Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
File: K1iORmAJUgViBhvvZbf0gpgomGU.mft (raw, json)
Hash identifier: vq0m/BlNiKmhB+SUKL96EK/AR+mwOjHYl6Fj84m5CWY=
Subject key identifier: 8B:84:FF:8C:C2:43:89:44:F1:1E:52:E3:95:E9:0B:0B:70:BA:49:AE
Authority key identifier: 2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
Certificate issuer: /CN=2b588e466009520562061bef65b7f48298289865
Certificate serial: 01A03826A64D84ABCC4B073B93AB3BE1F916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
Manifest number: 0245
Signing time: Tue 25 Aug 2026 09:00:51 +0000
Manifest this update: Tue 25 Aug 2026 09:00:51 +0000
Manifest next update: Wed 26 Aug 2026 09:00:51 +0000
Files and hashes: 1: BTaxjaAuAYx2Mtyrjvy8RsSBVlA.asa (hash: lfaIjF7uiHYdFf+hzTjn5HPdY1nfdVq2QswXgCrjp4s=)
2: K1iORmAJUgViBhvvZbf0gpgomGU.crl (hash: JMJBKcKTRBOwZsvzrKbghldBN+Y+0OeE2aRRBYrX1i4=)
3: z2WbFotJlc5p1cMGvSPUFFihXt0.roa (hash: dUVgzJ6l/KKfEgalE16Upz4cVUb7zxRYQ46guX2wkl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:26:a6:4d:84:ab:cc:4b:07:3b:93:ab:3b:e1:f9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b588e466009520562061bef65b7f48298289865
Validity
Not Before: Aug 25 09:00:51 2026 GMT
Not After : Aug 26 09:00:51 2026 GMT
Subject: CN=8b84ff8cc2438944f11e52e395e90b0b70ba49ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:5a:9e:b7:27:07:4c:42:f3:f1:3f:a3:db:
33:9e:32:26:99:50:db:f2:b6:5a:78:ee:1b:71:44:
17:6d:d1:83:38:44:44:47:7c:dd:7e:f9:ee:14:f0:
83:5f:b4:a7:21:aa:2a:12:41:9c:72:f7:81:52:e3:
72:c8:7d:32:be:97:59:2e:c4:ba:6c:1b:55:c9:20:
21:f5:7e:da:ef:51:3b:48:fc:ab:39:c2:03:e7:19:
09:c6:3e:3a:53:bb:63:77:ad:ed:5a:ed:e2:74:0c:
6f:c4:7e:a6:54:0e:fc:da:3f:a6:a7:07:44:26:ed:
d7:84:70:36:75:10:74:57:f5:ad:24:d7:bb:cc:5c:
8c:fc:02:72:1e:a1:c7:6b:b8:4d:01:0f:7c:0e:19:
a6:fb:4a:4b:ca:e2:14:6a:13:f9:22:a1:cd:cc:a2:
0a:2f:a0:3e:4d:b1:d4:74:0e:9c:5a:11:59:6e:2b:
7c:81:52:fe:b5:8c:b1:c4:b7:d6:99:ff:b7:48:54:
d5:93:91:32:41:ea:cd:7d:56:d0:dd:7c:83:ce:d5:
e1:55:22:38:c2:2c:ea:c5:4e:15:3a:c7:ba:bf:60:
d3:19:41:82:06:98:98:fc:4e:f3:e5:b9:47:f6:17:
2b:7c:82:bd:37:fe:30:90:0c:a8:0b:b9:34:24:fa:
47:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:84:FF:8C:C2:43:89:44:F1:1E:52:E3:95:E9:0B:0B:70:BA:49:AE
X509v3 Authority Key Identifier:
keyid:2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:77:a0:b1:7c:38:d6:1e:09:25:c2:4c:df:55:27:92:ed:d7:
ab:8a:87:ed:79:b6:b0:33:a7:92:bf:f7:5d:f2:e5:38:89:bf:
f8:ca:df:9b:96:05:a3:c7:cb:32:b3:4b:47:eb:22:79:7e:5f:
5b:59:fe:a4:c0:ba:e3:1d:94:5b:54:fc:c5:64:b0:82:01:12:
cc:3b:d9:e0:b1:79:0c:50:77:f9:51:9c:31:b3:8e:df:8a:e9:
8e:b8:c6:45:2f:7e:41:19:9a:28:55:4f:d3:0e:1d:6f:3e:18:
f0:1d:75:c3:80:af:13:52:c2:a5:ae:d2:c9:c9:0b:cc:26:90:
d4:c9:d1:e2:b6:6a:24:52:b9:46:34:5a:f0:0a:20:94:1b:ce:
94:fa:ff:ef:f8:db:94:4f:19:97:04:c0:a2:7b:92:cd:a7:68:
bf:98:86:21:63:87:70:8e:19:b4:56:ae:b0:ed:eb:89:12:32:
37:d3:ce:22:90:9c:c5:1f:1e:d3:26:3e:ad:78:69:07:b4:de:
16:ce:0d:ff:43:65:4f:e5:7d:14:31:80:f2:0e:b6:db:a2:1d:
d7:aa:b1:37:d1:f6:7a:b4:cf:6a:d4:29:e3:42:3e:04:4d:a3:
07:84:1e:82:c4:2c:86:94:00:d5:c9:6c:e8:41:d9:2d:b9:95:
ee:d9:01:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 19:29:11 2026 by rpki-client