Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
File: K87k2VI_FSkcV2df0m3JUKfNVVA.mft (raw, json)
Hash identifier: i0nXcLFhPJt3GtSipRopxT1YQoWUCBQ4ZMiy700pmIY=
Subject key identifier: 0B:67:96:22:0B:AF:50:DC:64:A4:79:6E:FD:D3:C3:4E:E0:63:AF:6F
Authority key identifier: 2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
Certificate issuer: /CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Certificate serial: 019CAD5965B56EF2C5DA1A05F6E96A08C874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 07:00:42 +0000
Manifest this update: Mon 02 Mar 2026 07:00:42 +0000
Manifest next update: Tue 03 Mar 2026 07:00:42 +0000
Files and hashes: 1: K87k2VI_FSkcV2df0m3JUKfNVVA.crl (hash: 4Y57SprHGxCC/5+YeNIIfYKnSpx8n0EJdXsVeYdO8W4=)
2: bk2cqNjTbXCT3a5I1-tm07qD07A.roa (hash: Gw1Ewr87S1Hl49EF+LWPAblSCpXq1qbdHzOGfcAA7Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:65:b5:6e:f2:c5:da:1a:05:f6:e9:6a:08:c8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Validity
Not Before: Mar 2 07:00:42 2026 GMT
Not After : Mar 3 07:00:42 2026 GMT
Subject: CN=0b6796220baf50dc64a4796efdd3c34ee063af6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:2e:c0:34:7e:c9:c2:c9:3d:fc:47:68:52:
e7:cc:54:15:e1:0e:ff:65:72:8d:17:6b:ac:36:f5:
11:93:1c:cf:9d:28:4a:dc:52:c8:f1:d3:47:fc:3d:
fd:40:90:b4:dd:38:61:62:d1:11:f9:e0:70:53:85:
14:54:3e:52:4b:97:47:bd:57:8b:4a:10:72:1c:4c:
08:aa:ff:33:30:7e:f0:bf:5f:43:b9:7e:aa:9a:a1:
be:e6:e9:84:10:b7:a6:64:3d:67:99:75:b9:f4:f2:
60:cb:7d:eb:f2:31:dd:36:4e:12:95:8f:16:ab:9e:
8c:b5:11:c7:15:4f:b3:fe:5c:91:c5:7d:74:fb:fb:
85:ec:67:a2:e5:de:b6:e7:1d:83:c7:22:e1:12:cf:
7a:09:19:42:c3:4a:3e:26:9f:4f:ba:3d:79:4f:d1:
72:a8:d4:4d:23:58:bc:3a:18:8a:65:b5:a2:72:a6:
f3:a6:94:ba:80:7a:6d:b3:8d:22:af:c3:a8:00:99:
71:1a:91:ec:ad:57:53:8a:db:76:06:1d:ce:e9:9d:
c6:fd:6c:45:f7:fb:f0:b4:5a:c1:9a:7b:97:2d:c6:
b7:75:09:8e:9d:90:22:0f:98:a4:2e:49:76:bb:85:
b5:97:d5:ee:e1:e8:b8:69:39:a2:45:60:7c:00:0a:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:67:96:22:0B:AF:50:DC:64:A4:79:6E:FD:D3:C3:4E:E0:63:AF:6F
X509v3 Authority Key Identifier:
keyid:2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:24:bd:f5:ff:95:92:3a:6a:69:8c:54:72:91:31:2d:44:f9:
6c:0b:cc:bf:e1:2c:85:4d:a1:80:76:14:b4:26:ce:77:a4:52:
d1:43:88:a1:3c:bd:65:b6:43:74:68:59:87:c7:2b:0d:11:95:
fd:26:72:85:33:8e:c6:00:99:62:88:9f:24:49:a8:b2:c4:f1:
4e:a9:03:7d:e0:c6:18:6a:93:cf:ab:20:91:ee:b4:aa:00:3f:
9a:f6:75:8d:3f:a3:5d:d4:04:e8:a9:20:6c:39:82:84:7b:70:
50:63:2e:1f:01:c5:7d:1c:4a:37:77:a1:bf:14:bc:ec:89:97:
e3:22:6f:00:86:8e:f7:c7:e5:8b:ff:f3:b2:e1:00:f0:b6:e8:
c9:a0:50:87:b0:90:41:13:df:1a:5c:58:7f:f0:a5:86:1c:2f:
1a:b2:92:0c:88:d5:4b:46:f6:25:fe:b4:a5:f2:fb:d8:7e:26:
f0:02:52:c1:a2:46:06:35:61:84:a2:b8:c9:ff:06:d8:5b:7e:
50:2c:18:6e:3a:17:61:61:61:57:7f:f9:99:79:d2:7c:73:01:
ab:9f:93:d8:5f:93:4a:30:2f:b4:b2:b0:d2:e4:80:5a:bb:82:
d9:ef:a2:09:ea:6e:84:c0:5c:ce:4f:c5:a1:c3:ea:fc:62:06:
39:59:16:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:39 2026 by rpki-client