Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
File: K1iORmAJUgViBhvvZbf0gpgomGU.mft (raw, json)
Hash identifier: ApUejCF10dryqfulO94L+Pbgw7hg6IuYlG/GwChPiBE=
Subject key identifier: EE:C3:EC:E9:44:87:4E:91:CA:24:37:26:3A:56:10:11:8B:C9:45:8F
Authority key identifier: 2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
Certificate issuer: /CN=2b588e466009520562061bef65b7f48298289865
Certificate serial: 019F10ADEE5DA89F59DEF9867671509B2C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
Manifest number: 01AC
Signing time: Mon 29 Jun 2026 00:01:01 +0000
Manifest this update: Mon 29 Jun 2026 00:01:01 +0000
Manifest next update: Tue 30 Jun 2026 00:01:01 +0000
Files and hashes: 1: BTaxjaAuAYx2Mtyrjvy8RsSBVlA.asa (hash: lfaIjF7uiHYdFf+hzTjn5HPdY1nfdVq2QswXgCrjp4s=)
2: K1iORmAJUgViBhvvZbf0gpgomGU.crl (hash: IuuBvAZ/2QWK57Kc3P9p1YM9Oz9nVSetzFpnPw5kfF4=)
3: z2WbFotJlc5p1cMGvSPUFFihXt0.roa (hash: dUVgzJ6l/KKfEgalE16Upz4cVUb7zxRYQ46guX2wkl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:ad:ee:5d:a8:9f:59:de:f9:86:76:71:50:9b:2c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b588e466009520562061bef65b7f48298289865
Validity
Not Before: Jun 29 00:01:01 2026 GMT
Not After : Jun 30 00:01:01 2026 GMT
Subject: CN=eec3ece944874e91ca2437263a5610118bc9458f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:57:4c:ea:89:69:26:92:99:52:10:2d:dd:
9a:2c:eb:16:ce:30:58:78:36:ff:d2:7f:6c:ab:35:
40:b8:5f:1f:c7:5f:b0:c4:50:7b:41:ea:36:bf:8c:
87:e8:8b:e1:0f:d1:2e:3e:ec:c9:47:3e:dd:16:59:
ec:63:96:76:a7:54:6a:e9:04:0f:c1:c7:47:60:7e:
e3:da:32:de:47:b1:1f:df:1b:1f:a7:3f:c9:7d:4f:
d3:60:c6:26:99:90:02:ae:d5:88:b8:8c:3f:0c:97:
30:e7:37:36:15:cf:97:49:2e:2d:c5:4a:f2:5e:78:
06:87:3d:b2:8b:56:5f:00:8c:12:77:2b:13:f5:83:
ca:0e:b4:29:16:f9:ab:e7:27:7d:7a:38:64:6e:27:
22:48:38:32:2c:1d:20:b8:a3:5e:a4:09:c6:9e:d5:
86:81:3b:23:62:9e:74:97:44:1b:b2:59:50:df:ea:
36:52:16:c2:be:f9:50:c5:5e:e9:0e:5a:20:8f:35:
79:88:42:7c:99:23:f8:58:1d:9b:89:87:66:f6:30:
87:3e:eb:d7:d5:5a:8c:bf:7f:df:e0:54:f3:d1:0d:
2e:07:b9:e9:78:87:bc:25:67:3a:63:58:2d:bc:ae:
41:9c:b3:1a:80:14:f0:2a:f4:ed:33:d1:d1:ac:d3:
61:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C3:EC:E9:44:87:4E:91:CA:24:37:26:3A:56:10:11:8B:C9:45:8F
X509v3 Authority Key Identifier:
keyid:2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d7:d0:4d:ce:df:bc:98:2a:d6:6b:36:e2:bb:d0:34:a1:9b:
6c:7e:33:f4:bf:1d:22:80:aa:04:3d:8e:1e:1d:93:5e:75:c5:
76:dc:7c:da:99:0f:fc:11:81:dc:97:8a:b5:d9:21:0d:cc:41:
fd:a5:1a:dc:60:a2:83:a9:f9:a5:9a:73:2d:9e:be:2f:c9:4c:
ad:0f:be:5a:f8:7b:19:77:2d:c4:38:c4:79:86:ff:e2:02:e5:
24:42:ba:c5:a9:08:4b:ea:c7:0c:ce:95:1b:20:e1:88:b1:96:
52:8b:b5:0d:91:29:ee:5f:82:d1:41:90:7e:84:7a:cd:73:64:
d7:8d:a8:5e:04:71:69:c0:05:6f:59:92:65:4b:b6:cb:90:f7:
82:88:88:d9:1b:cc:22:91:7a:37:ec:cd:de:8f:f0:9c:7b:e4:
9f:c4:78:01:b2:6c:86:f2:47:e9:38:92:92:d4:24:03:a0:8c:
64:dd:ad:dd:9b:a4:00:19:d8:67:1d:a1:a1:9f:11:e5:30:2c:
2d:51:29:58:ff:8e:a9:11:d2:26:67:a7:85:42:3c:df:27:87:
c9:2f:66:a1:82:d6:09:aa:0d:9a:38:e2:fb:fa:98:0d:79:82:
2b:be:21:77:a0:a9:88:b8:e2:da:3e:1f:58:cd:bc:97:55:f9:
28:47:5d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:39:40 2026 by rpki-client