Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File: K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier: wW7lAfQVulcK6bsr6a6MpyrbZ+QVn3SdloWEP622F2k=
Subject key identifier: B9:1F:9B:29:25:28:B0:D9:08:75:10:4F:F2:74:0F:BB:AD:60:F7:1F
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer: /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial: 01A1833E6038C3E33EDE66B75DAC50667EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number: 1296
Signing time: Wed 28 Oct 2026 16:01:05 +0000
Manifest this update: Wed 28 Oct 2026 16:01:05 +0000
Manifest next update: Thu 29 Oct 2026 16:01:05 +0000
Files and hashes: 1: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: G8H3oNYQJRRf4L6DHoV+FmiXz6fM8dCl71Xygpl2Krs=)
2: tpy9FJHevA7odk2TH7YsmtN7UFs.roa (hash: HA5XrfWMN5EyPeGIHUHIkCKTU3wDBfCSNcRoSlAlDv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:60:38:c3:e3:3e:de:66:b7:5d:ac:50:66:7e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Validity
Not Before: Oct 28 16:01:05 2026 GMT
Not After : Oct 29 16:01:05 2026 GMT
Subject: CN=b91f9b292528b0d90875104ff2740fbbad60f71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:39:b8:68:d4:08:87:95:93:9f:e8:22:2c:
75:f7:0b:54:8e:78:62:fd:9d:60:a4:92:0c:4f:17:
2c:69:a2:e4:fe:8d:8a:bf:a4:1f:55:24:20:27:bd:
65:99:cd:e8:79:52:10:45:69:8f:4e:a2:2f:4a:7f:
56:57:55:53:75:26:5e:72:b9:c4:b5:db:39:1e:74:
a0:d1:92:24:66:8a:6a:b3:08:21:0d:35:6b:fa:eb:
7e:10:32:52:c1:4d:3f:ec:f9:da:c1:8f:2e:7a:a3:
b6:f9:0b:bd:43:c7:01:8f:b5:da:dc:68:db:47:cf:
f5:39:e5:45:64:a4:05:31:d5:24:dd:94:25:e9:f2:
90:40:4e:0d:4f:3d:70:d3:41:59:ff:9c:39:db:fa:
51:e5:32:bf:1c:97:91:6c:a4:4b:a1:02:3d:ab:f4:
99:dc:ba:3b:09:19:bb:46:3a:4a:1c:c6:ba:74:30:
26:79:4c:c7:ef:55:30:30:46:22:13:af:b4:3c:6f:
82:8c:71:db:aa:ae:d3:3a:9b:89:57:03:6e:30:ec:
08:3d:de:19:54:fa:f3:06:26:95:74:ab:6d:b1:c9:
c7:0c:f2:e4:85:41:3c:cc:fe:2e:9c:9d:0e:47:cc:
7a:82:c6:aa:8d:c6:67:08:43:86:75:c8:38:af:a6:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1F:9B:29:25:28:B0:D9:08:75:10:4F:F2:74:0F:BB:AD:60:F7:1F
X509v3 Authority Key Identifier:
keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7d:b0:89:96:14:20:18:8f:80:7e:92:78:17:11:19:5a:40:
fc:7d:fa:cb:2d:f1:c3:45:30:6e:b0:c5:cc:a5:8c:83:b2:19:
85:39:9c:15:36:95:2e:ea:da:5e:4b:be:df:e8:ab:19:c9:4d:
ab:d4:4e:29:2f:7e:ca:c4:46:f1:d0:9d:60:33:85:10:5c:7f:
53:33:64:50:b5:68:e8:ab:59:46:13:bd:33:67:3c:62:80:48:
1e:91:e3:a5:9a:27:c3:92:e2:b4:10:b4:3a:55:90:9e:e8:17:
3f:c6:18:bd:06:5b:63:71:8d:95:c3:8a:ec:da:b1:a4:15:74:
bf:2b:75:65:9a:98:7b:90:44:d7:2b:f1:80:02:33:e0:75:2c:
ef:c7:c7:65:1f:33:0b:a8:aa:f5:49:25:4e:96:8a:af:9a:90:
b8:24:0c:ce:41:be:b7:11:3e:e5:af:be:d8:09:e7:31:ee:35:
66:d4:06:a2:7a:bf:c8:b7:bb:68:4e:e0:f2:00:04:46:58:79:
c0:41:9b:f0:f6:f9:27:94:20:a3:a0:df:63:9f:08:d6:ff:09:
44:5c:44:d1:4e:be:2d:ef:8c:98:fd:66:be:9c:e9:29:f0:62:
9e:4d:f3:2a:13:da:71:b0:5e:97:d0:35:26:8b:24:db:03:22:
50:86:78:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:47:53 2026 by rpki-client