Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File: K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier: Xdlc8j6stHDqTxj7xfhnF3c0mHPcfvDPnCSsB4uMTK8=
Subject key identifier: 3C:B6:06:C2:0B:04:56:C1:B0:96:AA:FA:4D:13:CA:36:12:33:CB:86
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial: 019CA9B380416BEA92E677F0B9FC05759772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number: 1841
Signing time: Sun 01 Mar 2026 14:00:39 +0000
Manifest this update: Sun 01 Mar 2026 14:00:39 +0000
Manifest next update: Mon 02 Mar 2026 14:00:39 +0000
Files and hashes: 1: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: 6Yq3qQ8uf5Xm/S8VNu1fFl1S6BBGPHOvFPYWaR9tZ8A=)
2: U4yJmT1ScaT40kywasOQ8O608yQ.roa (hash: 6wuB5jKMzhDthKEXBc2cgRcakDY0stwctJVIuMEfhMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:80:41:6b:ea:92:e6:77:f0:b9:fc:05:75:97:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Validity
Not Before: Mar 1 14:00:39 2026 GMT
Not After : Mar 2 14:00:39 2026 GMT
Subject: CN=3cb606c20b0456c1b096aafa4d13ca361233cb86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:71:cc:ea:e3:8b:7a:cd:38:11:de:78:24:86:
04:5f:9f:01:a2:e9:64:e9:cd:55:35:05:6c:9f:5f:
05:1e:3f:5f:8e:63:b8:79:33:db:b8:ee:09:60:21:
16:39:c8:d1:f3:d3:f0:97:06:06:ab:b7:52:09:64:
46:03:ce:3d:a9:17:c8:94:18:27:88:0d:d3:a5:2e:
94:52:b4:1f:3e:ef:a6:e6:5a:03:7e:8e:97:57:87:
38:fb:8e:95:fb:4b:df:cb:d1:5e:c8:88:60:8d:da:
90:cc:e0:fb:30:a7:f6:be:46:a9:ff:ed:7c:f3:18:
f8:84:01:b6:23:4d:96:a9:73:b2:8a:76:c0:c5:56:
f8:1a:2d:f9:6a:2e:cc:6f:85:96:82:b4:6f:ba:12:
a8:aa:c4:24:41:df:9c:fc:8b:2f:bb:eb:9c:d3:35:
18:30:a1:3f:00:f2:70:4e:c2:36:25:7e:24:35:ca:
23:84:b5:7f:28:97:d6:66:49:92:9c:f9:06:f8:30:
a1:3a:05:70:e8:7b:2f:f6:0d:03:02:1f:04:c1:00:
54:b8:2a:d8:43:07:65:bb:ff:54:98:b1:ac:ea:fd:
76:b7:b9:51:1e:ea:b9:c2:3e:a8:b5:45:6d:99:96:
73:56:bd:f6:b4:12:d5:08:82:67:a1:6f:d7:1a:d8:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B6:06:C2:0B:04:56:C1:B0:96:AA:FA:4D:13:CA:36:12:33:CB:86
X509v3 Authority Key Identifier:
keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:da:40:55:31:5c:5b:5a:c7:63:f9:d3:29:28:77:17:d3:44:
3d:b5:39:85:9f:e7:d1:09:b9:3d:48:aa:d8:78:34:67:7f:8d:
11:d2:14:d1:50:41:d7:5a:36:c5:46:16:7f:fd:88:54:0b:67:
02:76:03:d4:be:5b:fe:bd:26:f5:01:9e:26:c2:55:0b:ae:3d:
2b:fd:b3:19:0d:ea:83:08:13:96:a8:e0:b7:83:1a:37:9f:f3:
0a:45:ad:95:23:8d:fa:53:31:80:85:a0:f0:a2:d8:21:cf:90:
b7:c6:9d:1c:08:11:58:e1:13:da:38:a6:55:3e:f0:05:9f:0d:
ff:ba:41:6d:5c:18:99:6b:80:aa:2f:25:98:27:6e:d1:2a:bb:
f2:37:32:e0:9b:a4:93:11:9a:f8:7f:40:cc:5a:99:9d:7a:fc:
50:ac:6b:8c:81:e8:95:60:79:1d:fb:64:f6:46:cd:ec:87:92:
97:b4:b4:77:78:61:87:ff:80:c1:7c:7e:e1:bd:7b:84:bd:03:
b6:fa:4a:8b:d2:60:4f:98:10:a1:4c:e2:85:6e:31:39:ce:55:
df:f5:6a:4c:57:26:ab:92:3d:0b:4e:86:87:33:88:27:2a:b4:
0e:97:8d:71:26:35:ec:11:13:b4:4f:4a:b1:42:84:a4:7c:cf:
c3:aa:3d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:43 2026 by rpki-client