Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: EP6t5tNgYKB5Y3m/mUFTz+bwlwk3O1i8dLVleac3WHI=
Subject key identifier: 67:B9:F5:54:92:04:FF:8C:5A:37:9A:CE:B6:FD:01:0D:31:BC:54:55
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 01A08B3133C67766B58DA3C8C3A60B816F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 12:00:52 +0000
Manifest this update: Thu 10 Sep 2026 12:00:52 +0000
Manifest next update: Fri 11 Sep 2026 12:00:52 +0000
Files and hashes: 1: 4o_tAUtgP-njAXhmOmcH5E-LEBE.roa (hash: fh84+EgF1SEM+SjNNhOt/IByRahwjmYLOKwI1U+RRhc=)
2: AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa (hash: qSJNJwwtc55ywmper0Gkw+bq36i69BmtauWb1Skowaw=)
3: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: DxIh1KTmxCYTsYbsCNZVBJ8fyXzsUHH7R70ENnJemSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:33:c6:77:66:b5:8d:a3:c8:c3:a6:0b:81:6f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Sep 10 12:00:52 2026 GMT
Not After : Sep 11 12:00:52 2026 GMT
Subject: CN=67b9f5549204ff8c5a379aceb6fd010d31bc5455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:62:ff:aa:9e:b3:8c:ec:70:59:5f:6e:a1:
5d:d7:86:2d:08:f3:00:d5:48:21:28:d4:50:3a:cf:
b8:ec:81:d4:08:0f:cb:98:83:e7:c1:64:29:1d:48:
a4:10:13:44:31:4a:f4:be:74:e8:21:0a:cb:d9:60:
de:68:d4:9c:c5:28:7a:04:35:0a:2a:06:38:3b:3d:
4d:66:7e:f3:69:00:e8:75:74:5a:ad:86:18:26:55:
f8:e9:ef:11:83:74:42:12:24:4e:5a:74:10:d5:99:
9a:7c:2f:76:e1:53:e8:49:47:ca:85:92:52:07:7a:
9a:fa:6a:12:2f:49:89:a7:11:e1:a0:5e:3b:ed:10:
7b:73:58:42:96:2f:55:3a:cc:69:62:62:d2:26:cd:
29:b5:9e:bf:8c:90:1f:9f:cf:50:2a:85:de:57:27:
4f:4b:eb:62:66:38:71:61:90:b6:4a:37:ca:b0:86:
5a:83:94:79:88:94:e5:54:4a:0d:e1:3c:df:d0:99:
b6:35:b8:a4:6f:c2:95:f1:a4:d7:f1:28:d1:91:be:
7a:48:81:10:37:2b:4d:01:ff:50:3f:b2:5e:3e:eb:
94:7d:18:85:55:d4:31:34:28:d0:8d:8b:d7:52:81:
cb:0a:25:1f:97:ec:f0:9c:37:f2:1d:7c:67:0f:a0:
10:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B9:F5:54:92:04:FF:8C:5A:37:9A:CE:B6:FD:01:0D:31:BC:54:55
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:81:cf:40:7f:e8:45:0f:12:de:1a:a7:3c:9d:da:5b:60:28:
b3:0d:dd:b0:fb:60:9b:d7:2d:ad:6e:39:99:76:e8:c7:97:4c:
d1:5b:50:a9:f5:f7:54:32:91:00:0d:d3:e3:a6:96:f6:f8:6d:
ae:40:a1:69:01:77:6b:ac:1f:c2:ee:14:3e:07:ad:a3:98:d4:
6e:73:38:7c:4d:e6:de:ce:7b:38:fa:93:48:0b:86:72:b5:28:
20:5b:29:be:69:24:9f:eb:40:1c:69:d1:d6:37:0a:c2:5e:a0:
57:09:d0:ba:58:f1:4e:46:85:a6:6a:c0:8c:a9:bf:e8:81:5e:
d2:35:05:ad:4f:90:40:3e:01:49:a8:d7:52:fd:28:49:ea:71:
b5:fd:7f:ef:95:00:63:2d:88:1b:db:03:b0:d5:3b:25:e4:91:
da:e5:db:66:b0:d0:1f:87:9a:a7:3d:7f:b8:ea:7d:5c:7d:9a:
17:29:f1:68:15:ef:5f:6c:d0:43:3e:0c:1f:d4:58:38:49:b0:
bd:e2:57:09:e9:be:c2:0d:3a:e9:b3:25:07:45:9d:7d:14:69:
82:05:4b:73:8a:60:39:18:4e:34:e3:f2:82:29:9a:e9:5e:65:
f6:93:14:fc:eb:01:82:9e:e4:ee:81:0b:91:54:ab:b9:f3:31:
bc:68:2e:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLMTPGd2a1jaPIw6YLgW9uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOWVmYjU4NzhkM2IzNjM0ZGMxY2NiOTBhYzQ4ZTBiODlk
MWM4NzkwHhcNMjYwOTEwMTIwMDUyWhcNMjYwOTExMTIwMDUyWjAzMTEwLwYDVQQD
Eyg2N2I5ZjU1NDkyMDRmZjhjNWEzNzlhY2ViNmZkMDEwZDMxYmM1NDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLZi/6qes4zscFlfbqFd14YtCPMA
1UghKNRQOs+47IHUCA/LmIPnwWQpHUikEBNEMUr0vnToIQrL2WDeaNScxSh6BDUK
KgY4Oz1NZn7zaQDodXRarYYYJlX46e8Rg3RCEiROWnQQ1ZmafC924VPoSUfKhZJS
B3qa+moSL0mJpxHhoF477RB7c1hCli9VOsxpYmLSJs0ptZ6/jJAfn89QKoXeVydP
S+tiZjhxYZC2SjfKsIZag5R5iJTlVEoN4Tzf0Jm2Nbikb8KV8aTX8SjRkb56SIEQ
NytNAf9QP7JePuuUfRiFVdQxNCjQjYvXUoHLCiUfl+zwnDfyHXxnD6AQawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGe59VSSBP+MWjeazrb9AQ0xvFRVMB8GA1UdIwQY
MBaAFCue+1h407NjTcHMuQrEjguJ0ch5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQt
NGJjZDNkNTg0NjNhLzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kMDM2MDgtM2M2Ny00MjNkLWIxOGQtNGJjZDNkNTg0NjNh
LzEvSzU3N1dIalRzMk5Od2N5NUNzU09DNG5SeUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4HPQH/o
RQ8S3hqnPJ3aW2Aosw3dsPtgm9ctrW45mXbox5dM0VtQqfX3VDKRAA3T46aW9vht
rkChaQF3a6wfwu4UPgeto5jUbnM4fE3m3s57OPqTSAuGcrUoIFspvmkkn+tAHGnR
1jcKwl6gVwnQuljxTkaFpmrAjKm/6IFe0jUFrU+QQD4BSajXUv0oSepxtf1/75UA
Yy2IG9sDsNU7JeSR2uXbZrDQH4eapz1/uOp9XH2aFynxaBXvX2zQQz4MH9RYOEmw
veJXCem+wg066bMlB0WdfRRpggVLc4pgORhONOPygima6V5l9pMU/OsBgp7k7oEL
kVSrufMxvGgu+Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:04:55 2026 by rpki-client