Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
File: K1PcIaJCAlQoIMyobiZfioeX0lA.mft (raw, json)
Hash identifier: p5r2N9YJVoekJ5odY0gzEJz3WsdDEV1repdUHyTzng4=
Subject key identifier: 07:55:AC:00:C0:AA:63:89:3D:0C:23:D6:AE:9A:DF:72:A1:00:3E:B4
Authority key identifier: 2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
Certificate issuer: /CN=2b53dc21a24202542820cca86e265f8a8797d250
Certificate serial: 01A17DE1383368A88E8459FB10999F66B329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
Manifest number: 02DD
Signing time: Tue 27 Oct 2026 15:01:14 +0000
Manifest this update: Tue 27 Oct 2026 15:01:14 +0000
Manifest next update: Wed 28 Oct 2026 15:01:14 +0000
Files and hashes: 1: K1PcIaJCAlQoIMyobiZfioeX0lA.crl (hash: Z7z9ohLdq97C2EvWsUX9Kumw++PY0M5lWXjw4BrsJ98=)
2: kD6G2PoyT4Y9hFb7K8_JYQqd5fY.roa (hash: GDKNpiIO5829SnDrPg3nh1X5rP785rc0edBI69dLKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:38:33:68:a8:8e:84:59:fb:10:99:9f:66:b3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b53dc21a24202542820cca86e265f8a8797d250
Validity
Not Before: Oct 27 15:01:14 2026 GMT
Not After : Oct 28 15:01:14 2026 GMT
Subject: CN=0755ac00c0aa63893d0c23d6ae9adf72a1003eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:42:6c:43:d0:b0:4e:e3:d4:97:d4:f7:e7:d5:
d4:ca:c9:a1:35:04:97:b3:7b:9d:12:22:ed:39:62:
d8:19:40:a7:dc:be:0c:b3:05:b2:1a:4d:e0:0e:19:
5b:b0:81:8e:05:4f:40:9a:1b:37:b7:0e:73:d5:2c:
b7:9d:b9:7a:44:9b:67:26:9b:80:eb:00:4f:2a:80:
b8:6f:3e:f8:51:fe:04:c0:c4:34:43:38:1b:57:13:
32:4d:8d:41:67:64:3a:2a:4b:3b:17:d7:46:89:67:
15:3b:c3:17:55:aa:d8:c7:39:1e:cb:2d:54:16:5e:
63:81:70:30:01:eb:43:23:c2:a8:b7:3a:29:99:58:
6e:11:0f:58:3c:b9:50:f2:de:a2:4f:44:57:ab:35:
42:31:bb:82:99:b9:60:de:50:9c:90:41:4c:e1:d0:
0b:69:bb:f1:d2:df:88:b7:16:3d:9b:f3:a2:38:a7:
45:31:ad:ff:f3:98:e3:df:7c:6b:4d:79:8c:e3:b2:
26:51:e9:5c:c0:a1:a1:1f:09:8c:92:ad:df:0d:c2:
4a:fb:6b:34:46:19:1e:95:e6:d3:34:96:ca:05:20:
90:a6:cd:82:e0:85:c9:ab:86:c5:ed:f3:2f:e0:3f:
7a:8c:8b:2e:a8:1b:57:21:c2:8a:e5:bc:f9:36:a4:
87:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:55:AC:00:C0:AA:63:89:3D:0C:23:D6:AE:9A:DF:72:A1:00:3E:B4
X509v3 Authority Key Identifier:
keyid:2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0d:6d:45:0f:99:f0:9a:6d:77:58:14:7e:03:6d:f6:0c:bb:
c7:8d:da:a8:77:c2:8c:87:da:6c:b0:8a:6b:df:67:c0:b2:90:
36:88:d3:51:6f:52:2f:d0:ad:e4:10:8a:7f:e1:1d:4c:e8:d8:
ef:71:7b:1c:03:73:d8:3b:b2:3c:b6:07:50:e4:5e:68:3c:de:
22:af:1a:cc:ba:bd:2c:34:24:30:81:67:99:23:d5:2d:88:51:
d6:fd:d7:f5:9f:18:f8:8b:ca:07:3d:a8:6d:c9:51:9b:1e:ec:
ef:02:6b:f9:8a:8f:ee:76:f0:64:a2:bd:c5:f5:01:fd:1f:3f:
d5:77:ce:ee:c4:ca:58:2d:46:ee:1b:41:b7:96:da:55:02:33:
d9:b5:95:14:26:a1:06:fb:bf:26:c6:4f:cb:9a:f1:80:0f:ed:
07:a7:cf:90:4a:1a:c1:35:fc:94:9a:a2:16:9b:74:d2:cf:f8:
c6:c4:e9:c4:05:84:8f:58:79:09:c1:ef:ca:b4:40:2d:ea:32:
03:1c:48:47:51:ad:e9:b0:30:39:a9:84:49:8f:ab:bd:6f:d7:
a4:d4:3f:43:a1:3d:87:89:35:12:62:9a:a6:7a:20:13:b4:34:
13:23:d7:4c:b5:ff:8f:94:b9:cf:60:db:09:2b:79:65:21:1c:
63:81:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:52 2026 by rpki-client