
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
File: K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json)
Hash identifier: i8OhqIgiESis+iNbc36bG/pj4hMr/o7dMiMbE6mfWtM=
Subject key identifier: 5A:F8:EF:DF:80:33:68:61:A4:A7:C5:C8:E1:82:0A:A2:2D:BF:FA:2E
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial: 01A122AFB724F461BAAF2DA833E38D37BD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
Manifest number: 1A9C
Signing time: Fri 09 Oct 2026 22:01:43 +0000
Manifest this update: Fri 09 Oct 2026 22:01:43 +0000
Manifest next update: Sat 10 Oct 2026 22:01:43 +0000
Files and hashes: 1: 5seVusnKx_Ys9lX6helV3VYtD2U.roa (hash: PZFyRFcdx9T5Z2TzIZsPirDrvtRVVFWfye1bbVqWbBc=)
2: 9btJARByxb1iHyonPUVBkRTOsVo.roa (hash: OoaKNkwSuE9swZGc5WUnPf4K5AgnLBPyAFCvevkhF9U=)
3: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: wMoPUIopcqO8zZErc4+1ifmGO1lBIcrK4l63drawh0Y=)
4: XWrsnRZ3w0e0DoMnOjNkuaIXctc.roa (hash: hKOZKXZd+O54dyQoUT1ViJz0QYsGp84f/gyggnOHiyY=)
5: _VixDRlDHcr6PrncvZUZ-GW6afw.roa (hash: XqMR9xWk1nvAk22Z7sQHJKRu3wfO9rwjwEWrKeLB+8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:af:b7:24:f4:61:ba:af:2d:a8:33:e3:8d:37:bd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Validity
Not Before: Oct 9 22:01:43 2026 GMT
Not After : Oct 10 22:01:43 2026 GMT
Subject: CN=5af8efdf80336861a4a7c5c8e1820aa22dbffa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:ac:0a:b2:15:ca:51:dc:14:43:09:b2:39:
dd:d2:9e:63:5e:4e:a8:b9:a1:b2:3d:d1:0d:6c:c3:
4a:47:0e:67:dd:54:48:07:b7:6f:84:8e:94:fd:5d:
5e:b5:98:14:54:29:39:85:0c:41:40:f9:0b:bf:fb:
cc:91:e5:53:3a:0d:b8:9a:66:64:28:01:c7:98:87:
36:d3:d6:f0:c2:0b:52:75:8c:80:a4:76:a3:16:85:
20:82:01:33:93:ea:f1:c7:cd:cd:56:a4:f9:71:5b:
f2:9d:54:44:42:bb:0b:e2:da:59:e6:0e:e2:67:a0:
ce:80:3d:d0:c0:4d:5c:32:d7:53:77:73:5b:d5:20:
d8:7d:8d:08:fd:ef:2d:75:98:69:26:ac:fb:9c:c3:
e9:a1:43:71:38:9b:83:54:ff:66:24:76:b1:76:55:
f0:12:55:e0:b7:b7:b1:36:a1:e7:a9:bb:ab:0d:f5:
bc:7e:2e:7e:cb:54:17:ab:04:61:e6:0a:4e:d2:75:
ca:47:22:dc:fd:af:d7:b8:3c:c1:7c:8f:ca:fd:2d:
53:a1:ea:13:50:5b:30:72:cb:b5:ed:c8:fa:08:1b:
eb:cf:04:a6:e2:82:81:45:03:00:19:31:34:ac:36:
71:c7:44:f5:6b:fd:98:bc:6a:d2:3b:f8:06:30:cc:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F8:EF:DF:80:33:68:61:A4:A7:C5:C8:E1:82:0A:A2:2D:BF:FA:2E
X509v3 Authority Key Identifier:
keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:52:b7:07:00:10:26:84:f4:a2:14:05:28:0a:99:bd:a0:22:
ea:87:d9:31:cf:7a:b7:15:4b:8d:16:86:7b:05:5c:df:6f:ae:
ac:d8:54:77:4d:19:26:20:8a:d5:81:28:64:c9:7f:04:be:b8:
f1:f6:88:22:ca:e0:e9:be:1b:39:07:82:a2:ba:67:29:9d:b1:
3a:0c:3e:aa:16:e7:08:b1:15:5a:88:e5:2a:42:a6:54:7f:7b:
7c:ec:e6:e7:4e:71:81:94:71:6a:14:30:f8:81:c2:85:7e:ed:
43:4b:78:88:ab:7f:47:ce:72:68:26:fc:30:81:30:a8:75:5b:
e7:e8:cf:44:ea:7e:05:cf:4b:08:22:66:7b:92:64:df:8e:40:
52:34:18:90:34:33:67:ba:2d:4c:40:31:f8:34:b7:cb:04:4f:
72:aa:43:db:3f:c5:ac:46:91:07:12:ab:2e:4f:c4:c5:2e:49:
4d:48:97:ae:b7:a6:4b:f7:49:36:01:11:04:07:9b:4a:f3:c8:
bd:08:81:d5:6c:7a:31:1b:07:21:fe:a3:c3:c2:6a:54:35:4f:
bb:b0:b0:e0:1f:ea:d1:96:ee:36:2b:b9:9b:a3:56:0c:dc:27:
36:5f:51:9e:75:61:1f:4d:80:1a:f7:a8:07:56:b8:5a:6a:da:
62:b5:2b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 02:54:18 2026 by rpki-client