Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft
File: K1iJW-74e1UDAHkRLUqxfZPJiiA.mft (raw, json)
Hash identifier: k3WGgTULlewTwRj5qUK+W9DXw+bzypfwu/GdmHDRNZI=
Subject key identifier: 85:C6:BA:C6:C3:8F:3A:CA:8D:C1:C9:E1:24:07:71:E6:E6:90:D0:F5
Authority key identifier: 2B:58:89:5B:EE:F8:7B:55:03:00:79:11:2D:4A:B1:7D:93:C9:8A:20
Certificate issuer: /CN=2b58895beef87b55030079112d4ab17d93c98a20
Certificate serial: 019D37C05DF700189E4FAA32E41419A4A3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iJW-74e1UDAHkRLUqxfZPJiiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft
Manifest number: 015A
Signing time: Sun 29 Mar 2026 04:00:46 +0000
Manifest this update: Sun 29 Mar 2026 04:00:46 +0000
Manifest next update: Mon 30 Mar 2026 04:00:46 +0000
Files and hashes: 1: A0WxIMRMNMclEvt4ndusa1g2IhE.roa (hash: szMuq8++oIkroMPNyvWtoJIXZcpNBA4TyVyyn0tkBCA=)
2: K1iJW-74e1UDAHkRLUqxfZPJiiA.crl (hash: 6c+JaY+Rnr0DiyaBvYQUj6RQ6PEjU4M1F11ozbeOyBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1iJW-74e1UDAHkRLUqxfZPJiiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:5d:f7:00:18:9e:4f:aa:32:e4:14:19:a4:a3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b58895beef87b55030079112d4ab17d93c98a20
Validity
Not Before: Mar 29 04:00:46 2026 GMT
Not After : Mar 30 04:00:46 2026 GMT
Subject: CN=85c6bac6c38f3aca8dc1c9e1240771e6e690d0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:f5:56:b0:a6:05:9b:e5:d1:2a:87:71:33:
39:03:8e:dd:20:81:36:b2:e8:ea:b0:91:84:60:e7:
65:b1:c1:e7:8f:20:ab:cc:27:13:e8:fe:76:ce:0e:
4c:8c:cc:06:58:12:5d:15:f8:1f:75:77:68:1e:61:
07:ee:92:34:d6:da:d4:40:af:3a:3b:e7:52:93:d5:
2c:b6:bc:e1:4e:3e:1a:84:7f:1e:2f:f1:66:f8:df:
90:6c:27:b2:a8:15:5d:f3:9c:ef:54:00:a6:19:50:
a2:d0:5b:ce:f9:c7:5e:6c:64:8f:91:31:6e:82:25:
e1:e9:e5:12:eb:85:52:79:f7:79:da:b1:6d:d1:fe:
02:7b:c3:9e:11:f9:65:51:88:97:9c:51:62:d1:81:
74:fe:fe:43:6a:53:18:22:2b:90:17:46:66:4a:86:
e7:75:73:4b:fe:65:39:25:e1:9b:3f:b7:ae:2d:aa:
45:ad:b8:ae:10:ea:bc:23:8e:a8:86:2e:0e:47:d7:
11:83:c6:80:bf:11:03:c6:18:31:5c:e5:46:b7:18:
f8:57:0d:07:94:26:12:ed:5d:05:b4:16:f3:2a:07:
75:79:15:5d:7a:af:77:17:8e:9c:8b:50:e5:a7:4c:
a1:2f:17:be:3e:7a:22:ad:41:3f:9e:70:63:17:f2:
62:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C6:BA:C6:C3:8F:3A:CA:8D:C1:C9:E1:24:07:71:E6:E6:90:D0:F5
X509v3 Authority Key Identifier:
keyid:2B:58:89:5B:EE:F8:7B:55:03:00:79:11:2D:4A:B1:7D:93:C9:8A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iJW-74e1UDAHkRLUqxfZPJiiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:89:44:ad:9e:11:70:ec:63:5f:e8:40:8a:27:75:f8:d3:3c:
c9:93:d5:49:73:87:e4:c0:64:34:23:3a:31:60:33:39:94:ed:
2a:5f:c4:e9:9d:79:d0:47:68:57:5a:55:d3:94:e0:04:5b:eb:
97:fd:16:25:9f:10:e2:84:0d:19:87:ab:e2:f8:37:9b:9d:82:
f9:1f:1f:98:49:1e:b6:f7:5d:26:69:43:a0:6e:49:8b:2e:a8:
c4:9b:5e:a2:0c:cb:54:7e:25:5d:17:89:74:af:9e:ea:ac:4b:
ad:56:8a:cf:c4:bf:82:14:f5:16:7d:c4:b9:f2:cd:89:ab:ff:
a2:db:2b:17:b2:74:15:f2:02:a9:13:6d:97:b5:df:cb:3e:13:
85:21:ff:3f:61:4f:cc:a9:e7:ba:88:6d:9b:d7:1e:47:fd:b4:
ab:0b:03:53:2d:06:52:82:82:e2:1b:43:18:21:0d:59:e8:e5:
76:54:86:da:f7:3c:56:6b:1e:3a:73:a3:93:77:51:05:9b:22:
1f:52:9a:5d:cf:05:48:cb:b5:1e:16:8e:5a:8d:ca:ab:32:25:
c4:16:34:02:4d:c6:17:15:04:34:2e:29:03:f2:87:59:32:94:
ba:3e:23:d7:31:50:c2:72:03:de:69:4d:47:f4:80:fa:49:be:
38:94:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:02 2026 by rpki-client