Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
File: K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft (raw, json)
Hash identifier: NEvbiwyo5xuUzo9p2R/bU5QSAAV+3qFRwGc0Gaf02sM=
Subject key identifier: 7F:0C:A0:44:92:4F:69:30:DA:E9:10:EF:2D:19:AA:5D:51:C1:28:DE
Authority key identifier: 2B:44:DF:4E:07:2E:18:78:63:E8:2E:4F:BE:3A:7A:CE:AF:44:96:63
Certificate issuer: /CN=2b44df4e072e187863e82e4fbe3a7aceaf449663
Certificate serial: 01A08C7B96D2705A016363F52E94670EBD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:44 +0000
Manifest this update: Thu 10 Sep 2026 18:01:44 +0000
Manifest next update: Fri 11 Sep 2026 18:01:44 +0000
Files and hashes: 1: K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl (hash: gbU5SG07YsmbCw5UyoVh38/3T93XyoIzlILJOlzFJ/0=)
2: MCJHMq3DaEcsDlBngovhIGwxerY.roa (hash: ceSH2iap4Ad4G5FgYSyum63drzQRVImpBZ3iM3Jeasw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:96:d2:70:5a:01:63:63:f5:2e:94:67:0e:bd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b44df4e072e187863e82e4fbe3a7aceaf449663
Validity
Not Before: Sep 10 18:01:44 2026 GMT
Not After : Sep 11 18:01:44 2026 GMT
Subject: CN=7f0ca044924f6930dae910ef2d19aa5d51c128de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:21:e2:8b:8c:e2:76:fa:43:06:d4:1d:4b:bb:
43:be:b2:1c:cc:e9:e5:83:08:a9:ec:f6:81:69:5c:
4b:56:cb:ea:90:65:44:3a:82:0a:e4:ef:0c:0d:72:
58:4a:c9:9b:97:43:ee:f6:0d:f2:a2:fa:d1:95:17:
84:ac:49:1a:b1:04:c6:4a:6d:69:e6:0e:bc:f2:b6:
c3:a8:b1:ea:e6:a0:55:b5:7c:c8:e3:ac:18:80:54:
f8:52:ed:49:db:ac:b0:13:5f:59:8e:39:d9:36:58:
00:8d:44:c0:81:06:dd:65:2a:9c:db:5d:0b:53:66:
c3:80:14:e2:e6:74:a5:b4:46:73:f6:1e:d4:ae:f0:
43:d1:84:4c:55:5e:e4:a4:84:4e:1d:9a:0c:ae:13:
1f:3e:73:cb:36:41:25:22:00:78:ae:be:23:b1:ee:
40:2a:09:cf:ca:a7:08:19:12:1d:45:ac:a7:c2:d1:
42:96:0e:2e:ae:cd:31:33:3c:f4:34:71:83:a0:2f:
e5:10:16:e8:34:58:2e:1a:9e:50:d3:25:cf:8a:2c:
20:f9:d3:e5:89:b3:d9:34:bc:cc:18:d9:ac:4d:e9:
0d:8e:40:be:d2:d5:3f:a9:83:71:83:1f:cd:e8:3c:
c6:d6:45:5c:76:8a:b0:c3:d8:7f:f5:a7:02:39:2e:
d6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0C:A0:44:92:4F:69:30:DA:E9:10:EF:2D:19:AA:5D:51:C1:28:DE
X509v3 Authority Key Identifier:
keyid:2B:44:DF:4E:07:2E:18:78:63:E8:2E:4F:BE:3A:7A:CE:AF:44:96:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:02:58:da:57:79:59:d4:bb:24:eb:0c:be:1f:02:94:22:a4:
21:69:1a:c8:f4:96:25:54:35:09:e8:b3:1f:45:34:8d:f3:98:
3e:30:b9:cc:fd:ff:e5:24:42:a2:56:2d:bd:8b:e1:ec:5c:b8:
94:3c:e2:64:03:d2:b7:e9:73:e4:9c:d5:e6:88:c6:12:03:f4:
6d:a7:91:4c:71:97:82:85:f5:0b:5d:41:45:0a:94:7f:5f:3b:
a9:5d:3b:12:e0:19:b2:50:15:26:d6:85:e7:88:e0:69:92:ea:
e4:9f:a6:b8:0f:64:24:53:2a:ff:74:7d:17:62:bc:96:b5:1c:
2e:38:54:7b:26:43:a7:4e:a6:34:eb:81:03:25:e5:0d:1c:fa:
f8:76:e6:2e:63:b5:06:93:b7:16:69:bc:56:e1:85:57:c8:9d:
6a:b8:68:8f:8f:05:b1:b4:0d:e2:d3:a9:d3:1a:b0:ea:59:cc:
40:08:dc:47:07:5f:19:0a:e5:65:cc:e0:bd:f1:61:5a:e8:d9:
65:97:1c:ef:14:30:c5:45:34:2f:68:b0:5d:9e:af:1a:0a:1b:
21:4f:a1:23:71:7d:41:02:ef:70:8b:99:db:ff:b3:b8:55:a7:
8c:15:88:ce:29:dc:68:2e:ce:75:f6:5d:dd:7a:a7:a1:ec:14:
92:c2:e2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:49:07 2026 by rpki-client