Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier: t/iHiu4xXacUP9BOeLMt424LPskpiP5vxx/aJn10Myc=
Subject key identifier: 38:4C:17:91:0A:62:35:2A:93:4D:0D:9B:14:81:33:AD:CE:87:81:BA
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 01A00213C00A001C251B01B3A18D460D2570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 21:00:43 +0000
Manifest this update: Fri 14 Aug 2026 21:00:43 +0000
Manifest next update: Sat 15 Aug 2026 21:00:43 +0000
Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: k5XjAHbeZwzaiQ8IDTKlsF3GcEk7XZz+biwVR1Zjl8s=)
2: zc1RxQ-wCAjo2YyTdgBOf576bf0.roa (hash: vkvB5T6NKTKK2PGToAyqMv7sLiy7bF7pWaJUrDMf/r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:c0:0a:00:1c:25:1b:01:b3:a1:8d:46:0d:25:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Aug 14 21:00:43 2026 GMT
Not After : Aug 15 21:00:43 2026 GMT
Subject: CN=384c17910a62352a934d0d9b148133adce8781ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:02:74:96:20:45:51:02:f6:68:7c:78:cd:
dd:34:30:67:65:fe:3f:9a:ae:aa:56:ba:fa:25:62:
7a:bf:f2:18:77:fd:1c:6f:3b:13:a4:6d:b0:f3:93:
11:56:bb:e1:56:20:e5:11:63:b2:76:3a:d5:98:65:
18:29:c8:ea:a9:26:c4:9f:76:2c:d8:40:e7:1a:ed:
65:cd:61:5e:dc:02:16:93:14:ee:a3:b4:8d:40:12:
fc:6d:a5:f1:09:3d:30:15:c4:95:57:28:d8:91:42:
0c:ff:79:dd:c8:be:1d:46:e0:2e:87:85:02:15:65:
01:2f:3e:5b:8c:13:fe:4b:89:fb:64:b5:37:25:c5:
c4:5c:ae:c6:ff:b1:5e:a4:af:32:09:f8:dc:b2:94:
5b:ba:1f:f2:f5:07:14:eb:ef:8f:3f:48:cd:81:c6:
f3:94:a7:56:b7:71:c4:7a:26:23:a9:16:de:d6:cd:
ce:81:41:2d:f8:0e:42:c4:fe:a7:1f:80:8d:fe:e2:
5e:3d:bc:b7:45:c3:97:88:ec:3c:09:49:92:25:e2:
6e:56:58:d4:b8:c6:8a:13:75:89:ac:04:de:2c:e6:
87:6a:55:04:43:4e:6a:13:14:02:16:41:3b:ca:e7:
98:bc:47:85:aa:2a:ad:30:41:f8:15:0f:28:d8:06:
eb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4C:17:91:0A:62:35:2A:93:4D:0D:9B:14:81:33:AD:CE:87:81:BA
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:38:58:3d:da:88:7c:4b:29:23:16:05:c0:e2:0e:d8:13:7c:
1e:33:d8:53:6d:41:ba:27:d8:3e:7e:1a:96:4b:21:73:5a:4d:
bd:3b:52:74:b5:52:da:85:d5:01:bb:5c:bf:45:d7:e7:1b:71:
d3:67:a8:9f:af:bb:ba:13:9a:e7:2a:5a:4b:16:01:2a:2a:9e:
0a:32:d1:7b:53:4c:05:d5:25:ab:e2:63:13:2c:e4:72:be:26:
20:a9:d2:ba:1f:98:3c:27:49:21:33:29:13:9a:00:7a:80:50:
20:25:0b:1b:97:ab:4c:e2:c3:a0:86:42:38:97:a2:25:e5:91:
2e:96:9a:03:cc:38:54:25:9d:ae:28:b3:0a:4c:dd:94:da:e0:
f7:fe:8c:87:63:52:0a:87:28:ba:16:51:7d:03:32:75:41:5e:
b8:0b:43:15:83:3c:b9:38:7f:ac:35:6c:bc:11:1c:c3:2c:13:
b1:db:15:f3:db:90:45:af:d2:29:a2:b9:d4:88:b5:e6:d2:6f:
7f:01:e4:93:c4:fe:be:b4:bb:db:e7:a3:7d:45:df:1d:0d:49:
30:4b:10:a2:36:f0:55:a0:41:4b:5c:d9:5f:58:40:3e:b7:fa:
52:f3:a8:a7:f7:fc:26:3f:ff:62:c8:33:4f:d6:31:6d:65:09:
92:f9:0d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:39 2026 by rpki-client