Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
File: K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft (raw, json)
Hash identifier: TOm1Bj2Dx+s8S6A1O4Aj7hvbC9Xno/2o3/i7zFDNL7c=
Subject key identifier: EB:3F:CF:1A:1B:EC:5E:11:ED:A8:23:5E:93:A2:1E:9E:79:DA:54:4E
Authority key identifier: 2B:44:DF:4E:07:2E:18:78:63:E8:2E:4F:BE:3A:7A:CE:AF:44:96:63
Certificate issuer: /CN=2b44df4e072e187863e82e4fbe3a7aceaf449663
Certificate serial: 019FA2CE2FE035EBAD0F63BB58F9CB65126C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:00:49 +0000
Manifest this update: Mon 27 Jul 2026 09:00:49 +0000
Manifest next update: Tue 28 Jul 2026 09:00:49 +0000
Files and hashes: 1: K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl (hash: R6dVZFUWKn0RhaghkkyWXm43maj+S6KbFcGAnZ1KeFk=)
2: MCJHMq3DaEcsDlBngovhIGwxerY.roa (hash: ceSH2iap4Ad4G5FgYSyum63drzQRVImpBZ3iM3Jeasw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:2f:e0:35:eb:ad:0f:63:bb:58:f9:cb:65:12:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b44df4e072e187863e82e4fbe3a7aceaf449663
Validity
Not Before: Jul 27 09:00:49 2026 GMT
Not After : Jul 28 09:00:49 2026 GMT
Subject: CN=eb3fcf1a1bec5e11eda8235e93a21e9e79da544e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:34:59:9b:3f:0c:78:95:e6:72:21:16:5d:
3e:c7:78:ab:ba:02:1a:a2:12:b9:85:c8:b3:0d:87:
b7:1e:3c:5c:0c:b1:7e:db:04:8c:f6:59:4f:6d:08:
08:fa:48:b5:f3:87:95:02:e6:0f:bb:c8:c8:45:91:
84:7b:2f:31:1f:75:c6:6d:d5:2b:90:f3:e1:f9:31:
9f:a5:da:1b:39:aa:38:b0:80:af:92:b5:65:02:7c:
e3:5e:8a:0f:37:dd:92:09:d3:8c:53:ee:07:57:f1:
82:98:8a:60:bf:a3:5d:c6:2a:62:0e:c8:69:83:34:
20:a0:8d:f1:9d:2c:fc:a8:97:d5:f9:51:6e:7c:27:
e4:e2:67:b9:85:7b:af:b6:6b:5c:32:d3:b1:14:4a:
1f:c7:43:7d:0d:b1:bc:26:97:50:30:4d:5d:b2:d2:
85:aa:29:03:44:11:8e:c4:01:c6:a2:24:c3:73:ae:
cc:d6:cf:98:32:f1:44:40:54:7e:d5:df:61:90:fa:
0b:5b:39:e0:85:16:2f:23:a3:03:21:b4:51:f1:7f:
f4:90:05:3a:18:c7:e5:4f:f3:2f:ec:30:14:31:29:
a4:33:3c:08:3c:77:c4:5f:57:30:c7:82:6f:5a:0b:
00:d5:0b:5e:16:48:d8:f7:fe:28:92:41:55:22:e9:
2b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3F:CF:1A:1B:EC:5E:11:ED:A8:23:5E:93:A2:1E:9E:79:DA:54:4E
X509v3 Authority Key Identifier:
keyid:2B:44:DF:4E:07:2E:18:78:63:E8:2E:4F:BE:3A:7A:CE:AF:44:96:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8c:43:31:a6:13:73:55:68:69:3c:5c:13:a9:f4:c2:0e:42:
65:ca:a8:1e:89:82:c9:49:82:f8:ba:3b:e1:b9:c8:11:71:3b:
c7:8d:be:9c:f5:77:6c:04:2f:94:20:62:7b:b4:09:57:fb:7a:
bb:40:c1:5a:04:17:40:1e:f9:af:6a:08:33:4f:ad:b1:3b:44:
4d:3c:65:aa:91:7b:de:18:bf:2e:17:fc:47:1a:14:09:9f:cc:
d0:84:c9:c0:dd:d2:0a:c6:d5:e8:b8:2b:71:fe:f9:0f:5e:25:
f1:f1:bd:19:e6:66:30:76:e3:d4:94:5e:ad:07:4a:a0:d6:68:
91:f4:1d:dc:2a:32:40:94:28:a3:ee:20:de:83:d8:d0:a0:cc:
fa:c0:d4:d8:89:fa:5a:ee:b4:86:b5:7e:fa:7e:b0:5d:06:80:
18:f2:75:e4:31:96:97:78:2d:5d:f5:33:68:64:2e:60:be:07:
18:93:3a:5b:67:33:8c:37:51:9d:f5:c5:54:93:13:50:c2:ef:
81:d3:93:74:23:71:70:4f:0e:60:91:1f:42:cd:49:74:c2:06:
e6:ef:68:7e:c9:af:47:c2:8a:82:c5:e1:13:36:87:b5:a2:3c:
fb:db:6b:fc:8f:7d:05:ad:fb:3a:e5:db:67:22:9f:7d:ef:1a:
4d:bc:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:47:09 2026 by rpki-client