Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
File: K1PcIaJCAlQoIMyobiZfioeX0lA.mft (raw, json)
Hash identifier: k/r0+JKz6fA4zSxuLkoVCvmV79qfvq8s0PTRxCAHoIU=
Subject key identifier: 39:D0:F8:76:B6:8D:8C:3C:9B:E9:F0:CF:D1:08:68:75:E0:B2:34:0C
Authority key identifier: 2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
Certificate issuer: /CN=2b53dc21a24202542820cca86e265f8a8797d250
Certificate serial: 01A17FD045705348D591E770B44A0D232B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
Manifest number: 02DE
Signing time: Wed 28 Oct 2026 00:01:58 +0000
Manifest this update: Wed 28 Oct 2026 00:01:58 +0000
Manifest next update: Thu 29 Oct 2026 00:01:58 +0000
Files and hashes: 1: K1PcIaJCAlQoIMyobiZfioeX0lA.crl (hash: eB0FMqJ57q4OVf3qiX+Jnd/IXvq/5Zx3G4a+fWqhnAY=)
2: kD6G2PoyT4Y9hFb7K8_JYQqd5fY.roa (hash: GDKNpiIO5829SnDrPg3nh1X5rP785rc0edBI69dLKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:d0:45:70:53:48:d5:91:e7:70:b4:4a:0d:23:2b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b53dc21a24202542820cca86e265f8a8797d250
Validity
Not Before: Oct 28 00:01:58 2026 GMT
Not After : Oct 29 00:01:58 2026 GMT
Subject: CN=39d0f876b68d8c3c9be9f0cfd1086875e0b2340c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:6a:25:c6:2c:aa:39:60:81:5c:41:f9:4d:
40:c3:c8:38:c3:54:42:2e:91:c6:66:79:43:23:6d:
f6:fc:c7:07:8a:54:b9:36:20:af:0d:0e:91:51:72:
d5:90:7f:79:01:0b:61:39:9a:5f:1a:89:51:12:6c:
51:32:a7:97:4e:cf:9e:50:ec:2e:f5:c8:0c:6e:77:
79:47:13:76:d8:3e:9f:e4:94:33:dc:4c:12:8f:5a:
ea:98:d2:5f:d9:cc:43:74:ca:c3:82:da:10:15:59:
23:69:a0:d2:fa:b4:8c:46:ef:6b:dc:a9:f5:83:08:
1d:f9:86:b9:dc:3a:93:c7:c7:93:56:bc:c8:c0:cc:
cd:b4:d5:6e:15:fd:f5:6e:e5:6a:fd:b9:18:c8:35:
fc:fb:16:a2:6d:95:9a:fc:f6:d8:ab:30:72:77:a4:
aa:66:32:2a:b2:56:6e:3a:3e:1c:d6:e3:79:10:88:
25:7d:48:3c:ad:2c:28:c4:b3:44:99:95:b5:7b:e2:
77:bb:0b:cb:73:c1:5f:3a:87:66:a3:e6:ef:0a:4d:
a9:35:b2:5e:57:a6:7a:b6:1c:9b:ce:41:bc:b6:a1:
aa:57:e3:89:82:6f:dd:75:a5:77:54:80:8e:6f:a1:
39:59:88:3d:3a:5e:b8:58:d4:ad:07:5e:8c:43:2d:
b5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D0:F8:76:B6:8D:8C:3C:9B:E9:F0:CF:D1:08:68:75:E0:B2:34:0C
X509v3 Authority Key Identifier:
keyid:2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2d:2d:d0:f3:35:ba:80:80:2d:21:4a:86:44:77:cb:90:c7:
1c:83:c2:e8:76:21:b0:ff:44:3d:2c:68:d0:23:e5:9a:15:be:
f1:1c:4c:c3:bd:40:79:c3:89:4e:f8:16:8b:53:9f:88:5d:fc:
87:ee:95:a3:c1:e5:60:bd:d7:d4:31:3a:8a:52:1e:38:f2:cd:
f3:ef:11:b6:37:61:f0:60:b4:e4:43:29:37:7c:b4:aa:f0:53:
fc:1c:6f:60:f4:73:56:b4:29:3b:0e:cf:14:25:24:25:48:b3:
d6:b2:87:00:b0:87:2d:a6:2f:ce:d9:3e:0a:48:01:e7:c1:c0:
01:0d:a7:16:a4:33:8d:b0:ae:12:88:e9:36:95:ae:80:be:64:
17:06:3f:aa:77:30:a9:fc:f6:f1:ef:bd:94:d4:4b:3b:94:15:
cd:ef:94:a3:80:5e:22:70:90:e0:a9:1d:29:37:78:91:cd:e1:
5c:60:8c:c9:9e:85:44:20:79:c3:f8:df:1f:b1:46:a2:96:01:
bc:2e:58:07:0c:48:8c:9a:89:c2:60:52:12:66:3f:a0:f0:07:
fb:33:75:97:ea:40:ae:4d:18:27:98:c4:55:46:ac:de:54:d0:
65:92:74:41:53:c1:c2:76:5b:bd:b0:53:ec:62:97:ab:2c:6c:
8b:b1:45:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:13:37 2026 by rpki-client