Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft
File: K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft (raw, json)
Hash identifier: eiEuT4WO3Dh1Mz+LrsiyFAKq00K2rnoSBhRqHdyqlA8=
Subject key identifier: C8:3D:B2:EC:A3:8F:40:9F:DD:03:E5:64:92:C5:15:B8:63:EB:4B:78
Authority key identifier: 2B:F8:97:E0:E5:52:26:E4:2A:E3:10:62:4D:0C:DC:8D:97:39:36:CA
Certificate issuer: /CN=2bf897e0e55226e42ae310624d0cdc8d973936ca
Certificate serial: 01A1250BFEB1959EF330FCAD6B53BD0FDC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_iX4OVSJuQq4xBiTQzcjZc5Nso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft
Manifest number: 0111
Signing time: Sat 10 Oct 2026 09:01:45 +0000
Manifest this update: Sat 10 Oct 2026 09:01:45 +0000
Manifest next update: Sun 11 Oct 2026 09:01:45 +0000
Files and hashes: 1: K_iX4OVSJuQq4xBiTQzcjZc5Nso.crl (hash: qvnxC82JC4/9MTE4OwQlHJMRMaCm3uEUNM2s1wKIPxQ=)
2: NRBS6ZtboB2iimKF471rwSY1gJo.roa (hash: TinIeELIj1280SRdWKZnK8lTmk3dSvkgs4pLOxMqj3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_iX4OVSJuQq4xBiTQzcjZc5Nso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:fe:b1:95:9e:f3:30:fc:ad:6b:53:bd:0f:dc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf897e0e55226e42ae310624d0cdc8d973936ca
Validity
Not Before: Oct 10 09:01:45 2026 GMT
Not After : Oct 11 09:01:45 2026 GMT
Subject: CN=c83db2eca38f409fdd03e56492c515b863eb4b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:67:45:fd:37:e9:90:cd:b9:2a:d7:37:8e:
71:6e:28:06:6c:09:e4:8a:12:9b:02:b7:28:f6:47:
01:b1:aa:5f:3c:82:58:ac:62:72:43:6f:fe:0c:cf:
f6:47:f0:20:d7:ce:fb:38:20:7f:ba:5d:18:5b:3f:
ac:b1:26:9f:9d:cc:a0:d8:9f:ed:7b:3a:81:25:54:
b6:ce:33:9f:47:99:4e:9e:49:c3:1c:4f:17:23:88:
04:5a:54:c2:b3:79:2d:7c:6a:7a:c9:0c:9d:68:94:
5e:75:83:33:0d:83:13:f9:b4:1e:c0:c0:f0:f0:cd:
2b:b1:f7:7c:83:66:39:f4:67:a5:a0:29:24:8b:5d:
5b:c6:80:1c:7d:2e:b3:3e:52:ec:56:5c:ff:ff:3b:
36:3b:7b:d6:e3:75:3b:d5:ce:0d:83:b2:ee:6e:c9:
5e:b2:b3:e2:b0:89:d7:88:a6:0d:26:54:8e:09:b0:
dc:72:fe:f9:17:2d:77:44:33:23:64:70:60:74:65:
aa:e5:f1:b9:c4:a0:1b:20:c2:b7:7f:c0:12:a8:5b:
30:f7:1e:ed:41:e9:51:20:bd:16:01:4a:55:5b:d1:
30:40:1a:55:74:fd:5b:90:13:36:1b:ce:6a:e6:61:
98:61:63:27:c6:d0:b3:77:55:81:9a:df:8e:ec:1b:
af:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3D:B2:EC:A3:8F:40:9F:DD:03:E5:64:92:C5:15:B8:63:EB:4B:78
X509v3 Authority Key Identifier:
keyid:2B:F8:97:E0:E5:52:26:E4:2A:E3:10:62:4D:0C:DC:8D:97:39:36:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_iX4OVSJuQq4xBiTQzcjZc5Nso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/K_iX4OVSJuQq4xBiTQzcjZc5Nso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bc:be:6c:e3:0a:5b:f6:6a:7d:76:22:fb:ec:52:03:28:90:
6f:e5:1e:50:fc:a8:7f:14:da:ec:ce:2a:a8:e5:53:05:1c:59:
c2:04:eb:5d:8f:bd:2d:82:db:d9:8e:73:e7:98:1b:c7:57:65:
3a:45:0e:b4:4c:87:d9:af:71:dd:aa:0a:73:1d:61:b1:11:25:
0c:ad:0c:32:58:78:f4:0e:92:58:b4:1e:df:c7:18:af:fb:be:
56:a8:c7:5c:36:49:1a:4b:65:85:6f:37:4a:cc:7f:2b:1e:3b:
13:6b:34:75:29:cc:7b:3b:1c:14:3b:7b:14:9c:42:4b:c0:cd:
c0:a6:4e:0d:ba:ae:cd:92:d5:d3:fb:2d:73:e5:f4:d2:ed:66:
a2:38:f6:1b:14:01:c9:50:73:48:e0:35:55:d8:6b:e7:5e:a6:
c2:1d:cd:9a:b4:ef:39:0a:0e:e8:7b:37:a4:7f:13:31:76:10:
ec:d7:ce:eb:a7:d2:93:f1:e3:2f:f7:07:e0:d8:8b:ff:e1:b7:
95:70:86:6c:2f:76:0f:bf:c4:4f:27:d7:a6:20:c4:96:d7:3b:
f1:c9:b7:74:12:42:1a:cf:ac:70:55:1b:7a:ae:6a:80:f2:17:
4d:a9:6e:b5:1d:b9:c5:dc:8c:b4:c7:e2:d4:9c:7d:f4:4d:56:
ac:49:74:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:22:44 2026 by rpki-client