Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: zE/mHvLwHQ9wvpHwFRrcCBuONqFphsuXuUK/yMtepaQ=
Subject key identifier: B1:E2:03:77:AB:4B:26:4D:44:61:16:4D:35:1E:0E:6D:ED:9D:49:E6
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 01A01FB10577CBC1CEFC6406A4051EB7D10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 11D0
Signing time: Thu 20 Aug 2026 15:01:29 +0000
Manifest this update: Thu 20 Aug 2026 15:01:29 +0000
Manifest next update: Fri 21 Aug 2026 15:01:29 +0000
Files and hashes: 1: 5pguPhI0rFbakLhW6SkFbalknGQ.roa (hash: Lus95KOZX81AaJ5QWx/HsOob7eg1M1IWrIuALpl2Ef0=)
2: JGYB1Rt7gSa81bDABH2MHCSHfp8.roa (hash: yt7CtQlz8mtjyIIaBn7vHZ5Km7TGlMzsdUa4EfI/y1M=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: Juu+T1JFv3AjhGeeHn40MWq09FdUCFbkAEgGK1xIyuY=)
4: nXA9V6KcuTrb8c4a13aM3c-s94A.roa (hash: 5zHlB5gOOOnEtUQHoN58ZN8OSmLBcHMa8Vj3/5+LjCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 15:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:b1:05:77:cb:c1:ce:fc:64:06:a4:05:1e:b7:d1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Aug 20 15:01:29 2026 GMT
Not After : Aug 21 15:01:29 2026 GMT
Subject: CN=b1e20377ab4b264d4461164d351e0e6ded9d49e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:eb:57:36:fe:b3:2c:4c:7e:3e:69:69:34:
e6:50:2f:ac:2c:6a:61:3a:63:5b:10:f9:6b:19:58:
32:08:a7:1a:31:4d:1c:07:c1:18:67:88:78:14:f8:
33:5d:8a:50:94:92:87:f5:ad:8f:73:6a:94:e4:9f:
15:ba:ea:fd:3d:e6:13:4a:fc:db:23:4f:b6:09:59:
1b:20:63:1d:e5:87:ee:ba:1d:73:fa:53:63:f1:45:
2e:9b:f7:b1:ac:c2:96:af:5b:fd:b6:06:82:47:09:
4a:fa:cc:ca:84:0a:23:ca:95:59:60:22:3b:77:aa:
d3:52:08:78:6e:80:44:f6:78:79:bb:1a:7f:6a:f6:
27:2c:cb:65:c5:9c:5e:15:2f:e1:11:8b:62:70:43:
21:61:f6:96:f8:ca:24:fb:28:84:5c:c2:de:bb:dc:
57:bc:32:af:b7:ae:2f:08:a2:35:74:68:1d:1a:41:
1e:fc:eb:29:5b:c9:8f:87:1a:53:d4:38:5f:e1:a0:
c1:fd:e2:58:d1:ec:80:71:37:0c:31:09:c6:fe:17:
0a:88:af:ea:76:ea:bb:4f:89:c9:19:4e:4b:06:01:
17:01:77:ec:28:9a:41:1c:01:4b:db:69:5e:ce:ed:
fb:95:b3:29:33:17:58:09:67:2e:2c:a4:e6:af:62:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E2:03:77:AB:4B:26:4D:44:61:16:4D:35:1E:0E:6D:ED:9D:49:E6
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:57:f0:65:2c:b3:29:bc:5e:b1:1b:78:08:5d:cf:cd:ed:ca:
88:e7:69:43:72:d6:e5:7b:73:9f:5a:fc:d6:d6:c7:d6:c7:94:
5a:fb:fe:9b:28:89:79:d4:ef:e8:c1:6d:58:4e:80:64:ef:95:
aa:7c:ec:db:91:14:3c:4d:f0:93:14:89:b0:6f:6f:8a:50:af:
87:72:25:f1:57:6f:20:d9:aa:50:b4:d3:42:c5:d2:c9:f1:8a:
5d:05:d5:cb:f8:40:ec:2a:a3:8a:3e:45:b8:39:22:24:8e:fd:
9b:64:e6:e0:81:e9:11:91:47:9b:d1:7b:db:68:f6:ac:b9:4c:
73:d9:0f:d4:ff:53:6f:40:a4:b7:83:f0:b2:22:58:dd:03:3a:
29:3c:7d:20:1e:62:41:2c:8b:28:68:4c:95:c7:ce:a5:92:1c:
a2:32:0b:80:83:e0:12:d5:a9:3b:e3:e2:0a:2e:9b:1f:de:ca:
8d:4d:03:d2:4b:dc:f7:fa:00:12:f9:28:31:bf:50:c6:e1:a9:
2a:9f:bb:0e:88:d1:ed:ea:2f:13:5f:51:83:80:c6:a5:9f:6b:
85:41:93:29:eb:e9:08:0b:d2:04:44:ed:e8:d2:37:25:26:2d:
cd:de:c5:a3:38:49:5f:2e:05:1e:6e:7b:54:d6:c0:38:df:25:
40:50:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:33:21 2026 by rpki-client