Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
File: K2s1AF0wIoBENtctw8nIZc-qoAM.mft (raw, json)
Hash identifier: 2EtTVLaJrMSngSDlHGCkymI6sJjrZUCDSIf85kL6Z0U=
Subject key identifier: A7:B8:3C:38:F3:D2:E9:8D:42:FD:58:FF:BC:9B:4E:98:95:15:8D:E5
Authority key identifier: 2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
Certificate issuer: /CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Certificate serial: 019CABD9B81941A828BB314CD7C0BC463478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
Manifest number: 0D71
Signing time: Mon 02 Mar 2026 00:01:38 +0000
Manifest this update: Mon 02 Mar 2026 00:01:38 +0000
Manifest next update: Tue 03 Mar 2026 00:01:38 +0000
Files and hashes: 1: K2s1AF0wIoBENtctw8nIZc-qoAM.crl (hash: RKATCnY/63jgxeTwyZym5Qbu7U6Tlg91RLr4g5WkTug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b8:19:41:a8:28:bb:31:4c:d7:c0:bc:46:34:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Validity
Not Before: Mar 2 00:01:38 2026 GMT
Not After : Mar 3 00:01:38 2026 GMT
Subject: CN=a7b83c38f3d2e98d42fd58ffbc9b4e9895158de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:7f:45:3f:97:80:52:f0:a2:9d:3e:20:3f:
e2:96:b2:2f:ef:fe:e9:21:e8:af:59:48:38:12:96:
8f:fe:14:ad:70:0c:14:a6:29:2e:9c:17:df:03:41:
04:87:b3:79:0a:91:3e:9a:fc:3f:d4:8c:d3:f1:f2:
0f:d4:c7:1a:6a:03:31:82:c5:2b:af:62:34:f8:08:
6b:15:74:c6:ef:75:4a:a9:40:3e:d5:4d:3b:c2:9a:
31:1f:de:70:91:95:89:d9:32:77:08:2a:23:09:43:
8f:e8:60:46:0a:c8:f4:00:f6:f6:67:eb:ae:dd:1d:
b0:5e:7c:7c:e8:2a:82:8d:99:65:22:2f:e9:e0:93:
aa:c7:89:52:b1:a8:8b:92:45:5d:bf:c9:8c:c9:ce:
64:61:fd:69:e3:58:b2:eb:0d:73:b9:0c:c8:0b:ee:
be:b4:89:31:28:a0:70:a2:b6:e9:16:5a:91:a5:96:
ef:a2:bc:6d:8d:0e:d6:61:9b:a6:aa:b5:fd:ec:7a:
81:34:dc:b5:d9:24:bd:d4:ac:e3:22:c6:03:a8:9c:
23:e7:4a:d2:a0:24:b3:31:b4:37:7c:14:20:e5:d5:
41:03:c0:14:ff:2f:73:68:c0:9a:a0:fe:86:3d:de:
b7:de:31:d4:85:80:24:c4:28:6e:0d:8c:27:9c:2a:
0d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B8:3C:38:F3:D2:E9:8D:42:FD:58:FF:BC:9B:4E:98:95:15:8D:E5
X509v3 Authority Key Identifier:
keyid:2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f2:6c:68:e8:64:8c:02:0f:db:09:85:3f:e8:6b:cc:fe:64:
91:2c:12:02:b7:a7:f4:94:c7:4e:d9:6f:9c:69:f1:25:b0:00:
79:d8:6a:2c:4f:7e:08:f2:48:a2:56:04:e5:e6:30:61:eb:80:
ad:b4:41:cb:15:5b:bc:90:a8:e5:3d:72:f5:79:8a:44:a8:ea:
3e:bf:c0:26:0b:79:8b:ff:79:d4:a7:3c:06:72:58:f5:e3:a2:
96:fe:d6:41:e0:e8:43:7a:2e:b2:f7:9a:e2:39:a7:53:0d:ad:
4b:b4:c3:a9:f8:a1:f5:44:0f:e7:31:f2:5e:c2:fe:f8:02:76:
54:f5:3f:f1:a0:24:3e:6d:0f:e8:c9:86:26:94:12:f2:e0:5f:
dc:a8:17:cc:88:4b:bd:39:8b:cc:e2:0e:13:e2:b8:48:da:ff:
7d:1e:fc:93:fc:d9:ca:fe:ec:fc:1e:a8:74:2c:6e:a8:61:2c:
c5:c0:29:26:f3:52:40:e1:25:96:c0:1b:96:f3:60:18:5b:a7:
a1:98:1d:5b:7a:b9:30:35:76:4d:31:f7:1c:ef:5a:5b:0e:e7:
95:df:01:09:9a:7a:59:fd:a4:12:55:be:b8:ae:21:12:f2:16:
3f:1c:69:39:77:68:51:69:fe:e8:5f:15:35:17:60:22:36:f5:
f2:b3:d6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:21 2026 by rpki-client