Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
File: K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft (raw, json)
Hash identifier: BMsE3iAxTrPo/9I9BIHsHuc8DqEU/nV/Tb+U3bPxzPM=
Subject key identifier: E2:15:0C:5D:10:1D:95:80:CB:20:D1:4F:B3:BA:63:C6:09:9D:67:EA
Authority key identifier: 2B:44:DF:4E:07:2E:18:78:63:E8:2E:4F:BE:3A:7A:CE:AF:44:96:63
Certificate issuer: /CN=2b44df4e072e187863e82e4fbe3a7aceaf449663
Certificate serial: 01A18976C2FECE72F58BCFD4A9552851727F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
Manifest number: 0145
Signing time: Thu 29 Oct 2026 21:00:24 +0000
Manifest this update: Thu 29 Oct 2026 21:00:24 +0000
Manifest next update: Fri 30 Oct 2026 21:00:24 +0000
Files and hashes: 1: K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl (hash: //vY3KhRShLc0c/7BSWBSLXgHEPyVm2Avqk6kJiRRso=)
2: MCJHMq3DaEcsDlBngovhIGwxerY.roa (hash: ceSH2iap4Ad4G5FgYSyum63drzQRVImpBZ3iM3Jeasw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:76:c2:fe:ce:72:f5:8b:cf:d4:a9:55:28:51:72:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b44df4e072e187863e82e4fbe3a7aceaf449663
Validity
Not Before: Oct 29 21:00:24 2026 GMT
Not After : Oct 30 21:00:24 2026 GMT
Subject: CN=e2150c5d101d9580cb20d14fb3ba63c6099d67ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d1:57:b8:60:82:fa:b4:ea:91:57:78:53:5c:
82:ad:8d:c9:97:45:51:ce:d7:6b:93:1f:b0:65:5d:
4e:01:3b:47:43:af:8e:90:39:82:0d:d5:ef:e6:31:
99:18:e2:89:b9:2d:dd:93:c3:87:53:bc:e9:ae:82:
76:7e:01:86:56:0c:d4:6b:d5:81:70:37:05:14:ee:
31:f1:21:3f:f8:ad:12:02:2a:8d:91:9e:29:d8:dc:
96:46:0f:6c:22:f2:42:97:3b:78:d6:4c:d1:30:8d:
c7:63:47:9d:83:9a:20:49:1b:51:62:ef:c9:79:12:
f6:27:d1:9a:01:6b:35:a7:38:dc:33:3e:bc:22:0e:
08:cb:7e:42:25:a0:8e:80:58:87:c0:84:75:1e:26:
24:16:72:7f:6e:b9:8f:a1:c2:aa:32:95:be:20:28:
6a:34:47:d5:6e:c6:e4:62:8d:bc:c0:e6:2c:a7:4f:
c4:b5:9b:ee:8c:e8:bc:79:79:e8:db:27:05:ae:29:
37:5d:66:ed:e7:fd:24:3d:61:64:f4:22:a8:4d:58:
4e:2f:7e:db:43:8b:ff:62:fc:18:3f:e5:ab:f3:fb:
64:69:44:f2:97:0a:99:11:0d:c4:1f:e5:0a:d8:55:
8a:3d:ab:d6:a5:8a:1d:34:16:1c:e0:93:27:d9:94:
26:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:15:0C:5D:10:1D:95:80:CB:20:D1:4F:B3:BA:63:C6:09:9D:67:EA
X509v3 Authority Key Identifier:
keyid:2B:44:DF:4E:07:2E:18:78:63:E8:2E:4F:BE:3A:7A:CE:AF:44:96:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:58:ba:7a:ac:8e:1f:19:8c:18:ed:19:96:d6:a3:6c:a7:18:
7d:3f:d3:2f:a2:be:69:28:70:5f:63:1d:b0:c7:7d:e1:4c:0e:
b6:b4:e6:fb:a2:ce:87:c4:af:de:48:63:32:a6:06:16:e1:d1:
89:2f:94:d8:68:22:e9:07:ba:de:2a:24:5d:3d:de:1c:a3:3e:
c7:e6:21:0b:71:41:c5:32:2b:32:fc:2d:0e:7e:12:9b:15:bf:
17:6f:d4:da:b7:78:88:c5:e2:ad:17:e9:da:d7:12:e8:04:d7:
f9:7e:08:23:5e:ed:75:12:9c:fd:2c:a9:3d:92:6d:9d:18:30:
18:66:99:84:44:f5:88:75:80:2f:d1:4e:80:e3:e8:d2:1f:c1:
61:3f:09:0d:fd:59:0e:39:9f:55:62:4a:3a:87:07:e3:72:b1:
23:73:8e:c5:e9:5e:a3:28:60:81:08:5d:ad:6a:04:77:0f:78:
09:94:20:5d:c9:c3:e0:82:c9:05:ab:5f:f9:c6:fc:c3:c8:ee:
29:e7:4d:b5:25:a5:d2:17:d0:00:b5:e6:14:d2:64:03:07:7c:
51:3d:ea:1d:6f:71:33:2d:12:89:47:e8:2e:bf:68:0f:31:ed:
4e:ee:0c:a5:12:4e:e1:48:3d:54:93:dd:8b:29:49:57:5f:79:
d7:00:e1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 02:45:14 2026 by rpki-client