Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File: K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier: Q9g6V91uFiac5leVnPGY6oME/VgcykXeUpSWWuaOiaA=
Subject key identifier: F8:8F:26:C7:35:81:25:C2:4D:D1:F8:50:E3:C3:47:90:4F:CE:AA:EF
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial: 019FAC75BE51BA8E305CAC6EFF9AAAB9815D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number: 19D3
Signing time: Wed 29 Jul 2026 06:00:25 +0000
Manifest this update: Wed 29 Jul 2026 06:00:25 +0000
Manifest next update: Thu 30 Jul 2026 06:00:25 +0000
Files and hashes: 1: E42ALr85hzHjr7r_9Z5V7NF6a-8.roa (hash: bMH2/YzfTbpse+/akM+4A9X/Bsc5TxJJDbOgKDKeGaQ=)
2: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: gZtGb8+pYmbmzHeSuVAq8UNZeXeClHiaklym+wMFhPQ=)
3: Or9-McsdINXpd2AfMY8CRkBHo-c.roa (hash: Hm0aM5yCfz8g6AbodNDmMSYxdlDqVNZ0I10ycbk2bPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:be:51:ba:8e:30:5c:ac:6e:ff:9a:aa:b9:81:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Validity
Not Before: Jul 29 06:00:25 2026 GMT
Not After : Jul 30 06:00:25 2026 GMT
Subject: CN=f88f26c7358125c24dd1f850e3c347904fceaaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:c0:59:4a:6d:4e:18:2f:b0:b4:6a:e3:16:
df:8a:64:1b:64:23:f2:d6:2e:76:a8:f3:a9:f1:61:
3d:4d:28:a5:1d:aa:6b:13:30:ec:a0:c5:8c:24:71:
da:ec:df:04:27:c8:c2:3b:27:31:1c:76:5c:5a:00:
33:1d:75:10:15:41:2a:9c:0e:bc:57:32:bc:79:9d:
05:e5:23:d3:4f:69:3b:22:6a:3a:d1:f9:20:9b:a6:
31:e2:cb:b9:cb:93:b0:54:3b:e9:22:18:95:69:7f:
11:0a:cb:79:fd:8b:dc:22:f1:aa:f5:c4:b3:8b:12:
41:52:2f:96:a0:96:00:d8:d8:e1:d1:5d:81:f1:f2:
33:d7:04:e9:7f:dc:d0:70:f6:a8:ad:74:4c:1d:63:
6a:eb:9e:48:cc:60:8e:51:4d:58:32:cb:f0:6e:63:
82:09:9f:26:d7:d9:8c:1b:43:9b:79:26:05:bd:c8:
2d:7e:bf:e5:08:d6:96:5b:d7:16:55:c2:a8:5b:94:
cc:6f:c3:db:10:30:3f:30:1e:2e:5c:6a:4d:ea:f7:
f1:86:c9:3f:ef:92:28:76:1c:65:ab:29:56:d7:15:
e9:d5:7c:ff:b2:4e:71:25:b0:44:6a:15:35:a5:11:
35:71:e6:69:8d:71:b4:37:c0:3b:9e:23:20:e5:36:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8F:26:C7:35:81:25:C2:4D:D1:F8:50:E3:C3:47:90:4F:CE:AA:EF
X509v3 Authority Key Identifier:
keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9a:18:c0:de:38:62:4c:8a:79:a4:33:24:33:66:20:53:fc:
a1:22:f9:c8:33:49:b1:d0:b3:dd:b8:50:46:ea:f9:89:38:8d:
33:46:36:0e:79:c2:48:e0:3b:22:f2:64:36:49:ce:fd:3e:26:
