Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
File: 2KPKzfjzNRS-Or3FLFDshkZ16VU.mft (raw, json)
Hash identifier: IY1Q4a2OJNpcK6DpwohQuyGnyxrmWYk5VhOleERVS2M=
Subject key identifier: 76:EF:E3:31:30:E4:3D:14:75:D2:EC:37:02:ED:31:89:C5:90:9D:45
Authority key identifier: D8:A3:CA:CD:F8:F3:35:14:BE:3A:BD:C5:2C:50:EC:86:46:75:E9:55
Certificate issuer: /CN=d8a3cacdf8f33514be3abdc52c50ec864675e955
Certificate serial: 01A00213D4B323E26AF6AD6D9B9ECFA2DD0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
Manifest number: 0F59
Signing time: Fri 14 Aug 2026 21:00:49 +0000
Manifest this update: Fri 14 Aug 2026 21:00:49 +0000
Manifest next update: Sat 15 Aug 2026 21:00:49 +0000
Files and hashes: 1: 2KPKzfjzNRS-Or3FLFDshkZ16VU.crl (hash: NTBPhGxXX8Uygn+QZBPmcBQpPJcz28RsAMgQ7srSBgk=)
2: 55I-KJfDZCQf3-WIzaOmHLDw0UA.roa (hash: CHL8cZMB7OLAW5NGioo9AKdHll+9RPJn2SB7b3DCiOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:d4:b3:23:e2:6a:f6:ad:6d:9b:9e:cf:a2:dd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a3cacdf8f33514be3abdc52c50ec864675e955
Validity
Not Before: Aug 14 21:00:49 2026 GMT
Not After : Aug 15 21:00:49 2026 GMT
Subject: CN=76efe33130e43d1475d2ec3702ed3189c5909d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:41:5e:be:b2:ab:22:7f:9f:bb:f2:ec:ac:
79:cd:37:42:73:11:a0:f7:b8:b1:e5:bc:86:c0:70:
be:dc:7e:a3:bb:40:18:d0:7e:df:bf:29:66:38:1a:
62:02:ac:05:a3:bd:47:fd:20:f6:35:52:19:b9:02:
a7:76:b7:78:f1:b5:af:c2:7e:a0:a6:64:e8:e5:9e:
21:5c:05:22:59:c1:09:27:96:de:de:15:04:5e:7a:
0d:a8:68:95:7a:ff:3c:58:21:d4:8e:46:39:34:10:
08:0f:dc:b2:aa:50:c3:45:ca:ae:2b:b4:85:73:67:
9d:ee:f3:df:da:74:6b:8c:ff:04:e5:9d:d8:26:b9:
4d:0c:d1:b6:51:8a:6a:79:44:a1:d5:f8:f1:03:3e:
14:10:c8:6b:f5:b7:b0:b2:ee:2e:4a:99:0d:4b:06:
f0:c8:c8:27:de:7b:14:1c:19:eb:ae:1e:ee:02:b0:
50:77:f4:e6:04:05:2d:b4:ab:40:74:8e:c9:6f:e4:
d3:5b:c0:ad:6d:dd:aa:1a:22:91:96:82:6a:e4:21:
e5:7c:23:20:6e:4d:2a:b5:57:fa:73:08:a7:85:4a:
2c:8a:a6:a5:db:05:9f:63:9b:b6:b6:d8:35:5d:ab:
11:5a:77:a7:6a:de:a8:5c:8e:c8:04:28:ac:e3:19:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EF:E3:31:30:E4:3D:14:75:D2:EC:37:02:ED:31:89:C5:90:9D:45
X509v3 Authority Key Identifier:
keyid:D8:A3:CA:CD:F8:F3:35:14:BE:3A:BD:C5:2C:50:EC:86:46:75:E9:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KPKzfjzNRS-Or3FLFDshkZ16VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/333c1a-e4a5-496d-9a81-b791b989af29/1/2KPKzfjzNRS-Or3FLFDshkZ16VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:39:15:2c:d6:29:7e:d8:ef:26:22:aa:7f:db:7e:3a:d7:79:
d3:2c:f3:80:7d:89:f1:75:45:73:3a:d1:7a:0d:71:00:5a:5c:
0f:07:e0:ff:bb:ca:3e:f1:3f:3c:95:87:f0:18:a0:75:17:54:
0d:5e:11:c4:7e:d6:2e:51:36:60:35:a8:39:0e:82:e1:70:85:
70:fb:3d:a1:ec:93:91:6a:09:c2:37:63:33:c7:0b:51:2d:15:
c7:00:48:86:c3:4d:86:c7:79:8b:f6:1a:7c:89:6e:85:ae:0f:
d9:f5:ad:b2:a2:83:8c:0d:2b:6d:24:09:bd:4c:13:e4:3d:20:
6f:aa:39:d3:15:d1:32:70:59:d9:d8:c0:7a:a8:32:e3:aa:20:
94:73:89:f8:f8:a8:ee:c3:ef:68:fb:bd:02:a3:99:60:72:d5:
82:3a:94:19:b4:98:bf:2d:5b:3c:2a:de:33:e6:55:ff:18:1b:
75:17:7b:8a:e9:6c:8b:8e:0b:54:f0:25:41:d3:0a:90:7b:69:
00:71:ea:10:7e:e7:f9:f3:60:ec:db:89:a1:5b:85:e6:2c:c5:
9b:7e:24:57:49:a9:97:f2:6a:51:32:fe:fe:d3:ce:93:45:92:
b7:d1:8a:9c:b9:19:e8:de:fc:86:85:32:cf:6c:0e:40:51:16:
2c:19:b8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:57 2026 by rpki-client