Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json)
Hash identifier: VMbnEFyn9FYP00anbA+grX8j9VexcqZzDYmwXxDoCfU=
Subject key identifier: FE:D1:6F:EC:90:7D:46:EB:19:5C:2B:A4:3E:11:67:BD:62:57:E5:B1
Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566
Certificate serial: 01A1581DC7FDAA7FE1AD1CD5B69A234452AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
Manifest number: 1AB1
Signing time: Tue 20 Oct 2026 07:01:49 +0000
Manifest this update: Tue 20 Oct 2026 07:01:49 +0000
Manifest next update: Wed 21 Oct 2026 07:01:49 +0000
Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: EK7zEDqm9AJIPb/ERgsKZHzo1nNKdUnM4R35rKyA0oc=)
2: n4FzGfOnav3SfPJfBEXT0u_w5Gs.roa (hash: sICEtaK7xm2Dr27UIi1Ga/8/sweTHAtwdDoH5h6MJ1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:1d:c7:fd:aa:7f:e1:ad:1c:d5:b6:9a:23:44:52:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566
Validity
Not Before: Oct 20 07:01:49 2026 GMT
Not After : Oct 21 07:01:49 2026 GMT
Subject: CN=fed16fec907d46eb195c2ba43e1167bd6257e5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:b5:ea:5d:73:5b:a8:02:dd:da:16:0b:d2:
e6:59:09:6f:bb:fc:1e:75:80:2d:f1:85:e0:59:54:
61:a8:42:63:51:de:21:35:98:a1:45:40:4e:6a:23:
79:6c:e4:fc:d0:f7:f4:55:95:4d:2c:fc:99:f3:40:
f8:b0:98:af:31:37:c4:33:25:ff:34:97:8d:24:24:
1b:cb:9e:47:f2:ed:4c:95:94:f5:af:37:9e:66:bf:
0a:d6:55:73:fc:1e:3e:18:52:e1:61:2f:e1:fe:cc:
9f:1c:da:ea:d8:f6:c6:96:25:03:bc:5c:73:17:46:
3b:68:6d:fd:df:99:45:ba:78:02:0a:dc:bd:35:d3:
fb:3e:db:a8:e8:ec:ef:f6:16:d8:ca:5f:d2:09:9d:
b3:0a:7d:a9:aa:d7:29:7d:68:d6:c6:31:af:59:e3:
3e:70:38:9f:8a:7b:a8:d7:29:f0:51:40:f5:1c:6e:
91:fc:07:fb:83:f8:b5:0c:b7:32:fc:79:ca:80:5d:
3c:42:42:a7:cc:b4:a8:14:78:37:f8:9a:38:9e:9a:
0b:f7:23:75:f2:cc:f5:ef:87:23:f2:ec:86:0d:24:
37:b0:f7:b0:d3:53:71:4d:98:02:99:4e:d2:4a:dc:
91:c8:38:ac:f4:ed:ad:79:ab:84:0c:a9:90:55:cd:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D1:6F:EC:90:7D:46:EB:19:5C:2B:A4:3E:11:67:BD:62:57:E5:B1
X509v3 Authority Key Identifier:
keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:98:70:97:d0:c5:5c:83:2d:97:8d:5b:75:53:1a:77:c6:69:
6f:78:62:e9:8d:84:05:10:57:d8:34:9a:54:04:75:2f:ac:6a:
4a:46:d9:38:a7:39:c3:1b:28:e0:73:08:d6:26:7e:08:22:a0:
5d:25:ef:8c:46:4a:ab:e6:40:64:0b:a9:91:7f:fb:be:cd:6a:
07:da:34:aa:0c:1e:67:46:fb:32:ba:7e:f9:d6:cb:50:72:98:
8d:e7:8d:31:14:25:90:f7:54:a5:7d:41:1f:24:8e:17:97:e4:
19:6f:d1:c2:93:9b:9b:3d:55:03:74:93:47:75:0d:1c:e0:25:
30:f1:bc:10:3a:8f:8f:b1:c2:cd:c1:2d:09:f7:17:e3:2d:ae:
3c:3d:d0:19:63:2c:7b:38:82:dc:97:71:2a:e4:36:ce:c7:d9:
5f:9c:25:f2:52:a6:23:2e:0d:8e:d9:7b:05:49:8b:a1:70:80:
c3:0e:58:ba:50:21:1e:d0:fb:89:33:38:e6:a1:fb:e9:15:7a:
92:93:2f:0b:3f:cc:d5:c7:38:19:ef:39:2d:bc:de:f0:10:71:
58:ad:f3:24:be:b1:88:e4:8c:d2:70:01:d8:9f:6c:4b:90:7e:
79:6a:23:dd:97:20:f8:db:4e:55:a3:92:4c:82:4c:f7:ea:c9:
82:a1:42:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 16:48:59 2026 by rpki-client