Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: h7okQGGJQ2XtqiRMvCjf00abBZCRd3qhzx3CCjPicw8=
Subject key identifier: C9:5E:4C:1E:88:49:AB:42:8B:DE:52:89:6D:4E:B0:DE:51:99:29:11
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 019F84FB14C5CB971C33F94721858710CD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: 0590
Signing time: Tue 21 Jul 2026 14:01:15 +0000
Manifest this update: Tue 21 Jul 2026 14:01:15 +0000
Manifest next update: Wed 22 Jul 2026 14:01:15 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: ws3p5slktNuRZjncw3+ijhDBA2coLlUDv7irEdUX2Zs=)
2: OpkXHZIicfHCPvft3PttWRGy66g.roa (hash: EVSEcIRV/V3W58OZOul/52nTZj0iMwsLv/i2q2ZyFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fb:14:c5:cb:97:1c:33:f9:47:21:85:87:10:cd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Jul 21 14:01:15 2026 GMT
Not After : Jul 22 14:01:15 2026 GMT
Subject: CN=c95e4c1e8849ab428bde52896d4eb0de51992911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:9c:28:6a:da:a0:84:76:2e:ba:39:02:ed:
57:67:4b:f8:4e:43:ca:54:77:8d:50:51:dc:9e:78:
41:90:80:91:89:ce:ae:ac:a2:8f:e7:78:10:00:09:
de:6b:e7:ee:a9:f0:c4:1a:f0:61:58:5f:f2:40:53:
2f:77:e9:f7:9f:01:a7:f2:cd:60:a9:00:9b:25:d0:
4e:07:4f:ab:1e:54:9d:39:5b:78:8e:1e:91:8f:2c:
7e:1f:5f:a9:57:ed:71:06:da:14:a9:e2:e3:69:00:
64:57:b0:80:72:34:1b:5f:5a:ca:01:80:44:47:09:
4d:71:f3:df:2d:b3:f9:0e:ea:e0:27:04:c6:5b:b9:
c3:98:ca:1f:40:20:1b:1e:00:99:8b:30:00:26:48:
89:2f:ad:70:14:f4:31:c5:d2:4b:f8:b9:e6:6a:3f:
df:cb:ed:24:76:45:7b:25:9c:53:70:57:85:07:46:
73:8c:7d:aa:1e:ad:16:e5:1e:da:c6:18:ff:2c:21:
bb:ee:95:51:22:49:a6:db:78:d2:be:5f:0b:84:25:
94:80:0e:dc:c6:f5:89:48:4a:33:ff:9d:57:45:5a:
e2:92:fb:3f:84:6a:6b:2c:83:e5:4c:dd:fe:18:f3:
d0:47:f6:07:40:c3:e8:4f:62:c2:d4:18:22:71:1e:
f9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5E:4C:1E:88:49:AB:42:8B:DE:52:89:6D:4E:B0:DE:51:99:29:11
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:eb:af:48:1a:7e:74:1e:78:a4:bd:99:11:f5:db:50:e5:85:
97:9b:39:0d:74:14:f3:3b:a4:3f:9c:d6:19:12:d9:4c:36:eb:
50:e5:c6:f8:d2:db:8d:53:35:51:76:6b:65:32:f7:21:e4:2d:
9e:a3:12:cb:96:4e:95:87:9f:1e:dc:28:9d:03:7c:54:74:f1:
ef:5c:4c:14:b6:7d:d0:d3:53:2f:50:4b:d7:b1:8b:2d:2b:8c:
c4:e2:90:fc:75:75:93:da:16:f2:1e:dd:e4:e3:64:12:1b:30:
db:de:bc:74:32:85:30:a2:b3:3b:9e:9b:5c:da:5e:54:78:83:
47:eb:83:d6:5f:e9:a2:ae:f2:20:0c:d2:11:db:5d:e4:eb:e7:
df:21:e1:75:b8:af:5c:94:1f:f7:c5:a1:6a:88:f5:90:64:1d:
82:82:a2:fe:30:33:69:a7:9c:7e:16:30:a8:12:4b:ab:d3:ea:
36:e6:d2:15:ac:cb:26:04:6a:a1:bf:b8:11:48:ea:a7:8f:a3:
28:ca:07:3e:b8:d4:8c:1b:9b:4f:bb:64:9b:6e:a0:bf:80:ff:
44:f2:68:f7:8a:c9:b4:47:8e:40:eb:84:f7:c8:33:b8:5d:bf:
40:ec:78:3d:ab:42:e4:5f:e5:0f:db:00:e0:2d:73:9a:54:9a:
3a:a8:37:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:16:46 2026 by rpki-client