Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File: K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier: gAZA90dr1jlKXYkRebs67kgJlbb6Dv8fqnasX/8yqIc=
Subject key identifier: F4:33:77:14:8D:41:CD:12:D1:88:1B:DD:8F:DC:7C:D3:73:20:15:F8
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial: 01A0035D439F6379AFB9067CFE1C3E7EFC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number: 1A00
Signing time: Sat 15 Aug 2026 03:00:38 +0000
Manifest this update: Sat 15 Aug 2026 03:00:38 +0000
Manifest next update: Sun 16 Aug 2026 03:00:38 +0000
Files and hashes: 1: E42ALr85hzHjr7r_9Z5V7NF6a-8.roa (hash: bMH2/YzfTbpse+/akM+4A9X/Bsc5TxJJDbOgKDKeGaQ=)
2: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: NSAt2TMpV9yfidpWUw3hP4ea3kl630oKGttEuFU5uOA=)
3: Or9-McsdINXpd2AfMY8CRkBHo-c.roa (hash: Hm0aM5yCfz8g6AbodNDmMSYxdlDqVNZ0I10ycbk2bPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:43:9f:63:79:af:b9:06:7c:fe:1c:3e:7e:fc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Validity
Not Before: Aug 15 03:00:38 2026 GMT
Not After : Aug 16 03:00:38 2026 GMT
Subject: CN=f43377148d41cd12d1881bdd8fdc7cd3732015f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:77:fa:1a:ba:1e:27:ba:46:6e:3d:15:03:fa:
a7:e3:b3:cc:91:af:f6:c0:91:53:20:bb:40:fd:9c:
83:0d:57:a2:d5:f8:5a:df:22:97:76:74:1c:74:59:
65:49:28:7b:8c:55:8a:63:bc:2c:6d:8c:ae:e9:b2:
a1:69:7f:9a:98:b9:5a:60:7d:0b:f2:81:b7:0c:a0:
0b:0d:42:df:04:e9:63:2a:11:36:04:52:cb:4c:c9:
c3:7b:97:1c:c1:57:f8:b2:b2:1a:b3:c0:8f:15:8a:
77:92:02:57:0a:dd:96:76:44:59:85:71:89:c8:5f:
9b:c7:21:f8:0b:69:5e:be:75:8f:be:ce:e6:63:eb:
90:2a:b7:69:a8:0e:08:e3:27:fb:74:89:ff:66:26:
f3:cc:4a:92:31:62:3c:97:95:d1:d1:ca:70:d6:c9:
75:cd:49:c7:96:67:e2:34:d3:a9:23:76:7d:a6:6a:
8c:cd:3b:06:42:f4:61:60:c8:6b:c6:a1:58:b6:c9:
54:1e:5c:6d:82:54:02:e8:f0:4f:02:bb:d2:9a:af:
77:9f:2c:ac:81:80:4e:05:ad:ac:88:49:f3:8a:ea:
c2:12:da:6e:14:22:20:67:18:b4:5e:36:17:5b:f2:
f8:ae:89:07:0f:ea:e7:2c:d9:6f:40:a0:32:45:32:
7b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:33:77:14:8D:41:CD:12:D1:88:1B:DD:8F:DC:7C:D3:73:20:15:F8
X509v3 Authority Key Identifier:
keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b6:cc:24:ca:34:27:51:b0:68:c8:e1:aa:1c:8d:fc:cc:c6:
c1:57:53:26:cb:ee:3f:13:81:24:3c:81:9b:26:78:b5:8e:9b:
af:a1:bf:07:4d:86:e3:6c:a9:7c:23:e7:dd:53:a1:ee:90:ee:
1f:6a:e0:3f:32:1c:16:14:b1:57:55:b1:c6:e4:53:1d:d4:49:
bf:24:75:6b:15:e2:0b:82:3a:d0:86:e3:40:30:e9:5f:01:5d:
dc:99:02:5a:74:59:ec:c8:2c:3e:87:05:f2:17:7b:10:50:bf:
3e:7a:87:14:ed:c2:58:18:6a:d9:d9:79:e0:45:2a:1a:a8:32:
d1:ef:e8:de:1d:ed:32:83:01:f3:a7:de:1d:5a:4c:8c:2f:ce:
15:d7:85:de:dd:10:cb:56:4b:ce:24:db:29:50:d8:91:e6:f7:
c2:39:9c:7e:c0:e4:40:9e:63:5a:64:4c:c8:e0:bc:ed:89:94:
23:05:10:9e:e9:47:c4:ac:06:23:63:27:6f:79:13:b9:9d:f4:
9c:b1:14:a9:07:ac:6f:f1:85:bc:7c:cf:e4:b2:37:7e:28:41:
d2:c8:89:9c:2d:3f:46:1b:2f:59:0e:39:51:df:fb:49:23:94:
31:99:53:2b:ad:8c:66:be:a9:51:31:54:f2:e2:cc:3b:1b:22:
f6:dd:77:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:10:07 2026 by rpki-client