Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
File: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json)
Hash identifier: KXxAyAVIGFmf3CqxeINKLOJaFTrjdIWBT5CKR2/ThRM=
Subject key identifier: DD:59:C4:23:68:4C:43:61:9C:AD:B6:40:1B:64:E4:CD:FB:3D:34:62
Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
Certificate issuer: /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Certificate serial: 019D36E562A73908580B06E878078E76BF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
Manifest number: 08C6
Signing time: Sun 29 Mar 2026 00:01:35 +0000
Manifest this update: Sun 29 Mar 2026 00:01:35 +0000
Manifest next update: Mon 30 Mar 2026 00:01:35 +0000
Files and hashes: 1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: Ox65qA/0dMtH936xvgADLp/r7qKBxNuemUzV1UAK/bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:62:a7:39:08:58:0b:06:e8:78:07:8e:76:bf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Validity
Not Before: Mar 29 00:01:35 2026 GMT
Not After : Mar 30 00:01:35 2026 GMT
Subject: CN=dd59c423684c43619cadb6401b64e4cdfb3d3462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:43:d3:f2:db:46:13:b8:c1:fb:39:af:af:
7b:e0:ab:c4:54:9c:22:14:17:ac:67:5d:9f:d5:34:
05:d5:18:6c:21:49:8a:c2:1b:9b:14:91:04:fb:dd:
eb:fb:2f:19:5b:95:ff:ba:c9:73:a6:88:e1:77:e4:
a5:9d:3b:d8:f2:7c:78:56:53:e8:e5:52:dd:c1:65:
0b:41:90:5d:bf:b3:da:b5:40:20:a0:59:50:6d:79:
f0:c5:93:aa:6e:40:fe:19:c7:ff:d8:33:ea:a0:d3:
60:c3:6f:74:0b:36:46:01:29:45:92:97:84:b9:c6:
b5:a2:6b:61:95:51:0e:59:ff:d5:cb:5b:35:ce:57:
02:4e:9b:54:cb:fd:62:2c:6a:11:2c:77:81:55:1d:
7f:a2:c9:b6:fa:b8:a7:85:cf:cc:13:cb:85:66:0f:
81:06:71:64:5e:e9:51:3c:e8:95:60:18:92:20:31:
5a:95:4f:f3:d5:2c:41:24:a6:7f:ed:8a:99:31:c0:
8a:78:ba:e7:60:2c:6d:d9:b6:2b:f4:22:32:61:c1:
9d:7d:fb:60:62:f0:5e:30:ff:27:c5:9a:1b:5f:20:
33:8a:3e:b7:bc:d9:eb:4b:6a:6f:bd:7e:dc:2d:2d:
16:ad:96:0e:d0:29:2c:e0:64:55:ea:a8:2f:c1:a9:
01:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:59:C4:23:68:4C:43:61:9C:AD:B6:40:1B:64:E4:CD:FB:3D:34:62
X509v3 Authority Key Identifier:
keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e7:8d:5a:5a:55:96:e4:42:b1:3b:a5:01:04:53:b3:24:c1:
c1:5e:92:b6:c6:bb:84:10:76:4b:a2:17:3b:cd:6f:1a:ff:7c:
4a:e6:e3:69:a5:45:6e:2b:e3:f0:37:7f:ce:dc:60:d5:f4:16:
63:2a:d1:4b:d5:08:d0:60:9a:b6:bc:b7:99:09:78:33:57:a2:
d3:49:b9:85:76:87:57:88:43:87:82:58:96:fd:16:58:8f:cc:
24:8b:e2:01:f3:ff:49:7b:ca:33:81:04:dd:cd:14:43:c3:ba:
4a:52:0c:b0:b4:3e:9e:37:a6:88:be:d3:d1:46:2c:6f:9e:23:
4f:5e:e1:07:81:e7:fa:2c:93:20:3b:c0:0b:d2:2a:35:73:1a:
ea:0f:5b:3c:05:9f:f9:a8:2f:05:3a:41:4f:52:8a:1e:f6:42:
0f:21:52:2d:9f:ba:bb:b6:0c:31:84:ab:5a:a5:06:37:31:2e:
af:ce:20:29:5e:c6:b0:1b:6a:79:52:ec:61:73:1d:c8:23:8b:
1a:39:f8:07:a4:20:7f:0f:53:de:8c:8a:08:05:57:e8:ca:28:
82:24:93:8b:be:2b:a3:e1:c6:a4:95:9a:c5:9d:35:af:8e:10:
1e:5c:99:b4:55:27:ba:29:0e:4b:f7:67:8b:96:25:7b:aa:1e:
d8:63:a1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:54 2026 by rpki-client