Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier: IMEU7cqZ1JUwGkUJFKwzqJf3q+5CLEv4HoW9Z0A9gGU=
Subject key identifier: 5B:E2:10:70:FF:41:39:9A:25:04:56:08:BD:A4:EB:35:C7:A0:FB:FD
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 01A1637C8BF88FCB7522FC27DDF6ADF25703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number: 1AB9
Signing time: Thu 22 Oct 2026 12:01:08 +0000
Manifest this update: Thu 22 Oct 2026 12:01:08 +0000
Manifest next update: Fri 23 Oct 2026 12:01:08 +0000
Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: 4mJLHZdvvqwku8N5EDyNHfUC5RHuu3an0ti5nW3mCV8=)
2: zc1RxQ-wCAjo2YyTdgBOf576bf0.roa (hash: vkvB5T6NKTKK2PGToAyqMv7sLiy7bF7pWaJUrDMf/r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:7c:8b:f8:8f:cb:75:22:fc:27:dd:f6:ad:f2:57:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Oct 22 12:01:08 2026 GMT
Not After : Oct 23 12:01:08 2026 GMT
Subject: CN=5be21070ff41399a25045608bda4eb35c7a0fbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:96:e3:36:07:d7:2f:bc:5d:ac:b1:ef:9a:
46:d9:18:b6:83:19:90:dc:d8:22:33:a0:62:e1:dd:
a2:75:ca:aa:df:5e:54:fb:21:b9:ac:a7:40:06:2a:
54:de:7d:84:4e:05:83:3a:b3:51:89:f3:7a:75:21:
a4:2a:16:c2:fc:a1:3d:7b:ef:97:65:ed:90:75:ba:
00:17:1e:ef:2c:9a:2a:92:68:4c:16:18:2d:db:79:
d5:c8:c3:c8:90:ea:34:38:7c:be:20:e4:8f:fc:bc:
bf:4b:fb:d8:f0:28:6b:0b:63:cd:6e:7b:8f:28:f8:
ee:be:ad:1b:0e:d7:a0:45:29:00:8c:ef:13:26:8f:
66:81:32:dd:72:0f:67:fb:e9:f6:a5:c7:ef:60:be:
68:7e:c6:c9:22:8c:02:7e:9c:d4:d4:4c:5f:71:ee:
94:71:0e:66:3a:eb:e7:d5:4b:ae:5e:6e:0a:45:ff:
7e:7f:a4:05:b4:94:47:31:54:61:aa:bf:c6:67:a2:
28:64:b9:53:fe:ce:50:4f:40:09:d3:6f:ff:95:d3:
06:e9:72:89:41:34:bd:ef:ef:31:e8:7a:14:9b:59:
c0:28:f8:e8:01:43:3d:2d:e2:5b:92:99:4b:35:ed:
17:57:49:2a:a4:53:27:20:65:2c:b9:f9:91:40:8b:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E2:10:70:FF:41:39:9A:25:04:56:08:BD:A4:EB:35:C7:A0:FB:FD
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1d:65:c3:c4:b8:1e:2b:87:f4:61:bf:1f:c0:ec:b4:20:e2:
5e:46:b1:f3:2d:e8:e0:92:33:13:d9:78:84:eb:10:45:31:3b:
03:69:46:60:59:97:86:83:f4:6f:e7:30:8e:48:65:c9:a8:d8:
11:8a:08:1c:f0:1e:98:68:9c:c6:ce:79:cb:3a:08:82:28:5a:
7f:9e:cb:7f:a2:5a:c6:36:7a:14:26:53:3c:54:a5:05:c8:16:
01:ed:51:e7:af:e5:10:6d:f4:a1:6c:c1:6f:ca:e9:aa:1d:a8:
9d:c8:5b:6a:ac:11:57:ee:13:7e:18:53:83:36:a3:61:ff:b4:
1d:08:d7:f1:f1:9e:d0:b3:97:0c:bc:65:8c:22:86:b0:29:30:
36:ef:06:1a:33:ec:5d:3a:ce:24:4d:00:f4:dd:94:3a:b5:7e:
5e:2a:c6:2f:5b:5b:91:95:73:59:42:89:1f:a2:8e:9d:7d:01:
3b:12:84:a6:66:36:45:cf:3d:2f:ef:55:df:17:c0:06:83:cc:
37:b6:9c:22:59:c8:7e:ec:d7:47:b0:31:e4:ca:b2:74:fb:e6:
0e:d8:06:18:2b:c2:9b:b2:ef:3e:6e:8c:05:ca:de:3b:61:7a:
b7:b0:50:cc:b6:ef:10:39:98:32:18:2c:ac:50:34:02:3c:ec:
db:63:5c:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFjfIv4j8t1Ivwn3fat8lcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNjljOTJiYzA5YmY2YjhkYTY1MzNkZDdhN2IwYjFhNTdl
NjVlYTQwHhcNMjYxMDIyMTIwMTA4WhcNMjYxMDIzMTIwMTA4WjAzMTEwLwYDVQQD
Eyg1YmUyMTA3MGZmNDEzOTlhMjUwNDU2MDhiZGE0ZWIzNWM3YTBmYmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfmW4zYH1y+8Xayx75pG2Ri2gxmQ
3NgiM6Bi4d2idcqq315U+yG5rKdABipU3n2ETgWDOrNRifN6dSGkKhbC/KE9e++X
Ze2QdboAFx7vLJoqkmhMFhgt23nVyMPIkOo0OHy+IOSP/Ly/S/vY8ChrC2PNbnuP
KPjuvq0bDtegRSkAjO8TJo9mgTLdcg9n++n2pcfvYL5ofsbJIowCfpzU1Exfce6U
cQ5mOuvn1UuuXm4KRf9+f6QFtJRHMVRhqr/GZ6IoZLlT/s5QT0AJ02//ldMG6XKJ
QTS97+8x6HoUm1nAKPjoAUM9LeJbkplLNe0XV0kqpFMnIGUsufmRQIvOPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFviEHD/QTmaJQRWCL2k6zXHoPv9MB8GA1UdIwQY
MBaAFCtpySvAm/a42mUz3Xp7CxpX5l6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJuSks4Q2I5cmphWlRQZGVuc0xHbGZtWHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81YjNmZmUtOWY5ZC00MTg5LWE4Y2Et
MDg0YWFiYTBmNTg4LzEvSzJuSks4Q2I5cmphWlRQZGVuc0xHbGZtWHFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81YjNmZmUtOWY5ZC00MTg5LWE4Y2EtMDg0YWFiYTBmNTg4
LzEvSzJuSks4Q2I5cmphWlRQZGVuc0xHbGZtWHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiR1lw8S4
HiuH9GG/H8DstCDiXkax8y3o4JIzE9l4hOsQRTE7A2lGYFmXhoP0b+cwjkhlyajY
EYoIHPAemGicxs55yzoIgihaf57Lf6JaxjZ6FCZTPFSlBcgWAe1R56/lEG30oWzB
b8rpqh2onchbaqwRV+4TfhhTgzajYf+0HQjX8fGe0LOXDLxljCKGsCkwNu8GGjPs
XTrOJE0A9N2UOrV+XirGL1tbkZVzWUKJH6KOnX0BOxKEpmY2Rc89L+9V3xfABoPM
N7acIlnIfuzXR7Ax5MqydPvmDtgGGCvCm7LvPm6MBcreO2F6t7BQzLbvEDmYMhgs
rFA0Ajzs22NcYQ==
-----END CERTIFICATE-----
Generated at Thu Oct 22 18:28:04 2026 by rpki-client