXxBWA9LhNy4UbH4Ex0QUovmV4wAlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:7f:07:4d:5e:ca:5c:f1:c1:1b:6f:9c:43:28:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Validity
Not Before: Oct 26 16:00:54 2026 GMT
Not After : Oct 27 16:00:54 2026 GMT
Subject: CN=0ff06186da4fc3e626c014b82ec2abb4ed0fb8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:1a:1a:74:47:76:8c:eb:27:bb:29:5f:ed:
29:87:a2:84:90:47:90:4c:e0:c9:41:24:44:ef:d3:
40:e1:9c:ce:c4:32:62:f3:3a:42:1e:e8:cf:d5:67:
00:18:37:3d:49:07:6f:da:04:6b:be:9f:14:84:95:
de:d2:63:72:0f:ad:33:86:9d:ab:0d:41:0e:0c:80:
d0:ce:5d:1e:ab:c7:f3:a9:1b:c5:49:30:ce:1f:a3:
fe:51:91:07:ff:8b:25:31:17:90:0a:5a:3c:10:d3:
cb:0c:cf:dc:31:3f:80:1c:5d:10:c5:4e:af:27:ff:
9f:4f:db:bb:5c:fa:31:d3:53:8d:c5:4e:93:31:72:
f6:12:c9:ef:2e:77:e7:36:ba:bb:19:20:51:57:98:
03:6a:b0:87:b3:f6:19:61:5d:a0:b3:09:7f:98:a8:
24:08:69:69:fd:ba:a6:6c:b4:10:cb:19:17:8f:94:
19:14:cd:53:4d:e7:94:81:db:cd:29:8b:0d:47:01:
f9:75:d8:f4:57:7d:e1:c5:0d:8e:0b:9a:81:e9:f6:
1e:da:8a:99:97:7b:a3:5a:5b:b8:65:74:d4:f3:7f:
7b:15:1f:23:66:11:cd:d6:c8:eb:9e:d8:7e:d3:2d:
24:dd:b4:8b:ea:e5:56:f2:4d:2d:70:13:88:56:ad:
3f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F0:61:86:DA:4F:C3:E6:26:C0:14:B8:2E:C2:AB:B4:ED:0F:B8:C7
X509v3 Authority Key Identifier:
keyid:2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d3:9d:f1:81:dc:57:a4:c1:e7:00:e6:08:e6:fe:d6:74:55:
cf:c5:65:e4:03:9d:e2:a1:51:2e:7f:21:d7:4e:df:10:91:4e:
2a:41:a1:5a:a4:d1:70:f3:93:fb:b8:5e:3b:7d:b6:cf:98:57:
1f:ba:46:0d:fe:2d:5e:42:57:ec:0e:fb:37:dc:c8:93:e0:21:
8d:06:6d:30:80:97:ff:76:98:cf:dc:e1:78:6a:8f:5c:ec:73:
a1:45:9a:4e:74:19:83:bf:f4:59:af:67:69:ac:5a:89:c9:fc:
be:fd:db:e2:f2:e0:26:ce:ed:62:2f:f2:c6:fc:2e:b3:5b:84:
3b:b2:4c:7e:08:c0:87:df:1f:cb:e0:99:fd:9c:78:36:96:9f:
4a:a0:68:49:a4:99:8f:4e:aa:27:4b:58:02:6f:21:85:58:d1:
47:1d:d9:d2:55:87:26:d1:8f:a3:c0:cd:a5:01:24:12:7d:7a:
3e:01:ea:be:e3:e0:5b:a9:19:e7:b6:24:80:0d:31:33:43:64:
83:68:d7:df:97:cc:0f:1c:5f:dd:15:20:83:23:07:0e:fd:9b:
91:73:ce:c8:99:0b:20:71:fa:42:b3:22:73:98:f6:dd:50:08:
3d:ba:5f:4c:74:b5:11:3a:40:b8:ba:5f:37:7d:0f:23:4e:d9:
df:18:c3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:11:05 2026 by rpki-client