Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
File: K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json)
Hash identifier: d4Bb5vCd43cwcFcrQuDe+ZYHoba+iO1otDG83tvg/mA=
Subject key identifier: 82:7F:A9:F7:4B:18:7A:61:B3:7E:9D:DF:03:49:2A:FB:56:77:1E:25
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Certificate issuer: /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial: 01A16DC8A9C46B7592BEA778CDC0B893F45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
Manifest number: 0892
Signing time: Sat 24 Oct 2026 12:00:29 +0000
Manifest this update: Sat 24 Oct 2026 12:00:29 +0000
Manifest next update: Sun 25 Oct 2026 12:00:29 +0000
Files and hashes: 1: Jr658jPud1G59P1IJrsCszw4gyU.roa (hash: 3CTowatmqrcEGXxJ4Y5uu28J0up58OPmzNLnfXaNssw=)
2: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: zNaOZNUoEKM7rCRdVOyAB+kv7+5uVyAT4lkVjT5sKf8=)
3: z8SvFmHjwdkD9rVqW5FJ7sxlfdI.roa (hash: rejHdYVWNM7RsiIxf7jbWM9eJvH26EoCBws9Y59Tnv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:c8:a9:c4:6b:75:92:be:a7:78:cd:c0:b8:93:f4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Validity
Not Before: Oct 24 12:00:29 2026 GMT
Not After : Oct 25 12:00:29 2026 GMT
Subject: CN=827fa9f74b187a61b37e9ddf03492afb56771e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ae:11:3d:ff:da:4f:82:96:f9:95:3d:56:7d:
9c:89:12:cc:d2:2a:24:e4:9d:01:66:2f:6e:30:7f:
60:08:07:9d:c1:23:2f:77:3e:55:09:c6:eb:f5:54:
45:15:1a:62:82:d3:99:c9:fb:49:8a:5a:4a:70:74:
7a:2d:95:c1:51:da:c4:bf:96:8c:d5:8b:dc:a2:ab:
f6:f9:dc:03:78:8a:0b:02:61:f4:e3:00:86:92:28:
0d:43:a0:b2:73:8f:4c:bf:a9:50:6d:60:72:51:fe:
26:bc:6f:20:d6:17:19:7b:d1:56:db:0c:7c:a2:69:
c4:bb:ee:86:c4:49:ce:c2:fa:36:51:9e:8d:ec:e9:
bb:a2:28:8f:54:b5:87:f2:3e:73:09:39:c0:d1:0f:
c6:44:f9:49:3f:2b:f6:4f:6d:23:86:14:e5:e3:d0:
2e:ac:31:71:2e:93:2e:a8:4d:eb:17:d0:3c:e2:76:
75:7c:d4:2e:fa:73:99:8b:ef:9f:1d:06:43:1b:c2:
df:70:bb:3a:01:ad:f1:3b:c7:9e:b0:5f:9c:11:91:
ae:aa:9f:84:62:f8:40:43:c2:5a:0f:d3:5b:11:e6:
2a:be:2b:ed:98:81:4f:d6:09:b6:98:f1:17:70:29:
ac:19:b9:3a:ae:20:df:7f:c3:ff:6f:b3:16:5f:21:
72:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7F:A9:F7:4B:18:7A:61:B3:7E:9D:DF:03:49:2A:FB:56:77:1E:25
X509v3 Authority Key Identifier:
keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:08:32:84:e1:f3:4c:9e:f5:8c:3d:2c:ba:f1:58:9b:e4:53:
f6:99:44:66:1e:50:e1:cd:ac:11:ad:fd:c8:69:66:14:b7:96:
7d:e7:20:2c:c7:bf:cf:7f:12:55:4c:a0:85:e9:ae:4c:41:f1:
ea:5e:24:ec:42:e7:a6:9f:48:43:c2:dc:7b:fd:45:18:2d:2d:
10:9a:b9:7c:af:d6:25:0c:cc:73:c0:18:85:e6:2c:67:cb:80:
90:70:8d:cd:19:ca:f3:1c:57:1c:e5:3f:20:97:8a:d6:63:68:
45:98:f4:dc:5b:07:61:a4:60:85:19:25:40:d8:9a:f1:90:a0:
3b:02:17:dd:13:0b:6a:0e:16:bd:be:c1:7d:f7:95:a9:6d:a8:
ff:c3:28:6a:6d:95:68:b3:32:48:b1:72:ad:62:a9:e2:e5:19:
05:8e:b4:10:0c:05:af:04:9f:be:e4:96:0d:2b:d1:8d:4b:37:
e7:a3:05:00:ba:b0:be:d3:2a:6a:78:14:a1:8a:5e:3f:42:11:
70:98:5c:92:7c:eb:01:c6:16:00:18:14:7e:31:f4:78:9d:6d:
cd:84:74:ae:98:b5:4e:de:00:ed:0e:cd:69:98:a4:a3:0a:41:
da:dc:de:48:08:18:c5:6a:5d:92:f9:5e:72:85:32:18:6f:d8:
fb:87:57:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:13 2026 by rpki-client