Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File: K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier: VRpVqDHNKKf64AkyiVTCwK8WyBXZANftxZVQ+NUngHM=
Subject key identifier: 4C:99:4F:82:39:31:60:58:29:5F:DF:E5:F0:08:47:0C:03:DE:5F:79
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer: /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial: 019FA260F761EA247541BF6CCB13DFBA78CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number: 119D
Signing time: Mon 27 Jul 2026 07:01:31 +0000
Manifest this update: Mon 27 Jul 2026 07:01:31 +0000
Manifest next update: Tue 28 Jul 2026 07:01:31 +0000
Files and hashes: 1: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: uZE9tkfGXsdB9F6UEHI+ssfwoBR31MxTty78bIYgUHE=)
2: tpy9FJHevA7odk2TH7YsmtN7UFs.roa (hash: HA5XrfWMN5EyPeGIHUHIkCKTU3wDBfCSNcRoSlAlDv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:f7:61:ea:24:75:41:bf:6c:cb:13:df:ba:78:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Validity
Not Before: Jul 27 07:01:31 2026 GMT
Not After : Jul 28 07:01:31 2026 GMT
Subject: CN=4c994f8239316058295fdfe5f008470c03de5f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:79:26:a3:f6:a0:d6:5c:27:40:94:9a:9a:41:
73:f2:94:b3:eb:66:fd:96:b3:da:d1:8f:21:b9:d0:
0e:e5:e0:5b:b3:22:81:86:b8:4b:71:4c:be:8e:1a:
fc:c2:b1:c0:20:70:e3:60:43:00:b4:53:40:9c:ef:
41:34:ef:42:dd:c0:ad:4f:46:9c:a6:09:6e:49:ce:
3a:6c:5c:9d:46:c1:3d:6b:73:74:a5:06:dc:ee:86:
b6:5c:f5:d4:af:02:f9:b4:2a:d0:07:58:a6:15:a6:
2d:6b:84:cf:83:3f:fd:0f:16:f5:e3:e5:52:9b:4e:
07:74:91:ee:3b:c7:97:35:a0:84:94:8c:e3:3d:58:
d0:9e:07:84:70:cf:8a:ee:3a:9b:92:6b:b4:36:fb:
9f:fb:fa:2b:4d:26:91:33:ca:1f:9c:7e:cd:9e:b4:
93:e0:0d:ea:1a:79:f4:1a:b2:a9:60:59:c9:06:b8:
2d:d4:ac:bd:d7:19:24:c2:79:60:f5:b4:ff:8a:30:
c8:89:c7:01:67:ea:08:15:34:0a:94:35:99:e0:f6:
f6:b9:b4:7b:e0:4c:06:fb:b2:85:ac:14:f0:92:e2:
fa:ea:a6:01:eb:11:85:86:f3:84:9a:2f:22:02:1e:
6f:d0:5d:57:88:f9:c6:a7:70:71:29:83:05:4d:90:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:99:4F:82:39:31:60:58:29:5F:DF:E5:F0:08:47:0C:03:DE:5F:79
X509v3 Authority Key Identifier:
keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ff:34:60:95:0d:be:11:17:99:6d:c7:0c:61:0a:00:c3:fe:
fd:5b:a0:d0:be:ff:cb:5d:24:04:34:bd:ea:89:8d:66:a1:09:
d7:33:cd:e5:cc:0e:86:31:3c:50:cd:b3:50:dd:e0:5e:6f:4a:
19:da:0d:74:af:4b:d8:11:72:e6:45:29:57:a1:bc:09:c2:b4:
e3:8b:55:80:d8:30:b8:a3:6d:c0:f8:01:56:74:41:1d:45:ec:
55:cd:ca:75:55:22:5b:d4:1d:5d:73:04:1c:dc:cd:66:ee:9b:
f3:a2:a1:c3:57:44:3c:f8:15:4d:aa:60:c5:0c:c6:bd:f1:66:
85:95:53:ec:ac:31:2f:da:e3:a6:60:67:8f:7c:f1:fd:c6:80:
05:b6:ef:e9:6b:ba:fb:e6:62:1f:df:06:72:ac:26:4f:7c:92:
2a:26:0f:e8:78:b8:71:7d:a6:67:06:e2:50:52:ad:eb:dc:b7:
28:6f:0d:ad:15:1c:da:81:40:50:6c:2d:1b:f1:3f:3b:e2:72:
20:3b:4a:87:d0:7f:2f:55:f8:4d:6e:3b:d0:ea:22:9a:9c:c9:
78:47:26:68:c6:43:0a:a3:f3:fd:44:6b:c5:68:2d:55:44:bb:
2d:c3:94:4d:27:01:5e:bb:f3:44:b7:1a:bc:d1:f6:06:4b:56:
8d:2d:20:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:47:12 2026 by rpki-client