Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File: K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier: Y/K7vaZ4Co00MT+m824rrmytd0HynZltwaMrEDhyoow=
Subject key identifier: CC:1C:41:A5:E4:96:D0:97:77:B6:F0:30:82:E1:70:F8:80:61:D0:D4
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial: 019D992AFD13F8F586BB945BB0E180EB3684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 02:00:24 +0000
Manifest this update: Fri 17 Apr 2026 02:00:24 +0000
Manifest next update: Sat 18 Apr 2026 02:00:24 +0000
Files and hashes: 1: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: NDvf5IPhYiiz5ulGTzpFxHNiqcNXsN7tBw/AJx+QPSI=)
2: U4yJmT1ScaT40kywasOQ8O608yQ.roa (hash: 6wuB5jKMzhDthKEXBc2cgRcakDY0stwctJVIuMEfhMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:fd:13:f8:f5:86:bb:94:5b:b0:e1:80:eb:36:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Validity
Not Before: Apr 17 02:00:24 2026 GMT
Not After : Apr 18 02:00:24 2026 GMT
Subject: CN=cc1c41a5e496d09777b6f03082e170f88061d0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:85:a9:00:52:cf:65:59:4e:3c:b3:3a:af:
2f:aa:14:9c:e2:91:bd:a0:8d:2f:93:bc:c0:ce:76:
6e:8d:b2:fd:ba:f9:5d:c9:78:e6:d3:35:3d:8c:ad:
f9:8a:47:79:b3:8b:1d:d3:79:49:b5:42:e4:3e:11:
ad:2f:a1:ea:56:1d:b7:89:95:3c:1f:06:5f:e3:25:
63:a8:0a:f8:d0:be:ef:80:d1:f4:70:bc:fb:2d:2c:
48:eb:11:93:66:a1:1d:27:6f:f0:7b:0d:7d:34:ca:
03:aa:aa:ac:bb:7e:37:4e:9e:ff:b4:f8:5b:84:8e:
53:f0:ef:11:00:9f:f7:42:0e:8c:e1:28:77:33:54:
96:60:51:10:00:f6:5a:15:f7:cd:1f:e7:9e:58:e1:
07:d8:18:44:94:be:e3:5d:d4:01:c5:3c:45:32:bc:
51:51:c5:e5:41:77:c2:73:07:53:e1:bb:7d:bf:7c:
60:cc:35:cd:8a:34:2d:98:0a:67:b6:1e:aa:6a:8a:
ae:ca:98:03:12:1a:9d:50:d5:0d:b2:e8:19:00:1d:
a0:77:11:d6:0e:e9:08:bc:ac:b4:15:36:66:91:84:
ed:42:2e:ea:cb:e7:95:d1:82:32:c8:9b:89:6f:e0:
1c:fe:ee:73:5d:03:4e:80:95:15:56:bc:9e:ef:58:
aa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1C:41:A5:E4:96:D0:97:77:B6:F0:30:82:E1:70:F8:80:61:D0:D4
X509v3 Authority Key Identifier:
keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0b:7e:e8:d3:10:46:ca:9c:5d:03:49:9f:fc:b2:1b:86:6b:
9b:d1:f4:9b:d5:44:86:2f:0e:03:ca:c6:6e:5a:c3:51:0a:fc:
0d:c3:55:60:6e:f8:25:da:92:e9:08:ef:7e:80:9c:42:08:f2:
3f:d9:f8:50:b1:af:03:fd:0d:02:47:8d:fa:c6:cc:15:ae:ac:
d2:66:68:84:41:a3:9b:7f:19:31:63:52:83:87:b7:97:de:95:
50:cc:f4:bf:2b:07:68:9b:22:61:03:20:42:df:8a:a4:3a:26:
01:89:f8:0f:0e:ff:ad:bc:4c:7d:9c:2a:b6:94:6c:b4:b2:52:
61:c7:de:bc:83:11:3c:0f:c9:c9:25:b2:eb:ed:c6:d4:95:20:
f5:b9:8c:19:d7:90:fe:5a:c9:d0:c1:2a:67:d7:de:07:3c:c0:
b3:3b:67:91:5a:90:71:24:33:47:b5:32:72:f3:13:82:0d:5b:
94:42:02:21:a0:a6:96:3b:ca:16:dc:f6:13:f0:34:50:4b:58:
01:8c:d0:30:88:d2:f9:c6:d2:b8:69:2c:65:74:35:01:09:22:
f8:50:88:06:72:e4:31:28:e8:f1:46:28:55:c5:fc:8d:70:8e:
b2:60:ca:1b:e5:26:62:b7:0d:d5:d5:6a:63:95:1b:c4:cf:51:
87:a5:b9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:21:18 2026 by rpki-client