Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: 5e5cz+kZmpldMA5kHWByJiN8zp7CMLm7MyI59IhKg0s=
Subject key identifier: F7:5A:9F:8B:A2:B8:58:A8:57:F4:57:38:92:9C:3E:78:43:B6:FF:F4
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 01A08A55B6527AB3729139499B52CC06B36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 08:01:07 +0000
Manifest this update: Thu 10 Sep 2026 08:01:07 +0000
Manifest next update: Fri 11 Sep 2026 08:01:07 +0000
Files and hashes: 1: 267NH16MzH47Zyj0K4t3Pr0uSro.roa (hash: mBBDPMXvF9insE4ynTzv2acZX93bp3bRK4WTLefzCSs=)
2: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: aAjnNzfUEs+rYgZV1HNS7oJfxi/zBOO0p/MxD9eEFYc=)
3: Z6WV7_CviDtB4kK9RFUQZEfsld8.roa (hash: uV2rBVJavJc5cr+4rj8cgx9FhZFkKhWrOhtApw2SKC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:b6:52:7a:b3:72:91:39:49:9b:52:cc:06:b3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Sep 10 08:01:07 2026 GMT
Not After : Sep 11 08:01:07 2026 GMT
Subject: CN=f75a9f8ba2b858a857f45738929c3e7843b6fff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dc:98:1f:c8:77:d3:d5:13:e7:4f:c6:c8:8c:
58:a1:09:0d:82:0b:c7:6a:d9:f2:d9:00:44:62:ff:
89:43:ef:b7:64:51:99:26:bd:4f:a4:b1:f2:ea:97:
a2:27:42:4c:eb:a2:cc:8c:a9:7a:a5:19:96:73:cc:
39:22:52:3e:47:bc:6a:24:1e:00:03:c0:da:22:f7:
e5:a5:ce:27:0b:58:b6:0c:2c:b1:93:fa:44:1b:c6:
e3:bc:e4:e7:d2:ef:d4:5c:d7:eb:6c:1e:8e:2a:10:
55:64:45:60:57:19:23:d5:23:53:d7:e5:4c:b4:39:
46:4a:21:1b:0f:59:b8:e3:08:54:90:a3:79:fa:92:
e5:3b:9c:f9:64:58:4e:4d:1d:d6:ca:a5:21:d5:62:
cf:84:c1:3e:59:37:08:a3:8d:03:ee:04:d7:9c:a0:
34:10:1b:17:de:34:5a:b9:d8:af:5a:c1:95:dd:5a:
23:1e:5c:12:6d:29:1a:a1:74:15:1d:0b:d7:3f:16:
a5:c6:80:7b:ff:0b:29:eb:e0:43:6e:78:8c:6a:c6:
3b:5f:21:2c:6a:d6:30:a0:36:00:26:0b:79:59:59:
c4:bc:cb:dc:bf:f4:50:f4:e8:e0:6f:6f:d5:f3:29:
24:d2:17:6d:5b:ca:35:9a:06:eb:6c:59:a4:5c:33:
62:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5A:9F:8B:A2:B8:58:A8:57:F4:57:38:92:9C:3E:78:43:B6:FF:F4
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2a:00:f5:74:c7:56:cb:5d:5d:34:7e:c6:a1:32:4c:bf:f5:
86:76:ef:11:0a:87:55:45:01:17:88:a7:db:97:8d:c1:55:f0:
a6:58:2a:7b:2b:6e:29:5a:53:c6:81:0e:f3:c9:18:db:84:a8:
dc:62:3c:d1:7a:85:c3:bd:72:bf:94:d2:e1:9e:ac:29:09:46:
e9:b2:47:d7:12:09:a1:75:34:0c:9e:71:fe:8b:fc:60:84:25:
2f:5b:8e:86:93:c4:4e:f0:e5:09:63:e3:d8:65:8f:c8:99:e7:
9f:53:6e:69:63:f5:d4:f3:66:87:2b:d3:a9:af:5c:9e:e8:3e:
8b:47:30:f4:5b:b5:62:05:5d:60:7f:3d:5f:f3:06:f5:11:c3:
62:70:49:b8:e6:0f:43:cc:f1:1b:e0:63:ff:4a:27:45:f2:1b:
28:16:ec:4b:6f:89:4b:40:ca:d9:9e:a6:c8:2e:f3:b3:0d:ed:
23:fc:3b:97:8d:fc:0f:46:f8:a4:e0:33:70:e6:0a:f8:df:4e:
2c:6f:64:5b:cf:a2:79:4a:01:5b:f6:16:f4:d4:9d:11:56:e5:
93:67:da:ed:b4:c5:de:4e:8c:ee:0f:94:6a:a1:37:73:00:75:
62:bd:30:c5:05:2a:a0:8d:ba:f3:3d:b5:be:a4:b5:c8:a8:85:
4b:9e:67:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:13:32 2026 by rpki-client