Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: T9knFrUHjxtQxQekF3a0CSA4SOJhB6ISTJL2nhJ0ZXE=
Subject key identifier: DC:D3:CC:30:53:1A:BB:72:C2:AF:56:A3:37:28:06:15:F6:F3:9F:D1
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 019F86E95EC068618D9F15EB4BADCA5CFD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: 0591
Signing time: Tue 21 Jul 2026 23:01:08 +0000
Manifest this update: Tue 21 Jul 2026 23:01:08 +0000
Manifest next update: Wed 22 Jul 2026 23:01:08 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: yM+yfkDVB+9gjkIXnYDPQxwBiSf9CZVGOpOWwzIAabc=)
2: OpkXHZIicfHCPvft3PttWRGy66g.roa (hash: EVSEcIRV/V3W58OZOul/52nTZj0iMwsLv/i2q2ZyFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:e9:5e:c0:68:61:8d:9f:15:eb:4b:ad:ca:5c:fd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Jul 21 23:01:08 2026 GMT
Not After : Jul 22 23:01:08 2026 GMT
Subject: CN=dcd3cc30531abb72c2af56a337280615f6f39fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:f4:41:d6:2e:7d:f8:fd:4a:d3:57:2f:54:
e4:b1:33:99:80:fb:01:13:ec:1e:bf:a7:d4:1b:76:
8d:b3:e1:e5:e2:7c:c4:7e:7d:4f:27:dc:1e:76:90:
29:c2:a2:98:98:db:9b:2c:6b:34:99:d8:ef:76:46:
47:78:ed:f2:25:a2:58:9f:4d:9c:42:b7:c9:95:69:
df:80:e8:af:88:6a:77:2a:43:97:18:30:48:0a:c3:
3a:8d:73:1e:c7:0c:e0:9d:53:84:ba:25:94:60:e0:
59:6d:7b:31:22:f7:f9:dd:78:7c:46:03:d9:81:ff:
eb:fd:95:da:ff:e9:7d:0b:d5:4d:fd:8e:67:a8:8c:
7a:1c:ed:9d:f9:d2:87:66:73:e2:60:c7:0b:64:7e:
e8:3f:5e:fc:e0:8d:72:4f:03:29:91:e9:5a:6e:d4:
3d:f7:8a:87:9f:8a:0b:c6:f4:10:fe:4c:1e:ae:37:
9a:84:c4:52:52:46:eb:4d:f3:78:4c:e5:92:bb:d6:
5b:e0:1b:fa:c9:86:ca:f3:a9:e0:5a:2f:92:1b:9e:
84:10:c4:39:d6:f5:2e:78:92:58:a6:c5:7c:cd:4a:
24:05:61:0a:5f:38:9d:5a:75:f9:e3:77:d5:35:5f:
c7:70:15:64:d4:43:47:45:ca:8b:72:06:2a:dc:1b:
b2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D3:CC:30:53:1A:BB:72:C2:AF:56:A3:37:28:06:15:F6:F3:9F:D1
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:63:83:fb:7b:b7:71:ab:30:d7:42:81:46:f3:ae:d9:d9:c2:
c8:c9:93:20:9f:3a:5e:44:e3:ce:0c:b7:f0:6d:c5:fe:93:4a:
26:16:fb:3d:f2:a2:d2:34:53:5c:96:4b:85:cc:6d:2c:e8:00:
1a:06:a0:5f:a3:36:17:47:2f:1a:71:4d:67:48:01:b6:59:df:
88:ec:7c:12:ea:98:81:28:37:2d:06:52:6f:bb:29:13:ba:d7:
7a:f8:b9:70:b8:24:d3:6c:35:d8:28:fb:84:72:e2:ec:bc:ab:
52:79:e2:70:80:96:98:48:97:27:14:df:6a:61:99:01:db:f2:
47:43:3f:1f:33:00:d6:07:b1:c3:b4:37:b6:fe:90:8a:bf:47:
e9:2f:e9:0a:d6:23:12:a0:e9:0f:dd:d3:ab:c4:e8:1f:4f:31:
4b:0e:cb:ea:f0:af:36:aa:48:21:0f:b1:08:75:a5:18:d9:09:
2c:cb:04:ac:f2:11:83:59:f0:a4:5f:90:17:5b:5d:66:16:7e:
bf:0b:96:c3:a9:0c:de:27:1b:98:ef:c7:44:e6:b2:6c:f6:f3:
c4:b1:87:23:4a:78:71:c6:0c:bc:bd:e3:b8:64:d5:90:cd:bd:
70:12:c9:14:28:59:59:be:3a:7c:f5:87:8d:0b:1d:86:1d:23:
07:fc:17:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+G6V7AaGGNnxXrS63KXP0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNjllNmRmNjA4OWQ0ZDg2MTM2ODcxN2VhNjZlN2I2MTZj
NzkwYzkwHhcNMjYwNzIxMjMwMTA4WhcNMjYwNzIyMjMwMTA4WjAzMTEwLwYDVQQD
EyhkY2QzY2MzMDUzMWFiYjcyYzJhZjU2YTMzNzI4MDYxNWY2ZjM5ZmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJL0QdYuffj9StNXL1TksTOZgPsB
E+wev6fUG3aNs+Hl4nzEfn1PJ9wedpApwqKYmNubLGs0mdjvdkZHeO3yJaJYn02c
QrfJlWnfgOiviGp3KkOXGDBICsM6jXMexwzgnVOEuiWUYOBZbXsxIvf53Xh8RgPZ
gf/r/ZXa/+l9C9VN/Y5nqIx6HO2d+dKHZnPiYMcLZH7oP1784I1yTwMpkelabtQ9
94qHn4oLxvQQ/kwerjeahMRSUkbrTfN4TOWSu9Zb4Bv6yYbK86ngWi+SG56EEMQ5
1vUueJJYpsV8zUokBWEKXzidWnX543fVNV/HcBVk1ENHRcqLcgYq3BuytQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzTzDBTGrtywq9WozcoBhX285/RMB8GA1UdIwQY
MBaAFCtp5t9gidTYYTaHF+pm57YWx5DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUt
MDViM2U0MzFjMWVhLzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUtMDViM2U0MzFjMWVh
LzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamOD+3u3
casw10KBRvOu2dnCyMmTIJ86XkTjzgy38G3F/pNKJhb7PfKi0jRTXJZLhcxtLOgA
GgagX6M2F0cvGnFNZ0gBtlnfiOx8EuqYgSg3LQZSb7spE7rXevi5cLgk02w12Cj7
hHLi7LyrUnnicICWmEiXJxTfamGZAdvyR0M/HzMA1gexw7Q3tv6Qir9H6S/pCtYj
EqDpD93Tq8ToH08xSw7L6vCvNqpIIQ+xCHWlGNkJLMsErPIRg1nwpF+QF1tdZhZ+
vwuWw6kM3icbmO/HROaybPbzxLGHI0p4ccYMvL3juGTVkM29cBLJFChZWb46fPWH
jQsdhh0jB/wXlg==
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:10:09 2026 by rpki-client