Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
File: K0bJzPf_e9zPg3dioOFXvcE1cOA.mft (raw, json)
Hash identifier: RiaVCPU8aGbk7qfBi3Kr0NBdQhQyjgC6oB20/6ZPSRQ=
Subject key identifier: DD:8C:9B:3E:93:74:8E:53:5D:03:9E:7B:55:BC:C6:4A:3C:80:14:18
Authority key identifier: 2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
Certificate issuer: /CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Certificate serial: 019D38D2C62CBEBB65BED57179199B2AE80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
Manifest number: 08A1
Signing time: Sun 29 Mar 2026 09:00:30 +0000
Manifest this update: Sun 29 Mar 2026 09:00:30 +0000
Manifest next update: Mon 30 Mar 2026 09:00:30 +0000
Files and hashes: 1: K0bJzPf_e9zPg3dioOFXvcE1cOA.crl (hash: O5tP37Sa77a4j48m/2ABaIwMZmvpqgecwrmcIFTMRAk=)
2: Qf4dP42vzRBrZXFbcCRz-VSmv1M.roa (hash: A64N+3juau//kw/FqDqwxIYCtmtyAvH0se4IvywkAE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c6:2c:be:bb:65:be:d5:71:79:19:9b:2a:e8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Validity
Not Before: Mar 29 09:00:30 2026 GMT
Not After : Mar 30 09:00:30 2026 GMT
Subject: CN=dd8c9b3e93748e535d039e7b55bcc64a3c801418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:11:9c:ab:fc:56:d8:bd:ae:0e:de:12:29:30:
fb:b7:bf:8f:23:15:64:b7:45:74:69:be:f6:cc:30:
7c:b4:c4:d1:de:bd:ca:aa:80:e7:9d:af:ed:0f:46:
5c:3b:ac:1d:16:3e:56:a1:57:e8:b7:16:7f:93:21:
85:73:d2:7b:1d:55:16:f0:ac:0e:b2:4d:d8:ce:f0:
08:f7:d8:18:8c:c4:0c:3b:d9:6a:69:29:5a:ca:68:
8c:f1:15:e4:34:02:58:fa:3d:ff:54:fe:08:cf:cf:
56:6c:4e:ce:20:46:9b:0e:e6:a5:c6:65:59:42:78:
40:a3:9a:20:3e:9f:05:b6:f7:9e:76:ea:21:ca:61:
c0:3d:ca:12:a2:ff:14:51:f4:6c:44:43:d9:38:29:
74:0e:e2:18:d4:14:21:42:80:ea:f4:a9:1e:6e:b2:
a3:66:99:1b:f2:1b:f4:f1:5c:4a:52:7e:3f:78:a4:
4b:e3:ad:4c:ae:1f:44:3c:7d:c7:c8:0d:25:8e:28:
a0:3f:27:4e:35:0b:b3:52:0b:28:25:27:a3:9c:94:
14:07:17:00:b9:03:d5:49:2f:29:22:e9:61:e7:39:
bb:87:48:64:9b:3a:f9:5a:b2:0f:35:9a:c1:88:42:
bf:84:f4:93:27:f7:fa:35:4c:a1:28:c1:1c:d5:73:
1f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8C:9B:3E:93:74:8E:53:5D:03:9E:7B:55:BC:C6:4A:3C:80:14:18
X509v3 Authority Key Identifier:
keyid:2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fe:22:c0:1d:a8:30:2a:26:c2:81:b0:78:84:b8:3f:1b:1b:
81:c3:f3:e2:37:23:df:d3:6b:5b:2e:90:70:06:2a:0e:d7:c9:
d3:37:7d:a8:53:03:2d:e8:8b:85:f2:d3:bf:8e:a4:84:f8:0a:
05:de:7c:72:8c:13:fd:de:af:6a:db:cf:c6:65:0f:e1:04:bf:
a7:a7:3e:4f:97:e2:b7:82:16:da:8b:e4:6d:ed:be:54:2e:f6:
3e:9d:1c:4f:56:c6:a6:80:ca:7e:1a:8e:ba:0a:25:23:87:57:
25:f1:57:7a:d9:ed:93:fe:a9:39:43:1f:4f:a7:13:31:7f:af:
43:10:06:46:67:67:2f:87:97:07:f8:69:1e:f2:83:93:08:ff:
32:71:5d:a1:7e:c1:68:5d:98:39:75:a5:17:30:02:5a:b9:0e:
26:56:e2:92:5a:d2:40:79:0d:23:6b:4a:7c:40:9a:08:f8:48:
9f:d4:f8:ca:e9:54:e5:a4:33:52:79:19:50:34:b1:eb:91:74:
55:01:43:0d:27:68:f0:b2:ec:51:dd:23:53:bd:1e:57:93:66:
da:37:25:56:69:73:af:a9:bc:2a:3a:50:a0:11:b2:03:26:5d:
a3:ea:c5:15:d8:47:99:11:d3:d7:63:09:35:94:bb:51:32:f7:
20:e2:42:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:37 2026 by rpki-client