Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier: zKg5e6T/5fWTUFCEVg8D2YcOAIKajGsaBz03eQr2mX0=
Subject key identifier: 03:32:FA:FB:FD:CD:8C:F8:ED:D6:E4:77:F3:DA:DB:90:27:96:5C:37
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 01A16D23FE4BC47689FEB461714E504117E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number: 1ABE
Signing time: Sat 24 Oct 2026 09:00:37 +0000
Manifest this update: Sat 24 Oct 2026 09:00:37 +0000
Manifest next update: Sun 25 Oct 2026 09:00:37 +0000
Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: xBdI820hzPTS1Ct52HEnclHYS5hvq/TNtvZRM1hEVeg=)
2: zc1RxQ-wCAjo2YyTdgBOf576bf0.roa (hash: vkvB5T6NKTKK2PGToAyqMv7sLiy7bF7pWaJUrDMf/r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:23:fe:4b:c4:76:89:fe:b4:61:71:4e:50:41:17:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Oct 24 09:00:37 2026 GMT
Not After : Oct 25 09:00:37 2026 GMT
Subject: CN=0332fafbfdcd8cf8edd6e477f3dadb9027965c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:23:e4:ae:cc:bd:61:ef:41:5b:b9:f1:8c:
9a:ab:29:59:cc:91:1b:b5:38:99:8c:22:42:4b:1b:
8f:95:97:85:14:45:2a:68:1b:e8:a6:9a:92:4a:c8:
e8:63:f8:a1:fe:b6:b6:44:e6:1d:5c:71:80:ef:59:
ef:3e:2f:52:f7:58:b3:30:a5:9b:eb:0c:0f:4a:90:
3d:3b:60:56:ff:45:a7:f0:f5:aa:dd:9f:7a:7f:03:
6e:22:5f:dd:a1:9a:4d:6c:c0:c5:5d:c2:a9:52:20:
ca:9b:e7:60:a5:dd:1c:3d:94:98:f3:cd:26:a5:72:
26:bf:9b:2c:aa:19:bf:c3:4c:07:7e:0d:e1:90:49:
81:c7:5e:42:44:e9:d2:f8:71:89:13:b4:25:3c:b1:
af:b5:56:7c:ad:80:7d:d6:d8:d1:6f:0f:b5:3c:b3:
6f:d3:bf:c6:a2:af:11:a2:9a:07:29:27:07:3f:32:
0d:2d:a1:d3:ad:74:82:64:05:3f:36:c0:e9:5c:65:
0b:ec:2d:ca:63:98:7c:a3:29:3e:ce:eb:17:7b:d0:
b4:a3:c4:61:55:17:06:a2:df:91:4c:63:91:68:51:
92:a8:f7:07:f9:48:8e:14:e7:32:48:06:d7:78:dc:
8b:e2:e8:96:56:a8:16:2b:e9:e3:e9:0e:26:2c:2e:
71:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:32:FA:FB:FD:CD:8C:F8:ED:D6:E4:77:F3:DA:DB:90:27:96:5C:37
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a1:6a:0b:40:a2:23:20:f9:c1:78:62:9a:b2:b5:de:d4:74:
b3:3d:af:20:5a:90:78:d8:45:e6:d2:29:57:d0:08:bf:39:da:
01:40:85:36:8f:f0:d9:dd:e5:cf:27:1e:c0:12:c6:93:35:16:
7e:b0:28:e4:45:b9:db:3c:e0:a8:3a:f4:79:35:5f:7c:6b:f0:
49:fd:15:79:b1:96:5d:73:4f:b0:50:46:ff:4e:f7:58:6c:bc:
7e:70:35:92:a1:5e:12:26:43:0a:d3:ec:be:20:e5:3f:46:9c:
0f:1e:0a:0f:5e:7b:3d:f5:da:46:29:96:2f:42:09:0a:0c:53:
0c:75:68:5e:e3:c5:51:8e:8f:39:74:14:93:6a:54:db:5b:82:
14:02:23:a9:3b:8e:4a:12:8a:f5:a7:c7:b5:10:a6:50:49:8d:
45:d5:da:55:5e:db:3b:69:1b:45:71:2b:4c:6e:a0:7e:b1:79:
c9:28:fe:2c:6f:60:98:92:ae:c1:a5:c1:d2:d0:9e:1b:71:c4:
ef:7e:f6:0e:7c:f7:e9:46:e4:7a:ca:d1:1e:bc:39:bf:ae:a5:
e7:d4:ca:fc:92:f2:cd:27:25:62:1c:e3:58:da:94:3c:3a:9a:
b6:54:85:a6:90:c1:40:b3:c9:56:31:97:bf:3d:ee:f8:6c:ac:
e2:5b:32:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:21:18 2026 by rpki-client