Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier: /kZ7E1b/L7tDme481JveGHbC5SaxSz43VYymB20n0oI=
Subject key identifier: C9:7A:58:56:55:9B:D2:7C:BF:C2:DC:49:B4:AB:A0:04:79:9E:5D:4E
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 01A03E5F5977FE2DB1C38B561B28CADBAD4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number: 1A24
Signing time: Wed 26 Aug 2026 14:00:31 +0000
Manifest this update: Wed 26 Aug 2026 14:00:31 +0000
Manifest next update: Thu 27 Aug 2026 14:00:31 +0000
Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: KMpIfLkuAqoIG3d/TRplBpsEF76q9l+jcgQAO5VKGV8=)
2: RTa46YjqIB57sl6TXUqs2BxTTOc.roa (hash: KPHNrqroDbFqES68zQrY2KXBJL2CCYvWrdznMKfxk0E=)
3: X_sri3cRhFYahHNip0OaQkurzp4.asa (hash: fwKy6Axs5Ma5eaNMv/Pfvsc1xJbWQPfYwiDVZkFrQh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:59:77:fe:2d:b1:c3:8b:56:1b:28:ca:db:ad:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Aug 26 14:00:31 2026 GMT
Not After : Aug 27 14:00:31 2026 GMT
Subject: CN=c97a5856559bd27cbfc2dc49b4aba004799e5d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:25:03:d4:67:68:03:13:05:09:c6:c4:16:
1d:ca:bd:ec:7d:38:0f:ff:98:ee:28:68:22:c4:ae:
89:8e:fe:70:f0:87:48:73:32:1f:24:99:29:b3:29:
3c:4c:7a:26:33:3f:66:e3:8a:47:4a:c1:c3:3b:ca:
c4:82:23:f1:03:a8:61:e7:dd:a5:1f:59:60:52:18:
a5:fc:25:38:91:6b:fd:e7:8f:e8:64:63:b8:c9:5d:
9c:38:8a:dc:47:56:63:8b:dd:89:fe:01:5e:68:32:
11:b1:dd:d6:29:ac:1d:3c:39:e3:d1:67:14:f2:43:
b1:30:23:77:2e:f6:37:81:ce:dd:86:34:c6:1b:24:
d9:df:8e:88:c6:a1:61:bd:45:c7:86:ae:05:a2:3c:
65:51:7b:47:6a:27:c3:13:f1:4f:47:43:ab:c1:4a:
50:8b:f1:99:eb:3c:b7:0b:de:69:62:a1:be:3e:df:
a3:3f:cd:64:58:1d:08:e6:3f:2b:80:23:92:68:a1:
54:cf:11:00:3c:42:da:4b:c9:11:8c:80:e1:3b:8d:
45:2f:b6:d9:d6:a1:45:ed:8b:82:07:2d:dd:00:a0:
df:0b:d1:ae:0b:8a:2d:9a:e4:2d:7b:11:ce:6f:2a:
ea:4c:5f:3c:ae:d2:cd:c8:91:bb:43:84:e8:3e:14:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7A:58:56:55:9B:D2:7C:BF:C2:DC:49:B4:AB:A0:04:79:9E:5D:4E
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b3:a2:6a:93:0d:c4:09:0d:cd:be:94:a3:a0:84:7f:17:a5:
fe:5f:e5:fb:8d:aa:1c:ba:8d:61:db:c1:c8:7e:71:94:c2:1a:
b3:a4:99:54:72:a3:9e:a0:4f:09:5e:f8:e0:29:ff:d7:ae:d8:
19:8e:1e:20:ae:30:17:25:8f:26:25:34:c7:e9:80:4d:24:ce:
9d:96:97:bb:82:fd:f0:4f:e3:7c:9a:55:f7:87:58:cf:aa:d4:
52:7b:c8:1d:5b:da:fd:9b:2b:7f:21:2d:ab:2b:60:c0:67:6b:
97:04:11:53:e3:f4:c0:da:ba:e3:1b:9a:39:43:14:41:87:19:
c9:da:2f:4d:5f:85:13:24:3a:ec:e4:b1:51:e2:b5:26:bf:e2:
0b:ea:67:ba:19:13:67:d8:d0:3c:61:fb:f8:74:f0:7b:fa:da:
e3:a9:17:8d:0b:48:38:0c:64:c2:53:6f:36:6b:15:95:91:d3:
0a:1f:46:7c:71:24:23:c4:40:4b:8f:f4:70:fb:a2:87:0e:e6:
c9:c9:f8:e2:08:c3:0f:ae:d9:29:5d:bf:50:b6:59:a3:38:d6:
fa:09:cc:9d:19:9b:c5:41:70:c8:ab:30:60:68:7a:18:b1:6d:
18:a4:a2:28:2b:6c:92:97:27:18:60:06:e9:e1:d0:ea:2f:36:
f5:58:06:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:29 2026 by rpki-client