Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: k2/sKl3nTENogYio5gKwzDWDTkQNk6Ru0dJcHmt3GZE=
Subject key identifier: F3:9D:5C:43:41:FA:35:F7:5A:31:DB:5D:14:D3:D6:BA:50:B0:02:FF
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 019CE749265D8C73145D5A68479BE07A963B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0C7E
Signing time: Fri 13 Mar 2026 13:00:56 +0000
Manifest this update: Fri 13 Mar 2026 13:00:56 +0000
Manifest next update: Sat 14 Mar 2026 13:00:56 +0000
Files and hashes: 1: 3hgJnNfI5vnswL_sYLdOTjf7N5I.roa (hash: ycnn2788sNjMpLJvxytyorXYGLRDzq//A9PgUTbLZIU=)
2: D6gsyuBvq-v8dHbQhkGm5ZATbvc.roa (hash: +ZoEMWFvRto5Iix5Aq4jw/RuVyb6nTqra5qXLRAnIkA=)
3: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: jxiofwkbfVgw0zYgIanYXPvMTeYQnRrK5iUUvYvsjLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:49:26:5d:8c:73:14:5d:5a:68:47:9b:e0:7a:96:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Mar 13 13:00:56 2026 GMT
Not After : Mar 14 13:00:56 2026 GMT
Subject: CN=f39d5c4341fa35f75a31db5d14d3d6ba50b002ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:eb:8e:b1:71:2f:02:81:d1:e5:27:a7:56:
56:a3:fe:f6:28:a4:d9:90:11:fa:38:50:22:9f:57:
28:5b:a8:67:1b:93:e4:d0:42:9e:40:14:45:52:63:
45:bd:9a:4b:0c:41:a7:21:eb:d8:92:70:7f:65:10:
f5:24:9d:12:e9:1a:29:1f:93:6b:bf:0a:7e:b3:7b:
4f:88:69:86:4d:59:ee:ee:2a:20:b2:53:f7:8c:01:
5b:b4:e4:a0:7c:8c:b7:ac:ee:7e:ab:a9:f3:f5:10:
86:58:e8:31:80:3b:60:53:ca:fb:fa:1a:e8:53:e2:
c0:13:6a:3e:98:03:71:90:0d:b2:d6:85:e3:ab:d1:
4b:52:7e:5d:61:60:4d:af:91:b7:95:0b:c9:18:17:
98:e7:06:ad:9c:70:e8:54:5b:1d:75:c4:a1:fc:b7:
9d:03:a4:37:29:46:df:f5:43:c5:3b:a5:6f:ab:38:
f4:7e:ac:6d:60:dc:0e:33:1a:74:0c:d9:8f:d8:d7:
ff:9f:7b:9d:68:fa:1e:7a:4b:bc:8f:33:5b:c3:10:
b4:e0:56:ef:52:d3:f3:14:25:03:ac:f1:a3:24:c5:
f2:98:aa:5c:c2:95:ee:ac:e3:35:01:b2:1f:e4:cb:
08:24:55:a1:71:c7:9a:90:c0:bc:4e:a8:cc:f8:b9:
d7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9D:5C:43:41:FA:35:F7:5A:31:DB:5D:14:D3:D6:BA:50:B0:02:FF
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8d:bb:8f:eb:78:cd:82:a5:bd:74:f9:3d:71:72:29:f9:26:
e9:19:0b:c1:1a:ef:66:56:26:09:f9:3e:d2:3d:eb:2f:a5:e7:
b1:14:2e:57:84:86:de:58:2b:82:b5:25:5f:85:a0:ec:31:ac:
54:d4:55:07:f6:69:fb:19:7a:da:be:f6:e2:67:1b:11:c7:4d:
b1:b0:50:40:4a:c3:cb:b7:02:34:24:00:50:79:f4:56:8f:6f:
86:1d:35:c8:9c:75:4c:b6:bf:31:dd:1a:b2:66:6a:37:44:52:
8d:90:b8:b5:09:b9:c1:6d:6d:e4:4e:41:f1:84:4f:a6:a6:2c:
52:13:96:68:8b:12:7a:20:ac:d0:26:e4:75:43:7a:c6:4d:3b:
2b:69:c7:db:c4:46:b9:bf:bb:c7:eb:01:64:99:56:b4:60:43:
7f:87:6f:a6:9d:2c:30:7c:d0:9a:64:ea:b9:2e:a4:ea:5c:74:
fb:bf:cb:3d:3b:71:12:bd:fd:2c:03:87:a8:4c:57:32:f0:1b:
c2:ab:3a:9a:4d:5d:3b:22:40:06:91:21:6d:7e:85:b2:98:4c:
98:74:63:c0:ce:2b:5b:b1:91:7d:00:cd:a4:2b:61:31:99:29:
cf:02:fc:04:88:7a:b0:cd:1b:17:f2:b5:d2:92:cd:bf:77:2a:
94:45:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:24:54 2026 by rpki-client