Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
File: K_CgGXhoxtjDTdFrP0TezF5CNvU.mft (raw, json)
Hash identifier: 1oLhDRXovwjZPMVwRuVVMqKBioi9WHGM7qFw1hpjAco=
Subject key identifier: 32:12:A4:C7:EE:02:D6:6D:69:6B:A5:D8:D7:A2:8B:49:AA:9B:B3:89
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial: 01A0035D783AA5E558BBB30225BA549721C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
Manifest number: 11BA
Signing time: Sat 15 Aug 2026 03:00:52 +0000
Manifest this update: Sat 15 Aug 2026 03:00:52 +0000
Manifest next update: Sun 16 Aug 2026 03:00:52 +0000
Files and hashes: 1: 5MvGTIWvypnynatSCOFj8eEvQKU.roa (hash: zlpMkBrcV9PcuGvhpfeVQrRYScHNx6B9kKbHDGTMD3Y=)
2: K_CgGXhoxtjDTdFrP0TezF5CNvU.crl (hash: RmIE5XMvdyPxcvZC5bZaefRqb8QRDX2Pzk0eWs/DwjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:78:3a:a5:e5:58:bb:b3:02:25:ba:54:97:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Validity
Not Before: Aug 15 03:00:52 2026 GMT
Not After : Aug 16 03:00:52 2026 GMT
Subject: CN=3212a4c7ee02d66d696ba5d8d7a28b49aa9bb389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:67:56:45:73:2e:b9:cb:c0:63:3a:7c:8f:
ba:76:af:ca:dd:5e:24:2e:14:dd:a9:99:e4:6d:91:
64:14:5d:1f:26:9f:0b:24:e1:64:b2:b1:b9:a0:39:
1c:3f:3f:b1:00:7d:74:dc:4f:30:57:1e:b3:f4:96:
80:d7:90:85:82:ce:7d:65:f5:a7:32:bd:b0:0d:b1:
4d:20:be:73:9b:8a:4c:83:50:1e:b3:dc:ec:f3:a1:
b6:9b:93:76:d8:21:34:89:6d:e7:11:39:2a:a2:cf:
4a:3d:d7:0b:c4:e3:c0:18:c9:df:52:75:9c:f2:c1:
ab:6a:2f:dd:22:3f:39:95:6d:1b:cb:52:a8:b8:1e:
2b:88:43:9f:3f:a5:23:55:d3:c4:be:40:83:52:ab:
d8:a9:6d:7c:0f:b9:af:66:ea:4a:fc:8d:a4:6e:53:
c7:e1:21:f6:89:f7:ed:d8:fa:7c:38:4d:29:be:92:
f7:40:be:5d:18:d3:73:00:5f:60:af:16:b8:10:58:
08:34:dc:79:a5:1d:24:12:e1:0b:c3:c9:d5:b4:be:
47:42:9d:8b:43:4a:60:69:73:2a:e4:15:23:6e:d5:
31:91:a7:28:11:7a:b3:38:c3:ac:2b:e4:11:31:55:
c4:ee:bc:a9:77:64:57:a2:bf:68:15:6a:d4:42:3e:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:12:A4:C7:EE:02:D6:6D:69:6B:A5:D8:D7:A2:8B:49:AA:9B:B3:89
X509v3 Authority Key Identifier:
keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d9:cc:c5:20:25:7b:b2:8a:b1:0b:87:8d:33:41:20:c1:4f:
6c:be:4b:54:58:68:fb:2f:ce:96:a1:83:34:51:80:f4:ea:2f:
48:c8:36:cb:9e:58:56:25:46:b0:86:e5:3e:53:f3:c4:de:37:
92:2a:aa:1e:8a:56:b2:8a:17:8f:40:ae:13:a0:6f:8d:c0:60:
4c:35:3f:ef:25:94:cb:d9:80:fc:76:81:9b:6b:8b:71:48:9d:
16:cb:2f:53:d3:b8:99:52:f2:e6:2f:e4:ec:73:a9:78:3d:c9:
69:81:dd:56:c9:9b:8a:98:be:35:ab:da:00:54:82:f6:ff:ae:
65:5c:ef:99:8e:cb:2f:f7:31:8a:56:df:a3:8c:f4:54:ca:75:
e5:f9:5c:e1:dc:d0:ab:ed:d5:20:e6:5d:2b:70:33:3f:63:0b:
7e:0d:78:22:ac:4c:a8:76:d9:57:b5:f2:a2:c8:82:d5:b0:33:
5c:b0:f3:8f:ff:58:15:71:ad:09:5e:87:9b:d9:1a:28:67:10:
a8:d4:29:bb:25:9a:8b:f6:0d:65:32:1a:dc:5a:60:02:e2:fd:
3f:18:a6:7e:a8:77:c1:c1:4e:bf:2d:a7:d4:f9:50:11:9b:7b:
35:3a:3b:66:67:b6:67:56:69:d4:73:c7:3d:ec:b8:47:f6:e0:
17:a2:f5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:14:07 2026 by rpki-client