Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft
File: K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft (raw, json)
Hash identifier: qxqGn/sfMfX1/l9y66To9OiSgx6379R1AHlhpGCJQjg=
Subject key identifier: B9:73:0A:35:92:C3:A3:BA:93:4B:DB:A6:2F:83:B2:2F:A7:78:3E:1B
Authority key identifier: 2B:F8:97:E0:E5:52:26:E4:2A:E3:10:62:4D:0C:DC:8D:97:39:36:CA
Certificate issuer: /CN=2bf897e0e55226e42ae310624d0cdc8d973936ca
Certificate serial: 019F3E62ABB0929FC96704C8BCE612E25A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_iX4OVSJuQq4xBiTQzcjZc5Nso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft
Manifest number: 15
Signing time: Tue 07 Jul 2026 21:01:21 +0000
Manifest this update: Tue 07 Jul 2026 21:01:21 +0000
Manifest next update: Wed 08 Jul 2026 21:01:21 +0000
Files and hashes: 1: K_iX4OVSJuQq4xBiTQzcjZc5Nso.crl (hash: CP8Jmad3ZcuarUWSIreKV/3jAt3jr9rL6GJJf9NRLuQ=)
2: NRBS6ZtboB2iimKF471rwSY1gJo.roa (hash: TinIeELIj1280SRdWKZnK8lTmk3dSvkgs4pLOxMqj3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_iX4OVSJuQq4xBiTQzcjZc5Nso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3e:62:ab:b0:92:9f:c9:67:04:c8:bc:e6:12:e2:5a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf897e0e55226e42ae310624d0cdc8d973936ca
Validity
Not Before: Jul 7 21:01:21 2026 GMT
Not After : Jul 8 21:01:21 2026 GMT
Subject: CN=b9730a3592c3a3ba934bdba62f83b22fa7783e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:b2:a4:27:4d:b2:ea:59:31:c7:7e:36:d9:
37:64:1b:ce:17:f1:be:fd:55:38:86:45:a6:3f:36:
a8:42:f1:1c:c8:b6:f3:c5:a3:a3:be:8e:09:1b:50:
4b:a5:b9:a9:38:a5:e8:0e:11:a1:9b:af:bc:7c:e9:
0b:cb:be:27:46:4f:8a:4c:bc:d2:68:e2:cc:4c:17:
ab:19:42:74:ef:e8:68:89:b0:89:79:dc:af:c8:61:
42:cd:47:00:56:00:39:91:a6:0d:08:7c:d7:8e:52:
8c:16:9c:7e:93:e2:be:43:b4:36:98:94:54:a1:4a:
e4:36:5b:78:e3:28:68:35:fa:20:fd:0b:4b:24:15:
50:64:8e:f3:88:e1:88:5c:14:6b:29:d7:8b:da:0f:
96:05:f5:de:81:1d:5e:49:a6:5d:c2:d8:74:5f:89:
f2:7d:a0:47:d7:54:ef:73:eb:81:4d:a9:f4:d5:08:
30:c1:71:53:fc:67:87:23:66:3e:e1:85:d9:01:98:
26:10:cb:b1:22:68:df:b0:e3:8a:70:eb:98:16:b7:
74:27:c2:ff:41:cd:02:38:d0:ab:a5:b1:30:1b:b6:
d3:80:87:9e:51:95:22:51:29:b4:fe:a9:e9:1f:6a:
51:54:20:d6:64:b9:54:95:68:86:18:94:cf:7f:77:
2b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:73:0A:35:92:C3:A3:BA:93:4B:DB:A6:2F:83:B2:2F:A7:78:3E:1B
X509v3 Authority Key Identifier:
keyid:2B:F8:97:E0:E5:52:26:E4:2A:E3:10:62:4D:0C:DC:8D:97:39:36:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_iX4OVSJuQq4xBiTQzcjZc5Nso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:73:3e:88:a5:53:32:f5:9a:05:f5:6b:0d:f4:72:40:ff:45:
66:6f:4c:ae:f8:82:7e:e7:50:e7:17:71:a3:1b:34:f3:34:a0:
aa:67:bb:b4:f3:ec:51:54:52:dc:f5:bf:08:1f:de:8c:d5:2c:
7a:c2:07:4f:eb:67:5a:92:f3:0b:4e:41:52:d7:fe:74:b1:22:
6b:f6:b3:8d:36:35:11:1c:21:c4:86:3c:d3:01:0a:0f:91:ea:
5e:3e:d0:9d:11:c3:53:ad:f4:17:81:c0:6d:a4:13:c5:e1:5a:
ca:57:17:7d:d6:b5:b1:42:42:7a:7a:38:c0:88:8e:f4:d1:f2:
ce:7c:a5:35:b8:d8:11:33:c7:b6:55:04:9e:2d:08:25:b1:28:
35:b4:c3:35:83:3e:bb:46:c2:95:bc:15:fc:47:76:47:4b:eb:
e0:6c:ae:5b:23:a1:a2:4d:5a:1c:99:f8:45:b1:a0:c6:8f:dc:
53:c3:25:eb:7f:03:94:35:b3:19:f5:6e:bd:36:15:7e:9c:53:
0d:c5:a4:ad:e8:1b:7d:0e:41:71:38:bd:42:0c:a4:51:98:eb:
da:85:42:85:87:5c:8b:91:c6:d0:38:85:6f:63:d5:17:ef:c5:
b5:ad:cb:38:dd:83:85:30:aa:9d:61:b7:ae:25:57:a5:4b:73:
73:f6:cd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 23:08:12 2026 by rpki-client