Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
File: K1iORmAJUgViBhvvZbf0gpgomGU.mft (raw, json)
Hash identifier: HuEncQ60bfMVuKxikr+3CIPmVRdq9nX9F5cCIopTHaU=
Subject key identifier: 4A:91:B3:0D:3D:85:92:60:F3:D2:51:17:0F:79:4E:F1:ED:E6:67:BB
Authority key identifier: 2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
Certificate issuer: /CN=2b588e466009520562061bef65b7f48298289865
Certificate serial: 019E28F01535B6ADEE700495166820448821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
Manifest number: 0134
Signing time: Fri 15 May 2026 00:01:23 +0000
Manifest this update: Fri 15 May 2026 00:01:23 +0000
Manifest next update: Sat 16 May 2026 00:01:23 +0000
Files and hashes: 1: BTaxjaAuAYx2Mtyrjvy8RsSBVlA.asa (hash: lfaIjF7uiHYdFf+hzTjn5HPdY1nfdVq2QswXgCrjp4s=)
2: K1iORmAJUgViBhvvZbf0gpgomGU.crl (hash: 0Hc7RuZH+RArJg/Icoigh6RW2vEONG8DHWSLgpEtZ/Q=)
3: z2WbFotJlc5p1cMGvSPUFFihXt0.roa (hash: dUVgzJ6l/KKfEgalE16Upz4cVUb7zxRYQ46guX2wkl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:f0:15:35:b6:ad:ee:70:04:95:16:68:20:44:88:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b588e466009520562061bef65b7f48298289865
Validity
Not Before: May 15 00:01:23 2026 GMT
Not After : May 16 00:01:23 2026 GMT
Subject: CN=4a91b30d3d859260f3d251170f794ef1ede667bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:fb:66:ad:06:e3:4c:86:65:f6:9d:93:6e:
54:6e:0d:2c:a5:35:5f:01:36:08:e6:41:7d:5f:8f:
4c:99:00:cc:f2:3e:b8:ae:a2:80:74:7d:1c:c6:f8:
70:62:05:8b:c6:26:63:56:c8:47:6a:c2:4d:8c:57:
94:a7:e2:72:5f:54:cd:a3:d1:c6:bc:a1:ab:f6:22:
03:6b:e3:d8:0f:01:15:a5:23:b9:2d:43:8b:41:e9:
4f:55:95:34:8a:aa:a4:7e:3f:e4:b1:68:f7:d6:7f:
62:f3:9a:45:47:d3:b6:46:e6:d3:05:78:9c:2a:d3:
4e:3d:4e:5e:82:c6:3e:49:d9:f0:37:d1:fe:de:71:
b4:ac:4e:d9:aa:d2:a1:3f:47:bf:e2:d9:92:c5:49:
b3:38:6e:50:aa:37:52:bd:14:af:ff:8e:88:74:ad:
c5:3f:cd:d5:d8:2b:79:1c:f2:26:ab:9f:16:f5:42:
a9:e8:f4:d9:56:12:a7:c9:d9:a1:4b:42:33:d3:7a:
9d:08:94:0a:9e:55:6f:27:d0:01:ed:99:12:e3:2c:
38:90:72:22:34:16:74:47:55:a8:bc:8d:41:52:9b:
d5:76:46:32:db:d9:94:0d:0f:0a:98:ed:74:da:15:
a2:7e:90:92:4c:f6:da:8b:1d:08:ff:bb:44:27:85:
18:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:91:B3:0D:3D:85:92:60:F3:D2:51:17:0F:79:4E:F1:ED:E6:67:BB
X509v3 Authority Key Identifier:
keyid:2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:da:5e:9a:2e:42:4e:a4:37:9f:cf:90:4b:45:a9:de:4b:fa:
e8:57:c4:13:6b:75:74:89:fc:24:8e:60:2c:c0:20:41:b9:38:
e8:9b:a7:9f:f2:4a:ee:e0:9a:f2:06:d8:3b:b4:39:b4:f0:98:
aa:80:b2:e2:0e:b8:3d:2c:ef:9b:20:c1:bf:e9:86:bd:d2:88:
39:d6:44:8c:a4:e5:5c:3a:bf:2b:d4:6a:e2:c8:fe:86:c0:77:
3f:54:a4:f0:a3:cb:4a:15:d9:ae:0a:69:43:31:d6:c9:ca:b2:
a2:be:1e:02:4d:ab:30:b3:62:01:e1:07:36:28:9a:29:a6:de:
6d:d9:89:7d:72:c5:6a:bc:e0:1a:53:5e:6d:47:07:82:cb:31:
d1:24:f1:e7:72:ac:69:f2:85:a4:5c:84:a5:4e:74:7b:3d:80:
0f:6a:c7:bb:cd:ba:a1:4a:44:21:37:e8:75:f9:37:be:4e:18:
58:ee:6f:7d:14:e9:57:83:70:89:01:d3:88:20:0d:96:cb:15:
29:10:a5:2c:89:fd:5f:4b:0f:e6:26:05:7c:d8:a6:99:ba:9e:
71:71:f3:4b:bb:fd:6e:f3:c4:29:1a:1b:77:91:cc:ab:98:87:
5f:a7:a2:b6:41:cc:c5:09:47:cf:49:f5:72:fb:c4:70:7f:1d:
91:cc:d4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:22:18 2026 by rpki-client