11:01:dc:71:7b:1d:16:45:52:b2:b5:c8:55:79:2b:40:c9:ff:
08:c0:b4:c7:53:28:d2:3a:e1:c1:f0:2b:1d:bd:35:58:d1:0f:
46:f0:2d:05:3c:d8:0b:6d:e6:5e:05:a2:63:94:72:f7:d1:2d:
48:52:06:be:3e:c7:43:70:66:82:b3:cb:1d:85:5a:7a:bd:a7:
87:bf:4c:e0:91:f5:cd:70:fe:4f:ff:bb:69:bb:9f:7a:59:39:
f9:20:16:e3:e4:44:54:4f:d6:af:df:c0:37:a5:59:ea:e8:3c:
f6:c9:f2:12:58:cc:c5:b9:0a:63:a1:74:f2:88:cc:a6:ec:e5:
93:ce:c6:37:7c:84:40:bc:71:ba:ab:5f:81:f7:8a:a0:72:4d:
80:87:fb:1c:96:8b:38:2b:27:d9:50:1b:98:73:b1:56:e7:b0:
8f:a5:93:17:f3:d9:65:21:01:e0:11:5f:bf:1e:65:10:7d:9e:
24:11:d5:41:80:34:3c:a3:ca:dd:63:9d:e4:7b:38:c6:2c:5a:
f6:02:02:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdb5Ruo4wXKxu/5qquYFdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNDllODg0YTQ0MWYwNGI3ZjVlMmVkNDc0YjU4NDdlODMy
MTJiY2IwHhcNMjYwNzI5MDYwMDI1WhcNMjYwNzMwMDYwMDI1WjAzMTEwLwYDVQQD
EyhmODhmMjZjNzM1ODEyNWMyNGRkMWY4NTBlM2MzNDc5MDRmY2VhYWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpHAWUptThgvsLRq4xbfimQbZCPy
1i52qPOp8WE9TSilHaprEzDsoMWMJHHa7N8EJ8jCOycxHHZcWgAzHXUQFUEqnA68
VzK8eZ0F5SPTT2k7Imo60fkgm6Yx4su5y5OwVDvpIhiVaX8RCst5/YvcIvGq9cSz
ixJBUi+WoJYA2Njh0V2B8fIz1wTpf9zQcPaorXRMHWNq655IzGCOUU1YMsvwbmOC
CZ8m19mMG0ObeSYFvcgtfr/lCNaWW9cWVcKoW5TMb8PbEDA/MB4uXGpN6vfxhsk/
75IodhxlqylW1xXp1Xz/sk5xJbBEahU1pRE1ceZpjXG0N8A7niMg5TZCfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiPJsc1gSXCTdH4UOPDR5BPzqrvMB8GA1UdIwQY
MBaAFCtJ6ISkQfBLf14u1HS1hH6DISvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzBub2hLUkI4RXRfWGk3VWRMV0Vmb01oSzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hZjUyOGMtZmY0MS00ZWVmLThhOTMt
NDJkZDk4NWNkN2IwLzEvSzBub2hLUkI4RXRfWGk3VWRMV0Vmb01oSzhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hZjUyOGMtZmY0MS00ZWVmLThhOTMtNDJkZDk4NWNkN2Iw
LzEvSzBub2hLUkI4RXRfWGk3VWRMV0Vmb01oSzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZoYwN44
YkyKeaQzJDNmIFP8oSL5yDNJsdCz3bhQRur5iTiNM0Y2DnnCSOA7IvJkNknO/T4m
EQHccXsdFkVSsrXIVXkrQMn/CMC0x1Mo0jrhwfArHb01WNEPRvAtBTzYC23mXgWi
Y5Ry99EtSFIGvj7HQ3BmgrPLHYVaer2nh79M4JH1zXD+T/+7abufelk5+SAW4+RE
VE/Wr9/AN6VZ6ug89snyEljMxbkKY6F08ojMpuzlk87GN3yEQLxxuqtfgfeKoHJN
gIf7HJaLOCsn2VAbmHOxVuewj6WTF/PZZSEB4BFfvx5lEH2eJBHVQYA0PKPK3WOd
5Hs4xixa9gICLg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:46:09 2026 by rpki-client