Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: Dlq9fmTpzUxpvo+I3pcF0WEt7KQsY7LGNDN+sm0ua28=
Subject key identifier: 52:3A:7D:ED:EC:B1:B3:E1:F8:22:5C:EE:0E:C7:9C:00:8F:23:1E:F8
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 01A06EA730E60F24F57E7233DADF0ADE6C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: 0609
Signing time: Fri 04 Sep 2026 23:00:45 +0000
Manifest this update: Fri 04 Sep 2026 23:00:45 +0000
Manifest next update: Sat 05 Sep 2026 23:00:45 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: guvo0rgdEIi3M4R6hZ2FK7R+zyOZn/xKcOMVG5vARmg=)
2: OpkXHZIicfHCPvft3PttWRGy66g.roa (hash: EVSEcIRV/V3W58OZOul/52nTZj0iMwsLv/i2q2ZyFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:30:e6:0f:24:f5:7e:72:33:da:df:0a:de:6c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Sep 4 23:00:45 2026 GMT
Not After : Sep 5 23:00:45 2026 GMT
Subject: CN=523a7dedecb1b3e1f8225cee0ec79c008f231ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c4:08:39:63:1f:1f:c4:b0:59:ee:89:66:70:
f1:14:4e:7f:80:98:33:5d:18:05:25:8e:19:d2:6f:
b1:ba:f1:72:b5:ef:e6:31:d2:6b:c3:54:92:fc:d6:
ba:33:47:8e:1b:e1:5a:51:27:7a:4f:63:cc:eb:a4:
af:90:eb:13:2a:c8:9d:00:0f:85:04:e3:ef:f8:43:
9c:5c:2e:43:aa:fa:80:02:2a:17:57:f7:a4:94:f8:
27:04:2d:75:3b:9c:dd:c4:42:ce:eb:b8:09:77:8f:
b5:a0:38:d3:2f:73:e1:f9:ce:49:8f:a9:b3:96:99:
84:74:fd:f1:9e:42:47:f2:80:94:c4:be:2c:83:aa:
d2:8c:77:94:36:50:7a:1a:34:f6:e1:9f:ae:4d:80:
62:97:e0:2c:6e:72:d8:49:9a:12:8e:e9:13:81:c6:
28:bc:07:f8:57:27:00:70:bc:b9:dd:de:c7:7f:a1:
78:cf:ab:86:a4:1b:3a:f3:8b:ec:4d:6e:77:79:84:
03:b6:9d:a6:15:ab:88:6d:a7:81:aa:f4:2b:a1:32:
c3:f4:26:a9:14:f2:8d:5c:78:3a:34:32:e9:d2:c5:
37:f8:d1:2c:cc:55:04:a5:6f:8b:25:a3:d0:42:a5:
cf:a6:52:91:48:a0:a4:41:a9:6d:4d:23:35:0c:7f:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3A:7D:ED:EC:B1:B3:E1:F8:22:5C:EE:0E:C7:9C:00:8F:23:1E:F8
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:53:a0:d3:87:b1:a6:02:42:dc:d7:eb:cb:9d:0c:c0:76:fd:
4b:20:54:72:55:f3:88:c9:03:ba:b6:7f:04:25:8d:17:4b:95:
fa:07:9b:01:dd:6d:e4:6e:b0:6b:8a:78:90:a6:a5:e3:31:f8:
96:35:4f:61:39:fe:b2:c4:d2:56:ef:46:1a:e6:fd:72:d6:c7:
29:44:2c:67:40:a7:7e:91:62:f4:f4:09:19:e8:d3:dd:ce:c4:
0d:18:5f:4b:9b:09:98:df:95:13:15:e6:ec:aa:db:8d:59:ca:
ef:f4:eb:65:06:82:2c:2c:1b:a4:4a:ce:54:f7:28:c9:35:3c:
38:e9:b9:0d:d1:21:b7:fa:89:1a:03:82:61:1a:1f:55:ec:05:
a3:79:a3:55:9d:70:9c:ae:f0:3c:47:cc:34:12:fb:a0:19:2b:
e1:78:40:13:7d:4b:a2:6d:70:79:7a:d0:6b:6d:f6:80:f2:aa:
1e:f4:f1:ae:79:ca:ba:6c:e8:42:a0:2f:4a:11:53:a3:37:d2:
fd:3e:7f:a2:c2:a8:69:e9:bc:dd:2c:85:be:e2:ed:90:da:79:
3d:a0:68:dc:17:97:aa:61:28:fb:8d:2a:21:c6:e2:93:44:66:
9c:70:9b:96:25:d1:2f:14:cd:b1:d5:4a:99:75:82:53:b1:b2:
ff:c9:53:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:24:28 2026 by rpki-client