Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
File: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json)
Hash identifier: /kA6k5ULOextMg5Qi7ct15xiZO3EVRtOfdONWrpWk5o=
Subject key identifier: 15:B8:D3:66:73:AD:F1:13:8B:8D:3C:DB:AB:BE:75:05:8D:01:F7:94
Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
Certificate issuer: /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Certificate serial: 019CABD9D83841AA371879933CC1CF2E6B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
Manifest number: 087E
Signing time: Mon 02 Mar 2026 00:01:46 +0000
Manifest this update: Mon 02 Mar 2026 00:01:46 +0000
Manifest next update: Tue 03 Mar 2026 00:01:46 +0000
Files and hashes: 1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: tkkYsnKyXcI//3j2g/337CA8BxfOhLhQlbPxV4W3HDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d8:38:41:aa:37:18:79:93:3c:c1:cf:2e:6b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Validity
Not Before: Mar 2 00:01:46 2026 GMT
Not After : Mar 3 00:01:46 2026 GMT
Subject: CN=15b8d36673adf1138b8d3cdbabbe75058d01f794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:59:f9:cd:97:15:19:c0:6c:b5:aa:69:28:
a6:ca:9b:08:42:97:67:ce:77:92:1f:48:b6:43:0c:
ce:66:bc:bc:62:d6:38:41:82:2b:f3:f4:4f:51:b6:
1b:c1:99:2e:b3:83:50:75:91:30:33:2f:86:67:d8:
72:fd:f0:91:ce:19:86:a7:6b:eb:0b:1d:24:6d:33:
7e:64:a0:58:36:db:32:6b:06:65:a9:cd:ab:ea:e9:
ba:6f:27:bd:76:42:b8:db:4b:88:14:ee:46:b1:ed:
6c:a9:df:86:1e:87:0b:12:65:12:0e:97:89:b9:3e:
c8:e0:f9:a0:1d:56:ab:bb:5e:1f:08:d4:e2:b2:50:
5f:b4:60:e0:a0:ce:72:b9:f3:a7:9f:97:9f:e9:74:
63:88:5d:86:47:c9:85:11:48:9f:f0:0a:d1:08:81:
75:25:fd:b0:27:a7:57:25:a7:5f:5e:2b:18:fe:ab:
ed:ed:e5:7a:ad:5a:4a:04:d9:c0:d7:33:ca:f1:97:
d7:75:36:7f:69:ab:05:3e:67:8a:c7:9f:3d:0c:20:
40:28:10:87:01:ee:a1:4f:f9:30:6a:3f:89:d2:e2:
6e:f1:d9:31:a5:61:64:d7:06:28:2d:65:5f:87:a2:
03:62:75:c0:d4:a9:61:00:52:bd:eb:63:3e:77:fb:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B8:D3:66:73:AD:F1:13:8B:8D:3C:DB:AB:BE:75:05:8D:01:F7:94
X509v3 Authority Key Identifier:
keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:26:9b:11:c6:c8:b3:9a:5b:ce:6b:dc:9f:4b:07:96:16:0c:
b7:7d:87:ff:db:d2:3b:e2:be:08:a3:f8:1a:be:29:ae:09:34:
ba:ed:73:7f:2c:f5:70:b7:38:b5:69:9c:9e:99:30:ab:a1:e6:
9a:7b:e9:39:3a:0c:e7:fc:5d:2d:3a:c6:7d:30:86:93:a8:a3:
0a:6d:53:e7:21:d5:2d:82:1d:1c:9c:bf:77:13:39:0d:b7:b8:
bd:66:6d:8b:8d:9b:67:ea:c0:36:a8:7a:16:d6:5d:ba:b0:a2:
fe:03:b7:3a:74:4e:c2:e9:83:01:a9:26:fa:64:a1:09:9a:17:
9e:20:24:70:ce:e9:f6:9a:70:33:ea:26:09:c7:32:e3:ab:65:
1f:5b:4f:14:9e:6d:c6:a8:00:d0:aa:9f:24:a1:79:37:e1:7c:
ea:48:71:a9:e4:5e:79:64:ae:7b:64:ab:e1:3f:2a:31:3a:cb:
e9:13:31:b3:b2:74:ed:26:f1:f7:a5:7b:16:ea:f1:f5:c3:81:
39:7d:3c:ac:f1:e7:f6:42:f9:89:48:d4:aa:e8:45:11:2a:e4:
7a:ca:8c:70:99:af:d8:ec:83:4e:75:e8:f1:79:3e:ec:e8:25:
7b:6c:4c:3c:b0:aa:11:96:df:8c:1c:a9:a5:d4:08:d4:59:e7:
38:74:4e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:44 2026 by rpki-client