Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
File: K2s1AF0wIoBENtctw8nIZc-qoAM.mft (raw, json)
Hash identifier: TpcJE1Ae2FWlU1KXi79ETPLVWm6ZkAXybm14iZhcPiw=
Subject key identifier: E2:F7:57:2B:23:87:EF:6F:5C:ED:53:C4:26:AF:F9:0B:62:85:CA:72
Authority key identifier: 2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
Certificate issuer: /CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Certificate serial: 019D9962B8065158299109E3294FAD378441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
Manifest number: 0DEC
Signing time: Fri 17 Apr 2026 03:01:16 +0000
Manifest this update: Fri 17 Apr 2026 03:01:16 +0000
Manifest next update: Sat 18 Apr 2026 03:01:16 +0000
Files and hashes: 1: K2s1AF0wIoBENtctw8nIZc-qoAM.crl (hash: BAgUrlTyWHgap8i3wnLYaxmMYGqQ9yiANw7pDMDZDeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:b8:06:51:58:29:91:09:e3:29:4f:ad:37:84:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Validity
Not Before: Apr 17 03:01:16 2026 GMT
Not After : Apr 18 03:01:16 2026 GMT
Subject: CN=e2f7572b2387ef6f5ced53c426aff90b6285ca72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b7:9e:1a:26:fe:a0:b9:fc:8f:4e:6b:e8:20:
72:2c:a0:10:e8:7e:00:43:1d:0c:98:fb:a7:5c:75:
74:15:0c:ef:ba:64:3e:ac:93:b9:59:12:f1:66:9c:
0b:e0:9c:78:68:13:55:96:23:42:a5:0d:bd:d8:4c:
d1:1f:25:2f:bd:c1:9e:40:84:80:59:31:2b:e2:4c:
42:92:64:de:2d:bd:4f:14:59:54:fa:9c:47:14:71:
4d:36:9c:f9:71:90:be:a7:3d:b9:df:1b:fa:68:15:
69:98:56:e3:ee:c2:09:7a:a9:9b:c0:6d:b7:59:32:
c3:b9:82:62:67:75:2c:18:9f:be:25:a7:b1:a3:cb:
7b:e1:d8:a7:46:d2:c0:dc:2e:e0:02:6b:e9:1b:d8:
f7:a5:ed:c1:b7:f1:1c:5f:ce:6d:f6:dc:e2:53:3b:
85:b8:3a:09:53:74:dd:9d:b9:21:46:79:95:2d:c7:
73:6c:87:60:66:9b:4e:7c:7a:16:c7:5c:ac:e0:cb:
b2:e0:41:49:be:bc:b4:10:94:0d:af:c5:8c:71:5b:
ab:1f:e9:27:3f:a7:68:7e:c9:50:70:c6:1d:9f:f6:
b6:f3:6b:12:88:50:09:1e:93:d9:a8:06:95:8c:12:
50:4a:f1:5d:5b:e1:f9:37:9a:85:cc:f3:c2:00:db:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F7:57:2B:23:87:EF:6F:5C:ED:53:C4:26:AF:F9:0B:62:85:CA:72
X509v3 Authority Key Identifier:
keyid:2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:71:3a:30:31:b2:6e:c9:dd:4a:5f:2e:57:55:8f:fb:01:dc:
29:91:63:94:98:ba:65:96:82:73:76:13:e7:70:bf:0e:12:2c:
24:13:5e:2f:f9:5b:e0:0a:de:ac:e0:81:b8:dc:2e:74:30:96:
da:1b:f3:f4:c6:4b:08:53:fb:bc:0c:96:90:78:a6:eb:86:80:
78:f3:5f:91:ad:1a:b9:29:f4:81:5e:79:a7:37:07:7e:34:3a:
5b:bf:04:1a:ba:34:ce:3c:1f:aa:f3:55:13:a2:ad:e4:96:e2:
0c:41:52:72:6f:d9:f7:b0:ba:de:76:4e:3f:46:d3:90:26:d4:
a8:6f:48:b7:4a:73:90:0c:10:ba:33:e3:3a:22:35:65:65:2b:
99:dd:ed:c3:cd:b4:11:2d:ae:ea:01:ec:fe:bd:10:7f:67:08:
46:5d:67:5b:b0:74:79:a5:ca:f2:0a:cd:ae:87:30:3f:ca:c9:
88:c3:48:2b:b1:6d:a4:4b:77:eb:a1:da:05:97:56:df:5b:61:
96:65:62:4c:5e:2a:73:56:7b:88:5b:8a:98:c1:f0:d6:c7:86:
3d:d6:34:ae:6a:05:ec:65:3b:2c:25:53:d8:05:19:5f:9d:a3:
33:b7:7d:2e:52:42:f0:18:cf:bc:7f:92:1e:a0:95:0c:66:bd:
af:f9:45:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYrgGUVgpkQnjKU+tN4RBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmIzNTAwNWQzMDIyODA0NDM2ZDcyZGMzYzljODY1Y2Zh
YWEwMDMwHhcNMjYwNDE3MDMwMTE2WhcNMjYwNDE4MDMwMTE2WjAzMTEwLwYDVQQD
EyhlMmY3NTcyYjIzODdlZjZmNWNlZDUzYzQyNmFmZjkwYjYyODVjYTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibeeGib+oLn8j05r6CByLKAQ6H4A
Qx0MmPunXHV0FQzvumQ+rJO5WRLxZpwL4Jx4aBNVliNCpQ292EzRHyUvvcGeQISA
WTEr4kxCkmTeLb1PFFlU+pxHFHFNNpz5cZC+pz253xv6aBVpmFbj7sIJeqmbwG23
WTLDuYJiZ3UsGJ++Jaexo8t74dinRtLA3C7gAmvpG9j3pe3Bt/EcX85t9tziUzuF
uDoJU3TdnbkhRnmVLcdzbIdgZptOfHoWx1ys4Muy4EFJvry0EJQNr8WMcVurH+kn
P6dofslQcMYdn/a282sSiFAJHpPZqAaVjBJQSvFdW+H5N5qFzPPCANuPnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOL3Vysjh+9vXO1TxCav+QtihcpyMB8GA1UdIwQY
MBaAFCtrNQBdMCKARDbXLcPJyGXPqqADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJzMUFGMHdJb0JFTnRjdHc4bklaYy1xb0FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mNGMzNTQtODBmYi00YzM5LWEwZjgt
ZjE4ZmJmNTk2ZWJhLzEvSzJzMUFGMHdJb0JFTnRjdHc4bklaYy1xb0FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mNGMzNTQtODBmYi00YzM5LWEwZjgtZjE4ZmJmNTk2ZWJh
LzEvSzJzMUFGMHdJb0JFTnRjdHc4bklaYy1xb0FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnE6MDGy
bsndSl8uV1WP+wHcKZFjlJi6ZZaCc3YT53C/DhIsJBNeL/lb4ArerOCBuNwudDCW
2hvz9MZLCFP7vAyWkHim64aAePNfka0auSn0gV55pzcHfjQ6W78EGro0zjwfqvNV
E6Kt5JbiDEFScm/Z97C63nZOP0bTkCbUqG9It0pzkAwQujPjOiI1ZWUrmd3tw820
ES2u6gHs/r0Qf2cIRl1nW7B0eaXK8grNrocwP8rJiMNIK7FtpEt366HaBZdW31th
lmViTF4qc1Z7iFuKmMHw1seGPdY0rmoF7GU7LCVT2AUZX52jM7d9LlJC8BjPvH+S
HqCVDGa9r/lF3Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:16 2026 by rpki-client