Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
File: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft (raw, json)
Hash identifier: QB1XlbNsa8+CVzwhZ5nUhiMS4aBGtWsLZaUTXo+4vps=
Subject key identifier: 09:05:B6:AE:FC:0E:FA:F4:36:7F:0A:3D:CB:56:02:53:47:FC:A6:71
Authority key identifier: 2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
Certificate issuer: /CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Certificate serial: 01A06E7142036358D905914737986504ED38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
Manifest number: 0409
Signing time: Fri 04 Sep 2026 22:01:51 +0000
Manifest this update: Fri 04 Sep 2026 22:01:51 +0000
Manifest next update: Sat 05 Sep 2026 22:01:51 +0000
Files and hashes: 1: 86Fyb3G7SUYyzM6ueZuWLb_1Xuo.roa (hash: FgOm/4PuINnAyRzINOUNWX0n6lD1Ih45a+4EbNgehTY=)
2: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl (hash: IMMpEsHkp84lBI3T9PjYe5Rm40Lb80egE185eoo5Kc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:71:42:03:63:58:d9:05:91:47:37:98:65:04:ed:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Validity
Not Before: Sep 4 22:01:51 2026 GMT
Not After : Sep 5 22:01:51 2026 GMT
Subject: CN=0905b6aefc0efaf4367f0a3dcb56025347fca671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:5f:3f:62:46:55:dd:e4:1e:fb:bc:3c:d1:
a4:e6:5e:cf:65:41:b1:9a:b6:89:95:0d:36:16:7f:
12:d3:57:64:e9:66:6a:2a:73:5f:4a:b7:99:ac:15:
90:32:8a:86:4c:cb:d1:fe:ed:d5:55:e3:92:6f:f4:
04:98:6f:86:2e:ef:d6:43:0a:89:a7:b2:7e:a2:5c:
b8:e0:52:3b:e0:72:49:ee:cd:04:90:62:8a:04:12:
4c:69:cc:74:53:9a:8b:4a:1a:3b:59:32:eb:f6:6f:
91:a6:0c:dd:f9:3d:fc:2f:ae:09:eb:fc:8f:7f:71:
c9:e4:91:2f:ae:65:93:17:90:2a:39:8d:bf:1d:e8:
a1:d9:fc:10:9e:32:bd:f6:c7:fb:97:10:5f:5c:84:
d5:ce:f1:3c:31:39:c0:b0:5f:22:f2:61:46:94:ba:
64:b1:0d:3a:89:04:64:95:b4:6e:43:fd:63:45:73:
b6:76:12:fd:df:7f:bd:d5:3f:c5:97:a8:c7:aa:ed:
5c:3d:d9:6f:36:12:46:10:4e:10:9d:80:ed:3e:02:
23:6b:01:29:f9:c0:8c:df:45:97:82:60:f5:13:bb:
d9:bd:20:c8:f1:73:64:d5:0f:34:dd:96:84:96:64:
cd:15:c0:43:3e:2c:6f:4f:63:af:73:d7:f6:e6:f0:
13:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:05:B6:AE:FC:0E:FA:F4:36:7F:0A:3D:CB:56:02:53:47:FC:A6:71
X509v3 Authority Key Identifier:
keyid:2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:32:db:98:34:7f:a5:d8:7e:9a:4f:dd:f9:de:25:e7:06:a4:
fe:39:6d:16:c4:12:75:87:62:71:98:a7:16:be:a3:66:a8:46:
aa:c7:79:7e:e5:69:b8:0b:e5:20:3c:fd:97:20:7e:31:02:7e:
a6:7c:b3:17:50:23:37:a9:59:d6:47:be:2a:11:9d:e9:6b:76:
73:c3:a4:9e:ca:e1:30:b8:80:6d:b1:02:51:f9:f9:1a:f1:f1:
34:3d:6c:d5:76:62:9d:7c:86:69:97:91:05:29:39:f2:24:3d:
47:11:e5:6e:ad:70:a9:de:2f:0f:d5:f0:51:47:de:72:d2:3f:
76:42:a9:4f:fa:b4:40:de:59:4c:37:b6:3f:91:5c:a4:96:ac:
d1:6b:37:a3:45:96:0d:0a:ca:76:53:4d:9b:bc:a4:45:3f:c5:
25:0a:0a:bb:5f:9b:7a:9a:64:91:11:8c:07:b9:01:5c:d7:f6:
19:69:a6:7c:7d:4d:af:bf:53:9e:31:c3:34:7a:0a:6a:5e:3a:
16:12:38:23:39:1c:f3:a0:0b:5f:1c:1e:4d:e7:d1:23:d7:bb:
78:81:ac:7c:7b:f5:40:6a:ee:ed:53:5a:b5:89:ff:61:83:40:
57:78:46:28:c4:8f:7f:41:43:1d:d4:26:bc:27:b9:76:c1:34:
36:8e:24:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:24:35 2026 by rpki-client