Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File: K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier: Px2WqmjGoZNpkZrnO2aAO9N+Z8MZgCF95Uc6hDqDauI=
Subject key identifier: 0A:0B:B3:9F:63:DA:BF:EC:36:E4:1A:0F:AF:81:85:88:7F:0B:34:56
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial: 01A0D5DDC89B865548ABB7AA7D637F6DBD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number: 1A6D
Signing time: Fri 25 Sep 2026 00:01:16 +0000
Manifest this update: Fri 25 Sep 2026 00:01:16 +0000
Manifest next update: Sat 26 Sep 2026 00:01:16 +0000
Files and hashes: 1: E42ALr85hzHjr7r_9Z5V7NF6a-8.roa (hash: bMH2/YzfTbpse+/akM+4A9X/Bsc5TxJJDbOgKDKeGaQ=)
2: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: mZJTzcVBw3JIVotFLVXFV9pjWWwN+PsoRD6wKUR9XlQ=)
3: Or9-McsdINXpd2AfMY8CRkBHo-c.roa (hash: Hm0aM5yCfz8g6AbodNDmMSYxdlDqVNZ0I10ycbk2bPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:c8:9b:86:55:48:ab:b7:aa:7d:63:7f:6d:bd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Validity
Not Before: Sep 25 00:01:16 2026 GMT
Not After : Sep 26 00:01:16 2026 GMT
Subject: CN=0a0bb39f63dabfec36e41a0faf8185887f0b3456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:83:3e:5c:ce:bd:b9:2d:9e:ce:49:02:c5:
14:e1:de:92:1f:f2:4d:64:ef:db:2c:2e:1b:5b:d7:
53:da:49:3d:40:c7:6d:e4:88:60:77:01:4c:de:6a:
1b:3c:cc:ae:8e:1d:86:ff:6b:0a:b7:63:cb:6d:6b:
2a:f3:21:5d:6e:9b:3b:d0:80:77:86:ee:b0:bd:91:
70:92:b8:56:e2:70:df:48:a6:8d:38:ed:7f:1e:22:
d3:6c:78:79:d7:b8:d9:ab:17:ad:fb:a7:6b:58:ea:
15:86:93:e5:05:77:d9:b3:d1:a3:ca:50:65:dd:ca:
75:c9:ae:2c:ae:91:c2:6f:2f:d1:3a:de:57:d3:d9:
90:aa:7a:7c:25:6c:f6:ac:38:2d:71:e5:35:fb:2f:
05:46:08:a9:47:09:7f:33:a4:15:98:e6:96:6a:db:
2b:c4:11:c3:bc:90:23:03:19:e9:0f:d7:fa:d8:b9:
dc:76:85:96:4c:56:ff:cc:e6:54:a7:5c:f5:8b:d7:
16:b0:45:4f:35:aa:d9:c3:b3:0d:0f:3c:80:45:d8:
23:a0:43:4b:0a:9e:e6:20:e6:5e:ef:50:f3:ce:51:
fc:d0:28:0f:7b:5d:98:88:6c:c8:68:39:bc:5c:f5:
79:e1:58:c5:6f:e6:2f:41:0f:f5:2d:a1:25:4b:bc:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0B:B3:9F:63:DA:BF:EC:36:E4:1A:0F:AF:81:85:88:7F:0B:34:56
X509v3 Authority Key Identifier:
keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:63:56:cc:18:d2:be:aa:0b:01:fb:25:75:62:87:08:fb:d0:
1e:8e:7f:c9:c3:48:a5:55:94:30:c8:19:6c:85:e5:6d:ac:25:
09:c3:cc:e3:d6:b0:73:2f:10:13:87:03:fb:6c:d8:2a:f4:46:
ea:81:73:81:7e:16:08:1f:11:0b:2c:ff:d8:13:d4:e6:82:63:
6e:19:23:fe:00:13:ad:e3:11:52:22:43:ad:65:cb:53:9f:f5:
69:b0:ed:f3:c2:9c:57:1d:83:a9:3c:40:8b:53:65:40:e1:6e:
cf:77:c2:09:4e:c1:e7:f7:ed:ad:e0:9c:f9:51:50:57:be:fb:
85:5d:32:85:10:2f:e5:84:f8:3a:75:5d:73:0c:aa:76:9d:cb:
d3:70:d6:72:7f:99:54:cf:07:24:36:13:37:44:6f:93:b3:4e:
ee:c3:dc:8f:af:cc:67:bd:43:4e:40:f3:9d:ac:d6:47:4e:e1:
13:10:4c:fc:48:b2:74:d4:09:3a:4d:20:9d:8f:98:dc:17:04:
fa:6a:1f:6a:c2:9d:09:ca:38:0e:5d:28:ed:13:6e:62:9d:52:
ff:c1:e4:03:e1:a5:63:17:f1:6c:62:9f:ae:5c:fc:c0:e6:cc:
6d:05:84:c7:fe:1a:b3:e1:b2:ad:7a:7a:bc:ea:01:2c:cc:04:
2d:3d:26:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:32:51 2026 by rpki-client