Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
File: k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft (raw, json)
Hash identifier: db6TfaMTqgYPapdUenpghZ0Y53Rr9uOsLLoUzBb98LA=
Subject key identifier: 77:95:18:2B:C5:CE:1A:4D:42:96:65:02:D3:84:6E:09:96:41:88:DE
Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
Certificate issuer: /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Certificate serial: 01A13C37D26D08C70EC9B7B269E7E89188B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
Manifest number: 1240
Signing time: Wed 14 Oct 2026 21:00:53 +0000
Manifest this update: Wed 14 Oct 2026 21:00:53 +0000
Manifest next update: Thu 15 Oct 2026 21:00:53 +0000
Files and hashes: 1: 4vfCRtoiH1cndLSB-TTpHJwhG_I.roa (hash: 09h5AAcqogX7HNRV00Ls3XC8qozaIbuTMOkY1F7yq6o=)
2: k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl (hash: IZ090BJH0rlx69kxQKenLfKFy2emTBJ/3TZqNGUfNBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:37:d2:6d:08:c7:0e:c9:b7:b2:69:e7:e8:91:88:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Validity
Not Before: Oct 14 21:00:53 2026 GMT
Not After : Oct 15 21:00:53 2026 GMT
Subject: CN=7795182bc5ce1a4d42966502d3846e09964188de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:15:22:d3:63:8d:d8:81:bc:7b:98:a5:0d:01:
b8:1c:d2:70:fd:c2:06:cf:be:83:67:23:01:b3:26:
94:a2:df:66:0f:9e:84:a7:97:e5:df:17:cb:09:56:
6a:56:93:fb:7d:77:0a:6d:9e:71:cf:ba:00:9d:dd:
3d:93:43:20:3d:ca:44:82:aa:d4:61:3f:aa:3a:92:
c2:41:34:70:99:3a:e7:ba:81:9f:45:01:7f:bd:6b:
3b:17:8f:73:a4:49:06:22:07:f0:5b:93:a0:9a:de:
c1:ad:ca:16:4b:18:df:93:4f:ca:a9:77:94:b6:7c:
94:68:2c:d6:28:96:b5:89:99:55:35:24:d2:0e:37:
44:7c:53:01:68:64:73:60:a6:14:f9:79:eb:2e:2d:
25:34:7a:b5:13:d8:29:9a:a4:2f:49:d8:79:e0:80:
d7:33:77:db:69:b9:1c:01:84:30:c6:27:bf:b0:70:
0e:37:57:93:e6:b8:ff:fd:d8:19:e3:09:59:bd:46:
44:4a:2f:47:2e:5f:77:15:ac:28:5d:d0:e7:15:73:
72:59:2c:06:61:6d:f0:a4:01:67:ae:c5:96:c5:51:
b0:f1:64:be:26:12:6e:b1:81:da:83:cb:d2:67:ab:
73:b5:30:0d:79:fa:ab:b2:57:4d:c3:5c:31:6e:41:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:95:18:2B:C5:CE:1A:4D:42:96:65:02:D3:84:6E:09:96:41:88:DE
X509v3 Authority Key Identifier:
keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a6:e1:03:3f:2d:47:3e:98:dd:82:f0:24:21:fb:77:fe:6c:
80:5d:5e:54:9a:fe:14:9f:66:a5:15:5a:b5:b7:80:22:14:1f:
71:e5:8a:67:2f:93:7e:1e:71:cd:9e:db:de:11:da:a8:51:fa:
46:48:1e:9f:c5:46:9e:78:dc:94:87:22:f2:46:22:1d:63:13:
18:7d:43:38:48:2f:6b:28:2c:8f:2f:25:66:73:90:b5:fa:3a:
83:75:fb:b5:b3:ac:52:1f:a4:35:48:08:6c:fa:c9:8c:45:45:
7a:8b:fe:35:85:a8:94:a4:9b:be:f6:5d:a6:bf:6c:20:10:23:
2d:9a:94:3d:62:d3:c3:4a:00:c7:45:79:40:36:e6:33:7a:d4:
c7:b4:1d:10:b5:0a:c1:ed:db:7b:ca:45:66:c0:a4:42:f2:7b:
c1:99:5a:bc:aa:51:ad:f5:8a:00:5e:85:ae:5d:3d:a5:b3:b7:
72:9b:73:06:47:9a:17:be:cf:9c:35:72:66:8a:2d:3f:63:97:
58:91:be:13:4f:92:ec:e3:c8:b7:d7:e2:9f:ad:45:61:3b:68:
9e:b5:fe:99:41:b4:8c:7d:62:68:0b:42:9f:e5:8f:0f:a5:e3:
7c:b7:57:b0:b7:1c:3d:7f:b6:67:44:a8:f8:13:b1:3e:ad:92:
d1:c0:83:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:20:18 2026 by rpki-client