Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
File: K_CgGXhoxtjDTdFrP0TezF5CNvU.mft (raw, json)
Hash identifier: QXuFNc8MwxfwHLgnWpenRzs349Ih3Q+rfl6jFZMyRmk=
Subject key identifier: 85:80:95:1A:5C:BE:46:8C:CA:44:E7:CC:7E:98:38:5C:D0:D7:1E:BF
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial: 019F19B11E494C7351D1C63328E6E9E722F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
Manifest number: 1141
Signing time: Tue 30 Jun 2026 18:01:05 +0000
Manifest this update: Tue 30 Jun 2026 18:01:05 +0000
Manifest next update: Wed 01 Jul 2026 18:01:05 +0000
Files and hashes: 1: 5MvGTIWvypnynatSCOFj8eEvQKU.roa (hash: zlpMkBrcV9PcuGvhpfeVQrRYScHNx6B9kKbHDGTMD3Y=)
2: K_CgGXhoxtjDTdFrP0TezF5CNvU.crl (hash: thyL4lm78YrzhdoriEeQBvyNRXSxjGuFoncvgOewfbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:1e:49:4c:73:51:d1:c6:33:28:e6:e9:e7:22:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Validity
Not Before: Jun 30 18:01:05 2026 GMT
Not After : Jul 1 18:01:05 2026 GMT
Subject: CN=8580951a5cbe468cca44e7cc7e98385cd0d71ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:24:1e:9d:db:cc:b6:b6:d8:41:6c:a2:3e:
aa:d0:83:7a:45:90:8b:fd:e3:1a:97:5c:ab:d7:6a:
60:33:17:9f:e7:26:44:c2:a9:d0:1a:25:1e:12:49:
b0:c8:d8:2a:60:da:88:c3:b4:ec:62:ba:20:be:e0:
cc:70:da:11:8b:b4:8d:6f:d0:34:a5:e1:66:7e:88:
6c:f9:2f:bb:65:b7:fa:3f:57:8a:e2:e2:d1:21:b1:
dc:08:11:fd:bc:f0:b1:53:f2:96:b1:0c:1c:c1:94:
54:59:28:ca:cd:4a:f1:f5:18:27:d2:e5:11:03:96:
52:9e:20:29:45:6b:7d:da:81:c3:27:df:be:df:8a:
21:e4:93:fa:35:96:6b:1f:43:e8:2e:a1:ec:d0:86:
00:da:4f:05:61:83:f5:a1:ac:ec:e9:da:5c:1d:2c:
68:51:6f:b8:91:e7:e7:dd:c5:9f:d6:9f:40:a8:4d:
47:f2:89:c7:0d:a4:ac:e2:2e:08:17:e4:54:3f:48:
64:4c:41:36:c0:60:ee:8d:ca:45:fe:9b:d4:05:79:
62:7d:29:66:9d:40:80:eb:07:e4:9d:53:46:a1:23:
13:f5:00:c5:d5:00:9c:da:8d:f3:f1:49:c5:a8:e1:
83:08:d8:7b:cd:c6:26:3b:17:d3:3f:10:0d:9c:e2:
52:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:80:95:1A:5C:BE:46:8C:CA:44:E7:CC:7E:98:38:5C:D0:D7:1E:BF
X509v3 Authority Key Identifier:
keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e8:cc:95:8a:7f:f5:c2:af:0b:b0:8b:6b:70:22:b4:44:3f:
23:b2:b2:9a:72:9b:1d:bd:78:14:80:c0:dd:98:03:83:b0:5e:
79:7d:09:1e:71:81:2f:1b:f8:cc:4b:88:90:52:35:6c:7e:6f:
2a:78:0b:37:da:42:3d:ae:95:7f:22:2a:db:c1:42:93:16:cf:
71:93:13:16:35:5a:96:f2:4d:70:27:3c:01:60:15:2c:61:5d:
ee:9e:32:28:58:9e:d9:9e:80:29:02:42:57:12:6d:a9:82:f6:
1b:22:6a:18:0c:69:52:24:a6:de:0d:f2:eb:0c:d9:68:7a:88:
f3:7f:f3:14:bc:3b:90:0d:e1:ff:d8:70:bd:37:af:10:a2:f7:
05:1a:c8:0e:b4:76:dc:2b:42:51:3d:b7:c4:ce:a5:8a:a0:3d:
00:bd:22:bd:42:d1:63:74:fd:44:b4:ba:b0:d9:1b:13:14:65:
d3:1f:50:db:03:6c:f4:e5:79:b5:ed:0e:6f:fe:a8:80:8b:1e:
7c:dd:b9:f6:37:78:4d:83:e5:64:64:43:51:e4:8f:ca:ef:60:
46:06:06:bc:54:12:22:f3:88:54:be:3b:71:4a:87:7a:b4:51:
bf:60:ae:3f:39:3c:92:a1:d9:e4:98:a0:7f:c5:83:c5:38:62:
05:60:4a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:33:39 2026 by rpki-client