Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: Z2vWAsLAGEfrOTXD/Q+gIawShZNVtoiJwuu1K3+wxr0=
Subject key identifier: C0:BB:DB:8F:0D:32:92:AA:7B:90:A9:16:3C:C9:21:1F:C9:21:52:43
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 01A17BBAFCA89560BDFF2DCB175CFB44198C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 05:00:14 +0000
Manifest this update: Tue 27 Oct 2026 05:00:14 +0000
Manifest next update: Wed 28 Oct 2026 05:00:14 +0000
Files and hashes: 1: 267NH16MzH47Zyj0K4t3Pr0uSro.roa (hash: mBBDPMXvF9insE4ynTzv2acZX93bp3bRK4WTLefzCSs=)
2: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: VBofQnBAqzmk9dPNdpEhsh9Cwguq/QBKLsSwA7BzB5s=)
3: Z6WV7_CviDtB4kK9RFUQZEfsld8.roa (hash: uV2rBVJavJc5cr+4rj8cgx9FhZFkKhWrOhtApw2SKC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:ba:fc:a8:95:60:bd:ff:2d:cb:17:5c:fb:44:19:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Oct 27 05:00:14 2026 GMT
Not After : Oct 28 05:00:14 2026 GMT
Subject: CN=c0bbdb8f0d3292aa7b90a9163cc9211fc9215243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:b1:3b:11:f7:c1:a4:c4:81:a5:77:a7:67:
2e:f7:5a:7f:8b:21:33:17:87:9a:82:d0:e0:02:2f:
01:ab:e3:4e:3e:5f:ed:ff:af:a5:2f:ee:26:5e:3c:
51:8c:40:e9:01:da:54:aa:d1:30:a8:9f:7f:b7:7d:
49:c2:72:04:7f:af:d2:c0:8b:cc:c0:02:61:43:82:
b0:55:37:90:e9:82:09:00:c6:10:1e:14:9a:d0:b9:
4f:67:fc:d5:7e:42:00:a0:07:10:b0:62:12:a8:1b:
08:05:95:64:5b:07:86:78:01:ce:de:5f:3a:7a:2a:
6e:dd:c4:76:6a:08:4e:96:bd:a5:3c:26:9e:cf:0d:
7a:41:c9:6c:b5:52:b4:29:bd:f0:be:fa:01:d7:6c:
4c:af:78:2d:72:23:60:de:45:fd:31:f4:e4:2a:49:
55:1d:ca:c9:70:21:a3:51:a9:1d:78:a0:e8:82:88:
e4:be:17:08:74:bf:85:14:2d:e1:23:75:f2:72:af:
e8:77:29:d3:03:a7:b9:c0:d8:52:16:61:8a:f7:88:
4b:f9:18:9c:c0:f4:ce:51:3c:bc:18:ef:91:7e:0f:
4f:d5:1e:d4:e8:88:4f:39:c7:96:fd:2e:8a:61:40:
af:72:c2:5a:83:ca:a2:59:7f:d4:24:07:25:14:66:
92:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BB:DB:8F:0D:32:92:AA:7B:90:A9:16:3C:C9:21:1F:C9:21:52:43
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6f:1f:75:48:c5:72:b5:25:c9:82:96:8d:a2:84:a9:d9:9d:
98:d9:f8:3f:81:a4:03:bf:7d:f0:66:18:54:c2:f4:55:20:3f:
46:c1:c4:77:92:80:63:8a:4c:e8:6d:de:5a:89:32:f5:34:85:
4c:ba:eb:59:89:65:de:07:5c:fa:c6:82:bc:e8:90:c8:5f:5c:
31:37:65:9a:aa:dd:cd:54:cc:a0:a3:82:c7:83:52:ae:cf:bc:
37:73:bf:b4:74:3a:9b:6c:69:cd:de:93:ba:b1:f9:64:8d:9a:
cb:65:e8:ef:bd:53:eb:ec:6d:e5:8b:b1:69:a9:69:91:07:7a:
ca:cf:fa:de:3d:95:8a:f2:d6:2a:94:56:c4:ec:54:37:b4:43:
00:83:c2:fe:7e:66:32:79:74:4b:9d:4b:f2:17:57:f5:29:52:
94:3b:d0:45:d7:bb:90:30:25:25:fc:09:22:d7:6b:43:60:a9:
08:95:f9:da:e7:ae:84:e0:5e:0a:74:a5:a9:d7:bb:8f:5b:17:
22:11:05:32:92:a7:db:39:25:2a:b4:be:af:a5:74:2c:95:48:
be:14:13:fc:66:a2:64:9f:48:bf:3d:1e:7d:ec:2e:8f:09:f3:
8f:c1:1c:2e:91:79:2e:d9:b7:51:47:2f:85:a4:6f:76:ee:f7:
88:de:e5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:14:03 2026 by rpki-client