Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: RgvquEC3r8Cjl5dIaAGxpMl+Y//GpBY3BQuakeBaBFU=
Subject key identifier: 5A:A6:EF:8C:17:09:26:96:19:D6:2E:30:1B:65:8B:3A:17:0C:3C:EA
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 019D37F71E1042D6E9D6CFC578009C8EAE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: 045F
Signing time: Sun 29 Mar 2026 05:00:35 +0000
Manifest this update: Sun 29 Mar 2026 05:00:35 +0000
Manifest next update: Mon 30 Mar 2026 05:00:35 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: IJV2jYJU9t4mx5VYkMEoxJ+efy4ozFDGMgyIs9nywZQ=)
2: OpkXHZIicfHCPvft3PttWRGy66g.roa (hash: EVSEcIRV/V3W58OZOul/52nTZj0iMwsLv/i2q2ZyFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1e:10:42:d6:e9:d6:cf:c5:78:00:9c:8e:ae:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Mar 29 05:00:35 2026 GMT
Not After : Mar 30 05:00:35 2026 GMT
Subject: CN=5aa6ef8c1709269619d62e301b658b3a170c3cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:be:e9:5c:12:c2:86:97:0f:b3:75:92:0f:c5:
76:84:97:7e:36:9b:b2:fc:a9:3c:4c:68:30:85:22:
64:33:38:9b:a2:f2:4e:fb:a3:fd:72:ba:a0:8e:3b:
d0:b8:3d:fb:bb:7b:2e:0c:4d:aa:2e:35:fe:78:67:
6f:ef:7a:d4:af:25:ce:26:3c:d4:ad:43:ff:b1:0a:
f0:06:0b:cf:6b:34:d0:cc:bc:f9:69:c8:14:a4:68:
5b:e3:80:06:bb:51:2a:21:58:ab:1a:14:d9:45:ba:
91:70:8a:57:d5:98:89:5a:43:65:f3:a9:b5:98:c6:
64:4e:ab:ad:13:58:4c:ee:51:1c:ed:42:b3:c1:fd:
ff:55:ad:0b:88:2f:73:20:21:c5:a4:dc:9a:48:5e:
90:25:29:3c:f8:04:05:60:0e:db:d2:b2:0d:3a:a7:
b4:ae:c6:9e:2a:fd:ed:6c:e8:72:e6:cf:2c:f8:a6:
44:18:f9:6f:67:22:40:c8:a5:17:a2:2e:5f:43:3c:
c8:42:ca:50:9c:78:9c:23:b3:d4:13:73:8f:c1:37:
9a:e0:71:f3:0b:d4:4f:dc:e4:74:9f:0e:2f:2f:93:
05:0d:47:a2:19:14:21:2a:ef:f4:87:31:e2:14:6e:
ef:99:43:80:5b:81:ae:3a:39:e6:6e:e2:25:e5:b3:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A6:EF:8C:17:09:26:96:19:D6:2E:30:1B:65:8B:3A:17:0C:3C:EA
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d6:33:18:c4:2a:00:db:2e:da:ce:ad:13:85:85:18:c1:12:
b7:be:a0:0c:f4:58:7a:c5:6f:47:15:77:21:36:f8:9b:af:df:
dc:0c:7a:12:56:12:95:73:71:3d:db:40:11:3b:3f:11:d0:ed:
0b:d1:1f:af:8f:1d:c5:8e:ad:ea:b5:69:0d:26:24:8f:72:e8:
8c:6b:ea:c1:64:3c:63:a0:f9:14:28:88:4e:f1:b0:6b:56:dc:
e8:0e:8e:d7:86:27:b4:1f:18:34:93:80:da:ee:b5:2b:75:0a:
c5:bb:73:70:06:b5:86:cc:92:96:8a:d2:bd:96:12:3f:e0:7d:
fe:f3:80:46:89:c6:e0:3b:b0:95:27:6b:aa:70:a8:6f:88:34:
a8:64:b7:04:51:d8:45:68:7a:69:bc:8e:30:9a:5d:b9:e0:15:
89:7c:3f:14:1b:0b:e5:13:c4:93:b9:68:72:4e:83:59:e5:71:
1c:f1:3c:93:f6:ca:6f:80:d4:43:75:e4:32:8f:d9:22:f0:4b:
84:51:4d:2e:7e:d2:60:21:f1:f1:0f:d6:e4:1e:2d:42:be:8a:
30:cb:79:67:d0:80:30:4a:bd:bd:e0:58:19:40:31:b5:15:09:
4e:3f:0b:4c:76:10:35:1a:6d:29:17:98:48:76:7b:4f:fc:7b:
97:a6:67:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039x4QQtbp1s/FeACcjq4hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNjllNmRmNjA4OWQ0ZDg2MTM2ODcxN2VhNjZlN2I2MTZj
NzkwYzkwHhcNMjYwMzI5MDUwMDM1WhcNMjYwMzMwMDUwMDM1WjAzMTEwLwYDVQQD
Eyg1YWE2ZWY4YzE3MDkyNjk2MTlkNjJlMzAxYjY1OGIzYTE3MGMzY2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5r7pXBLChpcPs3WSD8V2hJd+Npuy
/Kk8TGgwhSJkMzibovJO+6P9crqgjjvQuD37u3suDE2qLjX+eGdv73rUryXOJjzU
rUP/sQrwBgvPazTQzLz5acgUpGhb44AGu1EqIVirGhTZRbqRcIpX1ZiJWkNl86m1
mMZkTqutE1hM7lEc7UKzwf3/Va0LiC9zICHFpNyaSF6QJSk8+AQFYA7b0rINOqe0
rsaeKv3tbOhy5s8s+KZEGPlvZyJAyKUXoi5fQzzIQspQnHicI7PUE3OPwTea4HHz
C9RP3OR0nw4vL5MFDUeiGRQhKu/0hzHiFG7vmUOAW4GuOjnmbuIl5bOXAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqm74wXCSaWGdYuMBtlizoXDDzqMB8GA1UdIwQY
MBaAFCtp5t9gidTYYTaHF+pm57YWx5DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUt
MDViM2U0MzFjMWVhLzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jOGRhZGMtOGUyNy00YmJlLWFlZTUtMDViM2U0MzFjMWVh
LzEvSzJubTMyQ0oxTmhoTm9jWDZtYm50aGJIa01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNYzGMQq
ANsu2s6tE4WFGMESt76gDPRYesVvRxV3ITb4m6/f3Ax6ElYSlXNxPdtAETs/EdDt
C9Efr48dxY6t6rVpDSYkj3LojGvqwWQ8Y6D5FCiITvGwa1bc6A6O14YntB8YNJOA
2u61K3UKxbtzcAa1hsySlorSvZYSP+B9/vOARonG4DuwlSdrqnCob4g0qGS3BFHY
RWh6abyOMJpdueAViXw/FBsL5RPEk7lock6DWeVxHPE8k/bKb4DUQ3XkMo/ZIvBL
hFFNLn7SYCHx8Q/W5B4tQr6KMMt5Z9CAMEq9veBYGUAxtRUJTj8LTHYQNRptKReY
SHZ7T/x7l6ZnUg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:27 2026 by rpki-client