Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
File: K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft (raw, json)
Hash identifier: CfqDUZ4nIyUWDG9oXVT1inTdoXC3SWc7Ubr1RxXeEpc=
Subject key identifier: 5C:27:01:33:6C:3B:73:AB:6D:25:C2:56:2E:D3:6F:5B:DC:62:3B:30
Authority key identifier: 2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
Certificate issuer: /CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Certificate serial: 019EB8EA76F0D33C11D97DB0AB13781E7DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
Manifest number: 0D70
Signing time: Thu 11 Jun 2026 23:00:34 +0000
Manifest this update: Thu 11 Jun 2026 23:00:34 +0000
Manifest next update: Fri 12 Jun 2026 23:00:34 +0000
Files and hashes: 1: 3hgJnNfI5vnswL_sYLdOTjf7N5I.roa (hash: ycnn2788sNjMpLJvxytyorXYGLRDzq//A9PgUTbLZIU=)
2: D6gsyuBvq-v8dHbQhkGm5ZATbvc.roa (hash: +ZoEMWFvRto5Iix5Aq4jw/RuVyb6nTqra5qXLRAnIkA=)
3: K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl (hash: 22IH2lJpTbD+T0PpzsstlI5pjFy5U1hyz09dTXORHRQ=)
4: xqsec9z85vJMUxRiD3W9Y4bQe3E.roa (hash: UOrcIqqW2rR89U0mPhlsybqgtqu8jW60WAQNXjjrjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:76:f0:d3:3c:11:d9:7d:b0:ab:13:78:1e:7d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d142b5b6a5298d6b8fa5845f29878cfebbc54
Validity
Not Before: Jun 11 23:00:34 2026 GMT
Not After : Jun 12 23:00:34 2026 GMT
Subject: CN=5c2701336c3b73ab6d25c2562ed36f5bdc623b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:92:97:6c:ef:8d:70:24:41:27:1d:e8:6d:
1e:ee:b1:e4:6b:aa:d7:f3:2f:2b:56:94:19:26:4a:
e5:4f:df:8c:bf:d6:2b:07:23:78:f5:9e:88:4d:40:
ca:79:3d:ba:0e:dd:3f:48:88:91:82:a2:cc:49:5a:
a6:ff:dc:b4:77:1c:b4:98:6f:b1:2e:c5:0f:ed:82:
fd:c2:ae:30:4a:4c:69:f1:fa:46:18:27:a9:50:90:
e0:4c:01:5d:10:ed:2e:6e:9b:04:54:c3:f5:14:d7:
1e:65:b5:d6:e5:7f:53:62:ee:62:23:3e:6b:3b:f9:
66:1c:6e:ca:d5:b4:26:f5:d4:c3:83:c7:12:1f:f3:
c4:8e:1f:9a:ea:eb:62:bc:ce:6b:12:c1:a2:3b:74:
72:8d:05:04:ff:f7:01:19:13:f4:f3:01:1e:39:1c:
9a:6c:82:0e:e1:28:85:dc:5e:82:e8:2a:da:d5:89:
46:20:69:af:68:6d:6e:78:c6:47:9d:92:21:72:4e:
5d:40:20:46:c9:7f:90:46:f9:5c:eb:13:7a:7f:4a:
d4:50:5a:81:6c:49:87:79:1b:ac:34:8d:dc:94:8d:
d1:0e:13:9b:61:a9:09:94:78:a1:ab:3f:ce:e3:81:
cc:c0:09:ac:f7:85:4c:e7:0b:00:36:c7:b9:66:cd:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:27:01:33:6C:3B:73:AB:6D:25:C2:56:2E:D3:6F:5B:DC:62:3B:30
X509v3 Authority Key Identifier:
keyid:2B:6D:14:2B:5B:6A:52:98:D6:B8:FA:58:45:F2:98:78:CF:EB:BC:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K20UK1tqUpjWuPpYRfKYeM_rvFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1e3c12-3207-4325-86f5-8befee49ed4d/1/K20UK1tqUpjWuPpYRfKYeM_rvFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:74:04:d5:3e:e7:f4:5a:50:ce:c4:c3:40:94:1f:54:a2:9a:
f2:8d:49:1f:12:21:c0:0a:2f:72:64:a6:79:f5:65:3c:97:aa:
05:d0:42:7f:c9:72:6f:96:84:b5:7a:ee:fc:c9:58:89:cb:52:
8d:85:e4:11:b7:75:6f:03:26:20:0f:e0:cc:d5:06:1c:18:c6:
26:23:e9:55:04:24:aa:2e:f7:6a:f3:b2:21:8d:34:dd:ed:25:
80:14:84:10:72:18:cd:4a:79:3a:6a:7c:29:b7:e5:77:0c:51:
8b:86:ba:f0:51:98:3c:e5:52:a0:20:7a:c7:e6:66:67:8c:2f:
85:a9:bf:54:91:20:4e:b7:72:ca:be:59:b4:67:5b:fc:b5:e1:
9f:97:5c:f6:f9:8d:41:47:ef:c9:0a:ef:17:b7:45:dc:9c:1f:
1d:f6:d4:c9:31:7f:e9:b0:66:b0:d0:80:7d:7a:4e:ae:99:f1:
be:bf:02:c4:d0:c6:76:8b:96:aa:bf:c7:eb:c6:8c:de:bd:f5:
5a:a9:05:3e:14:bd:3b:c4:fe:b2:ab:6d:5e:ed:04:23:c7:4e:
53:32:4b:fd:22:1e:7c:a6:2a:d5:f0:fe:2e:ba:6a:83:17:5f:
a5:90:f4:63:9a:c1:f9:96:54:42:f9:07:6b:50:69:16:c3:c2:
0a:cd:87:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:39:46 2026 by rpki-client