Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File: K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier: qQhliREFjsm9IMXcOM7PTUhxuoetnfT74HUK6l8FGog=
Subject key identifier: FA:F9:E8:07:8A:4C:F9:3F:CC:AB:58:A6:42:BC:EA:F6:83:66:4F:7A
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial: 01A149BCACFA3D6A9DB15F51B4D7456EF800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number: 1AA9
Signing time: Sat 17 Oct 2026 12:01:04 +0000
Manifest this update: Sat 17 Oct 2026 12:01:04 +0000
Manifest next update: Sun 18 Oct 2026 12:01:04 +0000
Files and hashes: 1: E42ALr85hzHjr7r_9Z5V7NF6a-8.roa (hash: bMH2/YzfTbpse+/akM+4A9X/Bsc5TxJJDbOgKDKeGaQ=)
2: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: AvrJs/ws9xHlCC9o7PCi1rP491Zu7o+3GR3xSwPdjsY=)
3: Or9-McsdINXpd2AfMY8CRkBHo-c.roa (hash: Hm0aM5yCfz8g6AbodNDmMSYxdlDqVNZ0I10ycbk2bPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:bc:ac:fa:3d:6a:9d:b1:5f:51:b4:d7:45:6e:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Validity
Not Before: Oct 17 12:01:04 2026 GMT
Not After : Oct 18 12:01:04 2026 GMT
Subject: CN=faf9e8078a4cf93fccab58a642bceaf683664f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:e7:fe:f2:64:fa:42:55:08:b0:6d:e8:86:
f8:3c:b0:1f:bf:35:3d:d1:b6:6a:14:d7:56:2d:68:
8d:28:de:e0:72:f3:84:01:1d:fa:86:fc:db:ee:a4:
d2:04:21:85:f2:32:2c:ff:44:03:5f:1c:e3:79:01:
a8:d0:2c:c7:dc:7f:45:20:6a:a1:b2:f8:a2:63:1d:
4a:db:87:d6:52:5f:14:00:36:d9:f6:f8:55:d3:04:
29:38:01:9a:45:59:8a:6d:4a:61:63:04:1c:ec:f3:
3e:2a:40:29:6d:90:16:3b:94:04:87:21:18:a1:5c:
04:a9:30:08:53:be:41:e2:38:5b:9c:77:9e:4c:37:
20:11:11:9d:b7:f4:45:a1:17:a6:34:dd:1e:11:2f:
4d:ec:5c:59:18:8d:bb:86:61:f8:98:e1:a5:0e:b1:
a4:f1:41:54:6d:5e:f4:e0:93:f0:51:0d:f7:b3:8b:
b4:41:86:49:98:7f:c0:00:e0:9e:42:80:9a:3c:cc:
31:42:aa:54:dc:18:43:4a:fb:8b:f4:ae:51:ff:0a:
8a:dd:5d:c8:22:28:92:c5:5d:b8:12:5f:b6:ee:3c:
f3:ea:0a:de:01:e9:e3:e5:38:c1:4a:50:26:5f:dc:
76:cd:de:07:6f:f8:fe:ac:2a:c7:23:2f:37:17:d2:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F9:E8:07:8A:4C:F9:3F:CC:AB:58:A6:42:BC:EA:F6:83:66:4F:7A
X509v3 Authority Key Identifier:
keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f3:6c:70:50:6c:0f:08:4f:93:d7:be:fc:97:06:c8:f2:d1:
63:80:58:f7:b9:9a:41:f0:6f:74:6b:4d:8b:ee:4c:65:c9:bc:
a9:7b:8f:49:89:55:6b:d2:a3:72:58:05:f5:60:cb:c4:a3:60:
a1:b1:21:49:4d:7f:1a:53:6d:19:08:21:88:d7:71:8c:5e:f6:
2e:a6:03:7f:6d:95:3f:31:c8:a6:09:fc:4a:41:1a:b6:29:92:
31:d1:8e:3c:90:fd:d1:0c:29:11:da:fd:4a:c7:bd:5c:3f:a4:
81:40:8e:2c:92:08:28:ca:95:c4:e1:4e:81:53:14:dd:9d:1d:
4a:ec:60:81:cd:d1:35:cb:a8:d8:02:6b:1c:60:1e:d6:81:08:
dd:41:9a:22:8b:1c:85:2b:01:16:19:f4:47:c3:02:71:d6:c9:
9b:20:de:1b:43:56:28:70:27:3e:13:95:be:3a:05:0e:fd:a9:
e4:72:6a:59:ee:c5:bf:d5:9b:51:84:e3:6f:69:b2:ee:8a:cd:
89:3d:c5:d1:e6:cc:9c:c6:53:d9:89:0c:46:d8:89:cb:34:3c:
f3:29:48:1a:62:ea:5f:48:25:ba:29:51:10:8b:9a:52:1f:11:
14:c9:ec:24:96:c4:e4:c8:96:d4:a2:6f:e9:36:54:31:ac:7b:
fc:a2:b5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:28:41 2026 by rpki-client