Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
File: K1PcIaJCAlQoIMyobiZfioeX0lA.mft (raw, json)
Hash identifier: qXjj7nnkL5M5AbHfYhfOwzcmFlGqElOnpfu2DFRRQiU=
Subject key identifier: 3F:96:85:B0:53:1E:CB:13:2C:8B:B3:B8:54:A2:0D:E8:21:FE:F6:C5
Authority key identifier: 2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
Certificate issuer: /CN=2b53dc21a24202542820cca86e265f8a8797d250
Certificate serial: 01A08C7A9249D2D14E1523F407A26901C569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
Manifest number: 0260
Signing time: Thu 10 Sep 2026 18:00:38 +0000
Manifest this update: Thu 10 Sep 2026 18:00:38 +0000
Manifest next update: Fri 11 Sep 2026 18:00:38 +0000
Files and hashes: 1: K1PcIaJCAlQoIMyobiZfioeX0lA.crl (hash: PEewtqJLV13o64dAn4qelon5+OA2Do/1tkvsE+M8/xo=)
2: kD6G2PoyT4Y9hFb7K8_JYQqd5fY.roa (hash: GDKNpiIO5829SnDrPg3nh1X5rP785rc0edBI69dLKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:92:49:d2:d1:4e:15:23:f4:07:a2:69:01:c5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b53dc21a24202542820cca86e265f8a8797d250
Validity
Not Before: Sep 10 18:00:38 2026 GMT
Not After : Sep 11 18:00:38 2026 GMT
Subject: CN=3f9685b0531ecb132c8bb3b854a20de821fef6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:4a:27:86:08:5b:08:04:b7:f6:f6:7b:5b:
74:4c:1a:cd:7a:6f:61:b8:d8:97:23:09:51:65:e7:
9d:ef:71:96:8d:21:db:25:15:78:9a:86:7e:1e:59:
0b:b4:9b:ff:d7:12:0b:67:00:36:ed:98:f9:0b:38:
03:38:6e:84:e4:b9:87:d4:f4:ed:54:9f:f1:c5:f9:
7a:7e:b3:dc:0c:b1:ed:94:81:e5:2b:dd:04:c3:5f:
85:5b:15:c5:cb:cd:f5:11:2f:ef:31:a2:68:67:76:
b7:ec:74:c5:23:08:09:a7:ee:ca:23:1c:da:8e:7e:
07:65:f8:aa:37:37:2c:11:9b:62:7c:76:5a:d2:10:
15:15:4f:60:cb:2f:84:7e:ee:0e:4f:d8:79:25:a3:
a4:6e:bd:83:3b:e2:26:25:e8:2b:c3:a1:91:a5:20:
9c:6c:80:9f:6d:bf:a5:73:ec:1d:e7:e4:ad:f0:12:
a0:49:54:42:07:35:d9:76:f2:a2:37:56:db:ed:51:
0b:4f:1b:39:28:fd:a7:71:a0:66:09:4e:51:f6:35:
aa:e1:9a:5d:d5:d8:98:8a:28:b0:83:33:3a:49:74:
73:24:d5:e6:b3:9d:59:cc:db:e6:89:68:b0:c4:85:
6c:85:9e:95:3c:5b:fa:ac:d5:f0:69:80:61:bc:84:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:96:85:B0:53:1E:CB:13:2C:8B:B3:B8:54:A2:0D:E8:21:FE:F6:C5
X509v3 Authority Key Identifier:
keyid:2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7b:06:54:25:3e:a8:fa:bb:67:57:a2:1e:fb:8d:f3:71:c8:
88:16:9b:21:31:2f:fe:59:9b:d9:ec:a0:4e:f9:97:5c:65:aa:
18:02:17:48:f9:9e:5b:e1:ce:a8:40:c1:35:aa:40:14:00:bd:
19:92:7c:1a:b9:62:88:e4:28:c9:59:aa:ec:65:a9:cd:19:49:
14:4f:47:c8:c3:5a:b7:44:9d:d8:68:78:d5:69:7d:4f:4c:a5:
61:42:a6:cc:2f:38:47:cc:e3:54:54:9d:3c:5a:c9:ee:f6:17:
39:42:d5:af:43:15:68:ff:d8:69:65:0c:c5:bd:cf:69:6d:b5:
dd:b8:df:ca:0f:20:8d:46:86:aa:3c:d4:98:8d:a5:7a:f8:22:
87:0e:23:1a:db:17:07:7a:60:ef:6f:77:6e:c8:d3:2f:c6:e5:
ec:da:3b:11:81:85:0f:1b:ae:33:5c:7a:7a:ec:ff:93:c8:e3:
52:53:03:94:6b:89:49:17:e5:9b:a9:2c:d5:31:52:4d:3f:ff:
ef:7d:8e:80:3a:a7:c5:41:58:2d:9c:6c:81:37:c7:d7:50:27:
d2:35:cd:9d:f5:f7:42:24:ff:76:7b:ac:89:98:b4:72:5d:68:
3a:4f:52:24:31:24:dc:18:26:5f:2a:8f:0f:37:fb:42:94:ec:
9a:80:56:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:54:59 2026 by rpki-client