
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
File: K1wFUAyGXpJL3esa7nsuuMupJ8k.mft (raw, json)
Hash identifier: YoO7vnYcE5/MDuTMNBqMPRcZu6F+/U4cZpoi889DVqM=
Subject key identifier: 1A:2D:A8:42:BE:7B:B1:F5:5B:EE:F4:6C:6E:F8:D3:F5:C9:ED:1B:04
Authority key identifier: 2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
Certificate issuer: /CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Certificate serial: 01A08C0CC020BA947B1D49C7CDD009C040DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
Manifest number: 054E
Signing time: Thu 10 Sep 2026 16:00:40 +0000
Manifest this update: Thu 10 Sep 2026 16:00:40 +0000
Manifest next update: Fri 11 Sep 2026 16:00:40 +0000
Files and hashes: 1: K1wFUAyGXpJL3esa7nsuuMupJ8k.crl (hash: brgaZ2FlJgToqVg6d4jTHR1bWo++NRNBVVxTqpLFFjA=)
2: a4tcSb4rS0ZTyQ0HQWUrw9ZU1WI.roa (hash: 6y7B5mYALV8RuAK+rFKCQl3TCy8ZRF7yNkPXxeMdXfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:c0:20:ba:94:7b:1d:49:c7:cd:d0:09:c0:40:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Validity
Not Before: Sep 10 16:00:40 2026 GMT
Not After : Sep 11 16:00:40 2026 GMT
Subject: CN=1a2da842be7bb1f55beef46c6ef8d3f5c9ed1b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:c5:ba:50:40:3f:45:20:eb:fb:81:a9:b0:
57:ca:65:a4:07:08:31:12:de:96:23:63:e5:ed:7b:
4c:2a:f8:f1:9b:8a:78:e9:87:ec:03:e6:cf:e9:f7:
0e:5c:1a:b1:e3:8e:22:67:99:b5:50:4f:d1:2a:11:
fa:56:67:e2:5d:06:57:2a:2b:e1:8a:30:f7:e1:57:
c5:d3:c2:24:09:ad:6c:f3:b7:b1:6b:b8:6c:7b:c2:
72:67:a5:53:eb:99:7b:9f:9b:17:66:1f:d4:b7:d3:
c5:8f:81:fd:58:e4:b3:b9:35:88:7b:56:6d:26:e9:
6f:c4:f1:ed:77:75:58:1c:f8:6b:28:f8:9f:d0:cf:
bd:de:cc:43:84:ac:ff:bf:bd:2a:1a:b9:54:a0:b9:
de:30:58:04:1c:27:21:cd:d7:54:cc:63:81:a3:f2:
62:c8:da:6b:70:c4:87:a2:cf:7d:42:f0:08:e8:ad:
c5:65:8a:e9:9a:3b:65:96:a8:b8:9c:83:80:14:36:
07:56:bf:80:22:32:70:bb:79:6e:c6:ff:85:ec:e0:
76:b3:38:b7:96:77:fd:6d:49:66:6d:cd:05:1d:55:
7d:a6:11:f0:d0:a2:18:22:3b:b0:4f:6e:87:e5:bc:
d3:fb:43:5a:61:c3:fe:72:7e:32:4d:20:4e:e0:d2:
40:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2D:A8:42:BE:7B:B1:F5:5B:EE:F4:6C:6E:F8:D3:F5:C9:ED:1B:04
X509v3 Authority Key Identifier:
keyid:2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:be:aa:3f:32:a7:74:2d:d8:eb:19:ae:c9:06:3e:43:13:01:
5d:4c:8d:fd:b8:00:ad:cc:22:ae:c9:96:cb:44:65:a3:ec:ca:
24:9f:c2:b3:e9:0c:26:f6:cc:2f:37:b5:27:a5:9a:16:9d:90:
20:b9:5f:aa:bc:ae:41:0a:7e:df:b5:31:49:91:9e:b3:70:23:
66:05:28:3c:78:cb:db:97:3a:b0:75:9a:97:d6:fc:a1:f0:74:
70:4a:6b:6d:92:c6:4b:fa:a0:56:a0:b9:0f:d6:81:3b:0b:3a:
5b:68:35:3d:d1:13:13:97:af:63:0e:60:fb:0e:10:30:54:aa:
f4:1b:e2:db:81:cb:2d:06:da:cf:c8:14:2d:cb:8c:4d:d8:3b:
f3:9d:21:46:49:fb:92:d5:b5:db:39:35:18:f0:d0:56:21:99:
52:8a:4f:6b:e5:8d:9c:2c:a9:5d:e7:6f:c6:23:99:f9:94:fb:
43:03:73:fc:3f:e1:76:7c:64:47:aa:7b:9b:8b:b4:39:4c:76:
3b:6e:d7:97:36:96:8d:ec:49:72:25:54:ac:52:05:45:d0:8d:
f4:9e:95:04:f7:5f:c2:c0:f5:eb:43:fa:71:f7:0f:96:9b:17:
c6:d3:47:74:5e:95:74:9f:61:58:8c:e4:a5:59:76:db:f1:e4:
b8:df:9c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:28:07 2026 by rpki-client