Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: Z9PPYG5CnIg9nZftshNYKqriAAwLSZa+5zJkn2HT9VM=
Subject key identifier: F3:17:3B:5A:6E:13:07:7E:E9:82:27:E6:D9:58:B7:07:66:02:B3:7B
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 01A15E1F0FA899F557652A4CD8CB771B6F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: 0685
Signing time: Wed 21 Oct 2026 11:00:56 +0000
Manifest this update: Wed 21 Oct 2026 11:00:56 +0000
Manifest next update: Thu 22 Oct 2026 11:00:56 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: lkeoWIdKdoSmkwt/vyHmmZIgaAzq6QZlCaWVSD4EeY8=)
2: OpkXHZIicfHCPvft3PttWRGy66g.roa (hash: EVSEcIRV/V3W58OZOul/52nTZj0iMwsLv/i2q2ZyFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:1f:0f:a8:99:f5:57:65:2a:4c:d8:cb:77:1b:6f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Oct 21 11:00:56 2026 GMT
Not After : Oct 22 11:00:56 2026 GMT
Subject: CN=f3173b5a6e13077ee98227e6d958b7076602b37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a6:16:01:11:79:5b:fc:37:77:c7:7f:0b:e1:
73:0d:57:c1:58:59:66:23:19:6a:70:82:6d:66:3e:
6b:cd:9f:55:7f:51:54:47:1f:9e:20:c0:56:73:d0:
53:ef:f9:17:13:ee:9f:99:ff:27:3f:f1:39:4a:79:
d2:47:34:35:6a:3a:2e:5b:c5:70:5b:54:ba:11:46:
b2:1c:c1:45:1a:c0:78:1e:b0:26:2e:05:ab:11:1c:
22:bc:52:4b:6b:b2:56:bb:84:62:35:9b:d8:24:ab:
35:fe:0f:97:24:96:84:7c:3a:9d:6d:65:2d:1c:f7:
d8:8d:73:70:33:6b:db:93:b8:75:a9:0b:0c:95:92:
10:d4:2d:9e:46:da:73:36:61:c0:89:ce:c7:c2:a2:
51:23:4a:75:b3:c1:91:ff:d1:bc:10:6d:25:ff:9f:
5f:e4:3b:0b:e1:7c:23:f3:22:ec:d4:b5:17:cf:00:
fb:9f:2c:06:04:ab:06:1f:b1:0b:33:67:34:81:ce:
c1:a7:eb:85:32:1c:3d:98:4f:5c:63:9b:f7:3e:fc:
48:0e:f9:8f:47:31:73:3b:a3:2c:00:4d:4f:eb:79:
5a:be:5e:a6:7c:d8:f8:b8:94:4c:8e:25:05:60:8d:
b3:65:28:f2:8b:05:62:2f:bc:32:09:29:75:d2:d9:
8e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:17:3B:5A:6E:13:07:7E:E9:82:27:E6:D9:58:B7:07:66:02:B3:7B
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:07:1c:12:c1:10:5f:85:f3:34:2a:65:24:65:d5:be:95:82:
a6:36:b0:4d:25:72:a3:fe:ba:86:27:b5:ad:f9:39:d6:8e:d6:
5a:64:6f:5c:07:f1:0e:ec:a6:84:93:6f:f0:38:6e:2c:02:0f:
12:56:84:c7:f5:da:4b:08:2e:09:8c:e5:4b:7c:52:80:bd:a7:
a1:86:17:dc:92:04:c4:c7:84:82:7e:3a:77:6a:e0:eb:80:74:
37:02:6a:8a:04:a0:52:c2:bf:33:74:61:f0:31:1a:a5:41:4a:
e1:a9:65:79:3b:29:10:22:f2:56:93:2d:0e:db:b3:ad:6d:73:
32:86:a3:20:99:81:af:0d:d5:04:16:6f:c9:8c:f8:5d:7f:c9:
f1:30:1b:13:16:1d:6b:b3:fb:35:45:11:f2:82:6e:a3:a1:4e:
7e:c4:e3:df:44:bd:22:a5:de:c0:1d:b2:99:c0:d4:b6:b5:a2:
f8:02:63:83:7d:54:48:04:ab:a7:79:99:56:5f:94:99:82:65:
86:e6:d1:7a:7b:9c:fa:f6:a5:e2:56:69:a6:f9:1e:8a:07:8f:
a2:30:d3:c8:25:13:b4:e5:35:b1:b1:9b:ac:5d:26:33:71:ae:
0b:bd:e1:c7:e0:11:8d:eb:9b:33:a5:33:a2:d1:0f:d6:c9:f6:
b8:ce:32:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:28:36 2026 by rpki-client