Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
File: K1PcIaJCAlQoIMyobiZfioeX0lA.mft (raw, json)
Hash identifier: KZNFf2JFZbz/f9BI2+BtXHss0SKkY7lGCBbylZGu49g=
Subject key identifier: 4D:44:BE:3E:3F:9B:E2:E7:E9:C0:53:83:21:8D:80:22:30:05:3C:DB
Authority key identifier: 2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
Certificate issuer: /CN=2b53dc21a24202542820cca86e265f8a8797d250
Certificate serial: 019EB73370A2A923071477FD1F973B59A3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
Manifest number: 016D
Signing time: Thu 11 Jun 2026 15:01:02 +0000
Manifest this update: Thu 11 Jun 2026 15:01:02 +0000
Manifest next update: Fri 12 Jun 2026 15:01:02 +0000
Files and hashes: 1: K1PcIaJCAlQoIMyobiZfioeX0lA.crl (hash: wkpvrqaLG1W9wiU0LsMjq66j1bJKXk5tcjfl+9b7P6o=)
2: kD6G2PoyT4Y9hFb7K8_JYQqd5fY.roa (hash: GDKNpiIO5829SnDrPg3nh1X5rP785rc0edBI69dLKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:70:a2:a9:23:07:14:77:fd:1f:97:3b:59:a3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b53dc21a24202542820cca86e265f8a8797d250
Validity
Not Before: Jun 11 15:01:02 2026 GMT
Not After : Jun 12 15:01:02 2026 GMT
Subject: CN=4d44be3e3f9be2e7e9c05383218d802230053cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:75:38:5e:98:d8:83:a8:50:f9:e5:6b:42:
81:3d:40:2e:3f:ad:ab:6e:23:61:c5:bd:d3:5f:48:
06:2d:de:b9:7b:a5:f4:3e:02:ad:18:df:f8:9d:f9:
2a:f7:b4:30:6a:38:0e:79:48:42:dc:b1:14:4d:8d:
a5:65:dd:bb:ad:90:55:a2:fb:79:7f:e7:b0:0a:56:
77:c3:0d:29:83:44:81:79:73:f8:2f:9e:e8:5e:5a:
55:1f:13:8c:c7:97:97:f6:c7:76:12:1c:6d:81:ab:
8b:ca:0b:20:1d:97:3d:2e:42:6c:d0:5a:c9:9a:a1:
33:23:8e:81:9f:77:79:5d:44:38:cd:a6:ac:91:df:
f8:d3:64:17:e4:d6:f6:c0:eb:f9:3d:14:3c:11:77:
f5:d7:54:11:d4:c7:21:b5:81:c7:79:d6:ea:35:08:
31:eb:6c:43:d2:f8:9d:68:1a:f5:ee:0b:8d:50:75:
65:05:0c:c4:1e:0f:d0:58:c6:98:33:ce:1a:16:15:
78:03:79:95:81:4e:15:a9:b0:73:7d:a9:e1:a6:12:
a5:b8:b8:f9:ca:89:41:92:bc:d0:f7:a9:2d:2a:5b:
65:42:d9:58:ec:f2:3f:7a:67:03:1b:42:ec:31:32:
3c:f1:0f:ec:8f:bc:62:93:e2:4c:23:73:ff:f5:f0:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:44:BE:3E:3F:9B:E2:E7:E9:C0:53:83:21:8D:80:22:30:05:3C:DB
X509v3 Authority Key Identifier:
keyid:2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ef:3b:11:62:e6:d5:ec:db:c3:38:25:e2:98:d2:36:5a:a0:
3e:aa:2e:c1:6a:0a:72:b0:29:d8:ef:81:31:21:ca:b7:66:1e:
