Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier: uiPIHO8D+IIAyFHSKPldfjPqd73FF7pdkPrMXxlVgnk=
Subject key identifier: BA:62:9B:D2:15:0D:64:98:F3:0D:05:91:D6:3D:0A:44:AA:1A:3F:07
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 019D3977F16AEC041C7597B8AAC4A65C03A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 12:00:55 +0000
Manifest this update: Sun 29 Mar 2026 12:00:55 +0000
Manifest next update: Mon 30 Mar 2026 12:00:55 +0000
Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: HTsHPcmGs4Um1DTV27CCMAV/pZ2fKZuhaNAWWkhanZQ=)
2: zc1RxQ-wCAjo2YyTdgBOf576bf0.roa (hash: vkvB5T6NKTKK2PGToAyqMv7sLiy7bF7pWaJUrDMf/r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f1:6a:ec:04:1c:75:97:b8:aa:c4:a6:5c:03:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Mar 29 12:00:55 2026 GMT
Not After : Mar 30 12:00:55 2026 GMT
Subject: CN=ba629bd2150d6498f30d0591d63d0a44aa1a3f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a8:ed:f1:ff:fe:c7:67:1c:24:ae:d1:fc:8a:
12:73:32:a0:59:2d:5f:17:a2:18:72:34:bc:c5:72:
0c:a7:41:7a:7f:88:a8:0d:ab:52:9e:41:d8:98:ef:
bf:38:1d:5a:00:ae:af:63:e9:68:50:08:85:6b:f3:
8b:22:28:46:26:eb:14:2f:a7:4e:db:00:3d:44:69:
23:c8:2a:ac:3f:1f:27:33:f1:b6:60:42:42:c2:a8:
09:cf:a0:44:6b:0d:c3:da:3b:85:f9:34:1d:1e:1d:
ce:78:c4:6a:8e:00:16:44:b7:c7:bf:32:32:a7:34:
8a:2c:bc:65:9a:b9:a9:ea:b5:90:89:d4:05:93:85:
d1:3e:a9:a4:c9:ec:cf:fd:e4:6e:93:ec:f8:ce:e9:
74:51:a4:71:fb:27:8b:a8:46:c4:a3:ad:6e:a2:b0:
a6:1b:81:13:e6:75:27:de:90:c2:9a:1c:88:42:de:
85:18:7c:8e:8f:a2:5c:5c:19:73:5c:33:c4:38:67:
7c:b9:83:77:99:e7:cc:22:90:3f:c0:9c:e0:5a:98:
e1:fb:20:54:0b:0f:50:1d:9e:b4:ac:74:21:e8:ef:
22:6b:74:fb:4b:1f:23:3c:d2:f3:60:18:eb:cf:22:
2f:bc:ec:26:c8:60:d9:3e:5f:fc:b2:38:4c:fa:5b:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:62:9B:D2:15:0D:64:98:F3:0D:05:91:D6:3D:0A:44:AA:1A:3F:07
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:95:b4:f6:95:bb:8a:68:7e:15:57:c9:3f:68:dd:80:74:03:
8f:ea:3d:e4:c3:c9:ef:90:87:d0:a1:8c:aa:15:c2:9a:7a:81:
5a:f4:f9:44:e2:6c:58:1f:d6:3e:4e:90:b7:51:27:ea:71:5b:
3a:57:c9:7c:d3:cd:62:c4:e2:a1:b5:01:52:e8:b5:0c:1f:31:
e3:ee:7f:fe:93:29:03:69:e8:c7:a7:0d:eb:ba:d1:7e:d5:88:
74:3f:47:2a:3f:a9:f5:e9:3b:87:36:71:43:b3:64:51:c7:29:
b3:73:55:cf:80:2c:68:52:45:7d:b1:b4:4c:bd:96:b7:d6:e6:
fe:52:ec:0e:de:c3:d1:6c:c4:51:45:90:fc:92:21:e6:22:31:
33:48:db:f8:66:f2:8c:3c:dc:f4:ac:9a:51:0a:58:e3:5a:a0:
d7:84:38:57:18:e8:82:90:fc:48:a0:30:99:e5:e6:2f:fb:e6:
ca:67:6c:dc:75:dd:3b:d2:c3:8f:11:71:02:9a:7c:67:18:c8:
b0:66:1e:cd:dc:20:a2:5c:6b:46:33:4d:7c:e4:79:15:d2:02:
27:db:00:92:6c:b4:cc:78:e0:bb:74:a9:94:07:97:37:14:9b:
82:cd:48:21:a9:4f:8f:95:77:21:ca:87:da:fe:ec:e9:bd:24:
32:5f:8c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:23 2026 by rpki-client