Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: u8O9hDV6UhgMVV9lKfW8weH2t+ujcAbiR3IKNBQViHc=
Subject key identifier: D1:68:F0:F9:3C:B1:12:4D:C1:6C:74:16:3B:49:77:73:30:49:F9:0D
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 019DD12C8A096A1B6ADF5DB278B0B0270211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0CF8
Signing time: Mon 27 Apr 2026 23:00:50 +0000
Manifest this update: Mon 27 Apr 2026 23:00:50 +0000
Manifest next update: Tue 28 Apr 2026 23:00:50 +0000
Files and hashes: 1: 3hgJnNfI5vnswL_sYLdOTjf7N5I.roa (hash: ycnn2788sNjMpLJvxytyorXYGLRDzq//A9PgUTbLZIU=)
2: D6gsyuBvq-v8dHbQhkGm5ZATbvc.roa (hash: +ZoEMWFvRto5Iix5Aq4jw/RuVyb6nTqra5qXLRAnIkA=)
3: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: 0/CPEJrJbw+/OFMYUFVTRtcTblc7LQRBaHDPAZ1SRCo=)
4: xqsec9z85vJMUxRiD3W9Y4bQe3E.roa (hash: UOrcIqqW2rR89U0mPhlsybqgtqu8jW60WAQNXjjrjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:2c:8a:09:6a:1b:6a:df:5d:b2:78:b0:b0:27:02:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Apr 27 23:00:50 2026 GMT
Not After : Apr 28 23:00:50 2026 GMT
Subject: CN=d168f0f93cb1124dc16c74163b4977733049f90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:f3:62:b1:7d:27:52:5d:8e:33:de:af:21:
12:a0:8e:e2:cf:84:f0:89:18:d5:dd:23:3e:d6:b0:
ff:84:07:9f:ef:29:33:8f:15:2a:8a:2d:55:f1:ae:
10:28:7d:33:b8:da:54:32:42:9b:ce:45:c5:be:34:
6c:67:87:8c:40:51:e0:3f:36:3e:09:9a:78:20:e2:
1c:6d:b4:f5:2a:c7:4c:97:b7:23:e8:28:16:a3:13:
65:4d:ef:3b:e1:b0:ce:49:69:8f:47:d9:cd:25:87:
fb:12:af:ef:86:df:8e:f4:29:9c:6e:75:0a:71:5b:
0d:10:70:a1:45:a0:28:bb:d9:b7:9a:7b:1c:65:fb:
d0:9a:16:c6:27:ce:3b:54:43:4a:20:33:c2:08:55:
b7:1d:50:ce:4f:f4:16:80:b7:27:d7:cc:84:c1:be:
1e:66:fd:ac:ba:73:b0:c5:3e:9b:31:ef:d9:5e:15:
f3:fb:f4:cb:0e:22:b2:e6:21:1c:85:75:89:ad:97:
2b:f9:10:2e:22:e8:e8:2a:22:d0:d8:3b:c8:1b:c8:
d8:18:b1:86:39:ae:bf:14:f0:5c:6b:f4:60:03:95:
dd:c2:e4:68:32:34:10:8b:ab:83:d4:f3:53:8a:39:
db:ce:2c:18:38:49:e4:37:ca:65:8a:7b:b4:60:e3:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:68:F0:F9:3C:B1:12:4D:C1:6C:74:16:3B:49:77:73:30:49:F9:0D
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:62:d1:11:af:4d:d6:f0:7b:6f:d0:4e:fd:f7:19:68:fd:0e:
94:99:9e:e7:08:20:2d:58:8f:13:e4:71:7c:e5:7e:f6:c2:9e:
c2:4a:4e:cf:0b:62:a7:51:6b:5a:0c:b9:0a:cd:a1:fd:48:56:
c2:71:6b:57:52:59:a1:85:20:5e:fe:3d:f4:fc:41:4e:6a:21:
bb:ac:c3:61:6d:fa:e3:5b:4e:b8:b1:4d:a2:3b:9a:55:df:d0:
0a:fe:ac:d5:69:ac:9a:7b:cb:ee:d1:91:48:d5:9b:83:3b:ed:
51:53:10:7f:4b:8e:47:6b:9d:76:1c:77:9f:5e:ed:fa:0f:8b:
2c:a5:ae:20:5c:8a:d7:6f:ef:5f:df:f7:41:c7:cb:e6:d9:13:
09:1f:67:6b:2a:ac:e6:8f:82:50:8d:89:c9:dc:a8:cf:44:2a:
11:7d:f8:06:72:56:8e:75:b0:da:de:3d:8c:d0:56:f7:da:d9:
6d:2c:4f:1d:12:73:f2:29:53:b8:59:94:84:6b:3b:9f:be:19:
6c:32:a6:5d:99:1c:5f:4c:f5:90:21:79:ef:6e:96:4f:6a:a5:
18:c7:e6:ba:62:e2:53:4b:b6:73:b8:63:ae:8c:c4:cb:ee:2a:
77:a0:04:dc:76:ce:a2:14:cb:5d:0f:64:aa:4a:95:5b:e3:49:
98:cf:7f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 01:45:00 2026 by rpki-client