Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: rLV7o0VZF4u5Z9Yt77X/RXlajN+GHk3o+qLJsiAx3Tk=
Subject key identifier: 50:66:5D:0A:5D:C9:ED:A4:FB:7A:76:25:C6:11:3C:C6:4D:9D:94:19
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 019FA0A87C5FA9B8847E83E06FF315E0C2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0DE8
Signing time: Sun 26 Jul 2026 23:00:24 +0000
Manifest this update: Sun 26 Jul 2026 23:00:24 +0000
Manifest next update: Mon 27 Jul 2026 23:00:24 +0000
Files and hashes: 1: 3hgJnNfI5vnswL_sYLdOTjf7N5I.roa (hash: ycnn2788sNjMpLJvxytyorXYGLRDzq//A9PgUTbLZIU=)
2: D6gsyuBvq-v8dHbQhkGm5ZATbvc.roa (hash: +ZoEMWFvRto5Iix5Aq4jw/RuVyb6nTqra5qXLRAnIkA=)
3: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: mWuz8Ajbr9mstlCs1v8aDFsg6c4zDKODNRXh6Izl8ic=)
4: xqsec9z85vJMUxRiD3W9Y4bQe3E.roa (hash: UOrcIqqW2rR89U0mPhlsybqgtqu8jW60WAQNXjjrjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:7c:5f:a9:b8:84:7e:83:e0:6f:f3:15:e0:c2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Jul 26 23:00:24 2026 GMT
Not After : Jul 27 23:00:24 2026 GMT
Subject: CN=50665d0a5dc9eda4fb7a7625c6113cc64d9d9419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:e6:6f:52:66:ca:16:6a:34:29:ce:9a:56:
bc:4a:ac:b6:04:2d:b4:fd:15:77:6c:42:05:4e:3f:
5a:c3:f6:e8:57:1e:e6:59:cc:8d:0a:d0:dd:e2:85:
a9:20:f0:e8:f0:8b:0d:5f:03:a0:66:02:bc:a9:ba:
0c:c0:d8:2c:c5:10:c2:4e:c8:c2:6b:3e:1d:83:a3:
c8:61:6d:16:8d:3b:41:0e:e9:00:29:df:01:7b:3c:
c0:19:e8:6f:0e:c1:e0:74:f8:d1:f3:65:e7:40:81:
60:bb:7f:06:08:a6:97:34:d6:24:fb:ea:97:71:d9:
4c:15:3e:1a:ce:f6:d7:33:b2:52:8f:ad:b0:7c:9a:
77:10:84:b7:f1:68:d7:47:ef:ef:ab:2f:55:01:cb:
e3:fc:e9:84:79:98:19:65:b1:ef:78:fd:3a:bc:e7:
d1:8e:19:30:00:fb:83:7f:fe:65:64:a5:c2:8d:ae:
df:73:59:cd:2d:ba:68:14:eb:7d:45:56:74:09:41:
2b:5e:86:eb:5d:15:96:fb:d2:b4:2b:44:fb:69:b8:
d2:be:c2:2d:a4:f4:8a:58:70:e9:a6:c3:01:aa:c4:
de:b4:c7:bc:6d:2e:25:c9:b7:08:34:1d:05:3c:30:
0a:40:c1:dc:87:03:35:24:53:59:6e:a0:ad:1b:f1:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:66:5D:0A:5D:C9:ED:A4:FB:7A:76:25:C6:11:3C:C6:4D:9D:94:19
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3e:32:ed:b9:9e:1f:b2:83:eb:b4:1f:54:35:f7:08:bd:01:
2c:01:29:83:62:30:19:2c:5d:f4:f1:2b:f9:b2:73:78:77:f5:
c2:3e:04:40:2e:b4:40:8c:e7:8d:9e:0f:b3:4a:59:d8:26:8c:
12:f7:34:55:e1:d0:43:bc:59:98:72:1e:54:b3:45:71:c5:ab:
10:c0:db:7e:66:88:13:ce:66:fc:77:7e:16:74:c4:79:fa:0e:
a1:af:cc:46:28:bf:5b:3e:d5:ea:56:af:8a:78:1b:11:0c:63:
c0:eb:d2:16:0a:fd:c7:f7:70:bb:78:15:42:7f:8e:8c:ad:af:
6a:de:8b:e6:17:5f:5f:16:d7:f6:93:ab:93:d2:ca:ac:d9:93:
87:8f:f2:ea:37:d8:bf:5e:80:34:01:fc:23:c2:79:47:ef:1a:
d7:ae:c8:d5:cc:47:09:40:87:b2:e8:f4:53:6b:e5:e0:6f:8e:
14:a1:01:28:5f:26:59:70:cf:a5:ee:ce:d6:c1:cd:05:92:97:
19:22:47:dc:33:12:14:15:14:e0:39:ce:13:15:f0:71:b9:50:
f9:4a:b2:58:1b:e3:77:0e:e2:38:35:da:61:9f:9e:3a:0a:10:
47:e5:93:a5:b2:85:9c:35:83:20:ab:a2:a9:10:27:56:9c:d3:
77:b1:88:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:29:32 2026 by rpki-client