2d:cb:24:e5:e3:75:5c:f4:8c:73:1d:7e:22:7c:c1:e9:bf:59:
e3:69:cf:a5:8a:87:91:76:c1:91:76:64:23:36:1e:a6:9c:6f:
f9:f9:a4:81:e2:7d:2c:32:21:c6:0c:77:db:d6:c8:41:7e:45:
3f:eb:47:30:bc:cc:d9:f9:bd:a1:7e:fc:07:ba:89:56:62:b2:
ae:e0:e7:d0:6b:3a:a3:b9:e0:dd:88:ad:15:5b:63:28:0b:8f:
26:af:21:92:85:39:c3:c7:8f:91:43:78:94:ac:fb:e5:3b:b0:
6a:52:ad:07:d1:fb:52:aa:75:39:43:a9:71:dc:8f:27:eb:1f:
81:62:55:20:36:57:14:70:57:b9:fc:72:3f:de:85:da:21:58:
21:c0:b2:6e:de:b3:a4:86:47:ff:b8:b5:3b:7b:4a:cd:fe:ad:
96:04:0b:73:9e:d6:75:8f:ed:08:92:f0:80:11:5e:ff:e3:58:
47:c6:e6:47:09:9d:e2:d4:f6:7c:23:bc:5b:d6:84:54:15:a2:
00:e5:35:77:f0:bc:0d:60:52:98:1d:86:36:5f:1e:f3:3d:f9:
fa:8e:e0:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63M3CiqSMHFHf9H5c7WaPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNTNkYzIxYTI0MjAyNTQyODIwY2NhODZlMjY1ZjhhODc5
N2QyNTAwHhcNMjYwNjExMTUwMTAyWhcNMjYwNjEyMTUwMTAyWjAzMTEwLwYDVQQD
Eyg0ZDQ0YmUzZTNmOWJlMmU3ZTljMDUzODMyMThkODAyMjMwMDUzY2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFF1OF6Y2IOoUPnla0KBPUAuP62r
biNhxb3TX0gGLd65e6X0PgKtGN/4nfkq97QwajgOeUhC3LEUTY2lZd27rZBVovt5
f+ewClZ3ww0pg0SBeXP4L57oXlpVHxOMx5eX9sd2EhxtgauLygsgHZc9LkJs0FrJ
mqEzI46Bn3d5XUQ4zaaskd/402QX5Nb2wOv5PRQ8EXf111QR1MchtYHHedbqNQgx
62xD0vidaBr17guNUHVlBQzEHg/QWMaYM84aFhV4A3mVgU4VqbBzfanhphKluLj5
yolBkrzQ96ktKltlQtlY7PI/emcDG0LsMTI88Q/sj7xik+JMI3P/9fCNgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE1Evj4/m+Ln6cBTgyGNgCIwBTzbMB8GA1UdIwQY
MBaAFCtT3CGiQgJUKCDMqG4mX4qHl9JQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzFQY0lhSkNBbFFvSU15b2JpWmZpb2VYMGxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGJjZGItYjVlMi00Mzc3LWI1MzAt
ODM1OTNhZmJiNzUzLzEvSzFQY0lhSkNBbFFvSU15b2JpWmZpb2VYMGxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81NGJjZGItYjVlMi00Mzc3LWI1MzAtODM1OTNhZmJiNzUz
LzEvSzFQY0lhSkNBbFFvSU15b2JpWmZpb2VYMGxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArO87EWLm
1ezbwzgl4pjSNlqgPqouwWoKcrAp2O+BMSHKt2YeLcsk5eN1XPSMcx1+InzB6b9Z
42nPpYqHkXbBkXZkIzYeppxv+fmkgeJ9LDIhxgx329bIQX5FP+tHMLzM2fm9oX78
B7qJVmKyruDn0Gs6o7ng3YitFVtjKAuPJq8hkoU5w8ePkUN4lKz75TuwalKtB9H7
Uqp1OUOpcdyPJ+sfgWJVIDZXFHBXufxyP96F2iFYIcCybt6zpIZH/7i1O3tKzf6t
lgQLc57WdY/tCJLwgBFe/+NYR8bmRwmd4tT2fCO8W9aEVBWiAOU1d/C8DWBSmB2G
Nl8e8z35+o7gaA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:26:05 2026 by rpki-client