Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
File: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json)
Hash identifier: AKQxCj3duBhnyT4AOAJCtEesg8ZeSL+5GdrkD8ad3os=
Subject key identifier: 0C:2C:29:C8:46:6F:8C:02:5E:F6:A3:C9:F8:F5:9E:93:D6:0B:30:74
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Certificate issuer: /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial: 01A1735CDE46C380C09B5FF2498A37A7EEC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
Manifest number: 129F
Signing time: Sun 25 Oct 2026 14:00:28 +0000
Manifest this update: Sun 25 Oct 2026 14:00:28 +0000
Manifest next update: Mon 26 Oct 2026 14:00:28 +0000
Files and hashes: 1: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: hB4ImetqfU2hmzNnAYOvPmisUlmjtigM189unskQqD8=)
2: dbilkSZsjUibJ1NutZ76qJvy820.roa (hash: /oJpuqHaWi4ouiqRZTNCC/b0oRgbkGtlYtRLMPSUMXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:5c:de:46:c3:80:c0:9b:5f:f2:49:8a:37:a7:ee:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Validity
Not Before: Oct 25 14:00:28 2026 GMT
Not After : Oct 26 14:00:28 2026 GMT
Subject: CN=0c2c29c8466f8c025ef6a3c9f8f59e93d60b3074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:fa:9d:06:0d:49:8e:d2:e8:b7:a7:d7:4f:
d7:0e:ae:e8:d7:84:a1:63:5c:d3:70:90:b9:70:d9:
4f:1a:db:14:ff:47:c0:25:34:a9:10:0c:b8:98:52:
4e:6e:57:4c:47:9e:d3:62:14:39:28:46:4d:51:85:
d4:b7:45:a4:0c:5f:38:46:40:56:18:8d:c6:72:e9:
20:61:4d:95:93:14:85:71:de:0d:75:e9:fa:2f:63:
6b:14:2c:ea:17:38:19:11:90:4f:b2:f9:52:80:d1:
ff:bb:71:34:04:1e:61:55:5c:4b:d2:c8:9c:95:1a:
73:70:d7:5b:ef:a3:53:17:98:62:fc:fd:64:52:01:
c6:3d:74:e1:68:da:80:b6:b0:16:ca:f7:6a:67:79:
9a:ed:7a:54:9d:2a:f0:4e:d1:7c:d2:75:7c:22:4e:
b3:7a:20:3a:9a:1d:14:2e:21:d7:3e:45:4c:b1:58:
d3:d8:32:fd:8f:78:3e:1b:0c:55:ab:33:d2:39:a2:
82:5a:bd:f9:9e:ec:51:ed:a3:1b:dd:1a:d0:b4:77:
14:36:84:f1:df:74:b6:a1:10:8a:5b:32:88:6c:2d:
fa:ac:01:a1:48:f6:77:3f:81:f5:67:a4:40:5e:ad:
30:62:b5:20:4e:17:6f:ac:c1:ec:bc:fc:38:51:41:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2C:29:C8:46:6F:8C:02:5E:F6:A3:C9:F8:F5:9E:93:D6:0B:30:74
X509v3 Authority Key Identifier:
keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:74:ff:6e:1f:1c:ea:d9:63:6c:81:35:c9:3e:98:7c:d0:27:
56:9e:a7:97:2f:aa:8c:c5:0d:65:38:d9:0a:21:90:e0:0d:c1:
9b:8b:7b:9a:be:42:b1:5b:a7:28:da:4b:27:fe:8f:f3:20:d7:
23:b6:8a:b2:7e:c0:7c:f8:c9:db:77:2b:52:a9:f6:38:df:c7:
6b:ef:bb:de:ee:6c:0d:0d:f9:be:3d:02:75:a4:e0:9e:34:09:
5a:75:0f:c0:0c:54:a3:ef:c0:fc:5d:a7:26:d8:a5:c1:f1:19:
5f:7f:2a:d0:cb:e8:0c:a3:b2:90:b7:2e:55:47:24:9b:4f:aa:
10:17:7f:f6:47:d0:5d:20:f1:cc:d2:ab:da:a4:e0:d5:a0:1a:
35:65:67:44:33:9c:ca:d4:bb:96:9f:b4:45:31:91:e3:86:aa:
96:a3:31:05:3e:d6:89:e7:97:5f:a1:b9:90:2f:00:ec:7c:09:
5f:0c:ed:5f:ed:50:8e:df:5a:d3:e0:a2:e5:8b:34:b2:3d:f5:
75:83:71:ba:b2:04:50:7b:43:b9:8d:50:68:a2:6d:ab:0d:34:
0f:95:8d:5f:09:12:df:2c:6a:51:30:df:68:14:71:6d:6d:ae:
7b:3f:1c:a3:69:68:a6:86:89:31:06:90:cc:6c:29:8b:b8:25:
6d:65:04:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFzXN5Gw4DAm1/ySYo3p+7GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmFkOTBiNjM2NDJiOGZhZGM5MDA3YWEzNTUyMzllZGZh
ZjM1NGUwHhcNMjYxMDI1MTQwMDI4WhcNMjYxMDI2MTQwMDI4WjAzMTEwLwYDVQQD
EygwYzJjMjljODQ2NmY4YzAyNWVmNmEzYzlmOGY1OWU5M2Q2MGIzMDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0b6nQYNSY7S6Len10/XDq7o14Sh
Y1zTcJC5cNlPGtsU/0fAJTSpEAy4mFJObldMR57TYhQ5KEZNUYXUt0WkDF84RkBW
GI3GcukgYU2VkxSFcd4Nden6L2NrFCzqFzgZEZBPsvlSgNH/u3E0BB5hVVxL0sic
lRpzcNdb76NTF5hi/P1kUgHGPXThaNqAtrAWyvdqZ3ma7XpUnSrwTtF80nV8Ik6z
eiA6mh0ULiHXPkVMsVjT2DL9j3g+GwxVqzPSOaKCWr35nuxR7aMb3RrQtHcUNoTx
33S2oRCKWzKIbC36rAGhSPZ3P4H1Z6RAXq0wYrUgThdvrMHsvPw4UUGeiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwsKchGb4wCXvajyfj1npPWCzB0MB8GA1UdIwQY
MBaAFCtq2QtjZCuPrckAeqNVI57frzVOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJyWkMyTmtLNC10eVFCNm8xVWpudC12TlU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNmRiMDctZjU0YS00NDFmLTk2NDkt
YmM5YjQxM2I4ZWVkLzEvSzJyWkMyTmtLNC10eVFCNm8xVWpudC12TlU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hNmRiMDctZjU0YS00NDFmLTk2NDktYmM5YjQxM2I4ZWVk
LzEvSzJyWkMyTmtLNC10eVFCNm8xVWpudC12TlU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnT/bh8c
6tljbIE1yT6YfNAnVp6nly+qjMUNZTjZCiGQ4A3Bm4t7mr5CsVunKNpLJ/6P8yDX
I7aKsn7AfPjJ23crUqn2ON/Ha++73u5sDQ35vj0CdaTgnjQJWnUPwAxUo+/A/F2n
JtilwfEZX38q0MvoDKOykLcuVUckm0+qEBd/9kfQXSDxzNKr2qTg1aAaNWVnRDOc
ytS7lp+0RTGR44aqlqMxBT7WieeXX6G5kC8A7HwJXwztX+1Qjt9a0+Ci5Ys0sj31
dYNxurIEUHtDuY1QaKJtqw00D5WNXwkS3yxqUTDfaBRxbW2uez8co2lopoaJMQaQ
zGwpi7glbWUEIw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 01:50:41 2026 by rpki-client