Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: m+MA09R7ZhZB296XSo4Mcu803P+GXqzZnnQW3A7577I=
Subject key identifier: F5:88:B5:9A:28:6D:B4:67:D1:1F:DC:29:44:67:5E:3E:EF:B6:BC:D9
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 01A08C439F998514722C2C5A843AE49C82CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0E62
Signing time: Thu 10 Sep 2026 17:00:36 +0000
Manifest this update: Thu 10 Sep 2026 17:00:36 +0000
Manifest next update: Fri 11 Sep 2026 17:00:36 +0000
Files and hashes: 1: 3hgJnNfI5vnswL_sYLdOTjf7N5I.roa (hash: ycnn2788sNjMpLJvxytyorXYGLRDzq//A9PgUTbLZIU=)
2: D6gsyuBvq-v8dHbQhkGm5ZATbvc.roa (hash: +ZoEMWFvRto5Iix5Aq4jw/RuVyb6nTqra5qXLRAnIkA=)
3: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: 95jS353ibxGQur1nIsaba2OCwbpkP9G2Nze9SES9qoU=)
4: xqsec9z85vJMUxRiD3W9Y4bQe3E.roa (hash: UOrcIqqW2rR89U0mPhlsybqgtqu8jW60WAQNXjjrjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:9f:99:85:14:72:2c:2c:5a:84:3a:e4:9c:82:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Sep 10 17:00:36 2026 GMT
Not After : Sep 11 17:00:36 2026 GMT
Subject: CN=f588b59a286db467d11fdc2944675e3eefb6bcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:53:ce:d4:fa:9a:ef:77:77:53:10:bc:a1:
c5:23:81:1f:8b:bf:10:d0:cf:1e:94:fe:71:29:28:
e0:0b:f4:19:3d:1a:a7:6d:e2:af:45:4d:c6:ba:a3:
56:c8:cc:a0:a0:41:b2:6c:49:04:63:d1:92:40:95:
85:63:8a:b5:8d:50:60:79:f7:bd:4c:ab:6e:64:87:
89:32:0a:0e:6a:df:7b:2e:4e:9c:96:88:5f:29:6a:
f6:bb:de:3e:df:a4:da:e3:7a:41:02:7b:df:58:ff:
2a:20:54:c2:2d:25:f3:39:5b:d6:a0:0d:f4:53:56:
27:ef:eb:ca:61:80:36:78:d6:83:58:a8:20:08:16:
05:2b:18:de:b3:c2:d7:12:cd:38:c6:be:20:f5:f5:
cb:54:dc:5d:08:6a:9c:a9:0e:a6:7b:d1:67:ee:78:
54:42:c4:41:e2:54:5e:3a:7f:aa:72:47:c5:3c:37:
ae:c2:dc:af:62:cd:f9:56:71:14:fe:ea:74:28:e3:
5b:5b:3b:38:95:76:1b:4e:6e:ea:31:14:dc:32:d3:
f0:4e:12:40:3c:22:be:c4:f3:ac:60:90:2d:2e:14:
9a:b2:a2:17:c2:c3:7b:0f:11:35:06:90:9c:18:de:
c7:68:a2:03:81:be:02:b0:f9:e7:33:ee:10:a6:ae:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:88:B5:9A:28:6D:B4:67:D1:1F:DC:29:44:67:5E:3E:EF:B6:BC:D9
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:59:35:49:6c:bf:c1:54:cd:79:8d:96:38:f5:2f:76:7b:eb:
79:ca:72:53:ba:7f:aa:42:7d:4e:99:78:9d:fc:09:be:e9:15:
23:84:01:58:d9:b7:2c:10:6c:10:af:0f:df:a0:d3:7d:32:4d:
3f:62:99:bb:c1:d7:44:51:df:af:73:ae:90:8d:54:5b:ae:7a:
2f:44:02:0c:ad:fd:36:7e:ad:df:52:96:44:4b:0f:3b:a0:b6:
7c:3a:ec:0c:16:09:8c:ee:79:90:7f:5f:1e:5f:7c:fd:ad:cc:
20:6a:c4:99:27:32:a7:13:eb:76:21:03:14:0c:25:6c:e5:78:
93:dd:70:fb:0a:12:7c:45:a6:9e:c7:e3:8a:68:ca:60:98:26:
6b:17:0a:f7:99:da:b4:87:1b:e3:f9:23:83:d3:d9:63:9d:cf:
14:77:73:61:5a:e5:a9:ea:14:cf:7d:12:2b:45:05:57:b8:11:
3d:ed:3f:4d:82:ea:97:c8:05:f5:05:32:e3:9f:1f:59:7b:e9:
fd:a4:73:1d:d4:46:9a:28:95:5a:21:52:4d:f2:1c:96:97:c1:
0f:ea:75:06:f1:88:43:50:04:73:5d:30:3f:4c:91:25:a9:3e:
9a:a4:06:db:b1:16:1e:6e:56:44:5a:59:8c:fe:a4:68:0c:ee:
dc:9e:b0:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMQ5+ZhRRyLCxahDrknILMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmQxNDJiNWI2YTUyOThkNmI4ZmE1ODQ1ZjI5ODc4Y2Zl
YmJjNTQwHhcNMjYwOTEwMTcwMDM2WhcNMjYwOTExMTcwMDM2WjAzMTEwLwYDVQQD
EyhmNTg4YjU5YTI4NmRiNDY3ZDExZmRjMjk0NDY3NWUzZWVmYjZiY2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp1TztT6mu93d1MQvKHFI4Efi78Q
0M8elP5xKSjgC/QZPRqnbeKvRU3GuqNWyMygoEGybEkEY9GSQJWFY4q1jVBgefe9
TKtuZIeJMgoOat97Lk6clohfKWr2u94+36Ta43pBAnvfWP8qIFTCLSXzOVvWoA30
U1Yn7+vKYYA2eNaDWKggCBYFKxjes8LXEs04xr4g9fXLVNxdCGqcqQ6me9Fn7nhU
QsRB4lReOn+qckfFPDeuwtyvYs35VnEU/up0KONbWzs4lXYbTm7qMRTcMtPwThJA
PCK+xPOsYJAtLhSasqIXwsN7DxE1BpCcGN7HaKIDgb4CsPnnM+4Qpq6VXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWItZoobbRn0R/cKURnXj7vtrzZMB8GA1UdIwQY
MBaAFCttFCtbalKY1rj6WEXymHjP67xUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xZTNjMTItMzIwNy00MzI1LTg2ZjUt
OGJlZmVlNDllZDRkLzEvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8xZTNjMTItMzIwNy00MzI1LTg2ZjUtOGJlZmVlNDllZDRk
LzEvSzIwVUsxdHFVcGpXdVBwWVJmS1llTV9ydkZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlk1SWy/
wVTNeY2WOPUvdnvrecpyU7p/qkJ9Tpl4nfwJvukVI4QBWNm3LBBsEK8P36DTfTJN
P2KZu8HXRFHfr3OukI1UW656L0QCDK39Nn6t31KWREsPO6C2fDrsDBYJjO55kH9f
Hl98/a3MIGrEmScypxPrdiEDFAwlbOV4k91w+woSfEWmnsfjimjKYJgmaxcK95na
tIcb4/kjg9PZY53PFHdzYVrlqeoUz30SK0UFV7gRPe0/TYLql8gF9QUy458fWXvp
/aRzHdRGmiiVWiFSTfIclpfBD+p1BvGIQ1AEc10wP0yRJak+mqQG27EWHm5WRFpZ
jP6kaAzu3J6wog==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:56:25 2026 by rpki-client