Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
File: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json)
Hash identifier: /jD9Xvj52MR58NyiI/4ByjhlFFt+QIUJkzV3f/uAlx8=
Subject key identifier: E6:A7:E4:04:98:22:3C:A6:B4:1D:03:12:61:E3:2F:36:0C:F5:5C:8C
Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
Certificate issuer: /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Certificate serial: 019D97738D5AF6201537C9F052808D588C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
Manifest number: 08F8
Signing time: Thu 16 Apr 2026 18:00:25 +0000
Manifest this update: Thu 16 Apr 2026 18:00:25 +0000
Manifest next update: Fri 17 Apr 2026 18:00:25 +0000
Files and hashes: 1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: QD9tKjdjmMJWlgzz2AvEdPakHpwantv4AHQtoyd6gYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:8d:5a:f6:20:15:37:c9:f0:52:80:8d:58:8c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Validity
Not Before: Apr 16 18:00:25 2026 GMT
Not After : Apr 17 18:00:25 2026 GMT
Subject: CN=e6a7e40498223ca6b41d031261e32f360cf55c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:67:da:ec:ab:62:45:18:f9:7a:0e:33:39:
8d:5d:dd:b7:60:0b:cb:af:d3:c1:3c:c2:c1:b4:dc:
c2:23:ae:cb:94:dc:1c:87:25:b5:a8:e5:11:35:1f:
d7:ba:16:5c:c4:ab:24:99:79:7b:b6:c7:1d:0e:67:
f6:d3:2f:d7:11:6f:fd:cf:1c:7e:44:0f:c7:08:00:
07:9b:a6:2c:f6:c6:ec:d3:8f:d3:dc:ad:a4:25:09:
fc:71:e3:66:07:2b:6f:92:56:36:80:4d:f3:a6:14:
71:51:80:79:62:cb:70:99:14:67:92:dc:b2:de:aa:
05:46:15:af:90:38:e7:d4:cc:aa:74:64:5f:9b:97:
90:5f:2b:dc:d9:5d:b2:04:b3:ab:66:3c:0f:86:eb:
ec:56:57:76:a6:d9:21:54:bb:0f:06:01:49:ab:6d:
21:2c:15:c0:16:46:94:19:8b:36:62:8f:cd:3d:b1:
71:9e:3d:f4:32:d4:50:22:8a:63:81:cc:d0:b9:a9:
1b:7b:91:e0:25:53:38:b6:8f:3a:21:2d:45:e4:c0:
ac:d4:dc:fd:8b:02:16:35:87:5a:9f:b2:87:be:60:
93:69:1d:39:95:40:47:97:9e:5f:c0:60:d8:0c:04:
d1:15:a4:f9:b3:29:31:8c:a5:34:15:25:3f:31:f9:
cf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A7:E4:04:98:22:3C:A6:B4:1D:03:12:61:E3:2F:36:0C:F5:5C:8C
X509v3 Authority Key Identifier:
keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:ed:47:d3:b1:78:e3:19:d0:ab:fd:25:14:00:d9:ae:28:51:
90:8e:f9:55:df:76:6f:af:56:23:fd:64:e7:48:39:01:96:1d:
e2:e4:6f:a0:04:f3:66:dd:52:6a:61:8f:0e:a0:1d:f8:e1:16:
42:fc:13:05:15:21:16:b8:25:32:5d:2c:1c:96:39:8f:6a:5d:
b3:53:b1:6e:03:e2:9d:72:6c:b7:39:db:c2:e2:88:23:40:4f:
61:42:6f:e3:83:4e:df:16:cd:21:02:75:66:ef:92:bc:ea:89:
e1:8c:34:8b:7e:6d:8b:14:3b:a1:38:3b:22:8f:3f:94:ae:b7:
ee:c0:a2:c9:45:57:b4:73:b4:2c:4e:3d:f0:21:5d:d2:a8:f5:
8b:4d:6b:b7:b0:2c:35:86:a3:af:aa:81:fc:f1:09:91:c0:04:
79:b7:ee:6a:22:7a:a3:17:04:87:b2:80:f7:ab:85:0b:73:56:
9c:19:ef:7f:ff:81:30:e4:a8:21:57:9a:54:4e:a1:3f:5a:c5:
8f:8f:45:fd:91:a7:77:cf:f5:4b:26:ad:64:73:25:13:98:fb:
60:3c:d3:e6:5a:8c:74:1c:28:11:e5:31:e9:06:ad:b8:f6:30:
44:e2:ae:e3:1d:0c:ce:5f:04:30:54:df:03:d9:1c:7c:50:62:
79:ee:92:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:39:19 2026 by rpki-client