Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: XT0LI/g4Ty+gUHapnNdALYp6wZoLApOzmEkklktFJrU=
Subject key identifier: C9:5A:8B:10:2B:F9:22:49:60:CF:7F:CF:B5:C9:2A:DE:D5:39:6C:01
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 019ED34FBB7595975FD05A60556B0B2697C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: 0534
Signing time: Wed 17 Jun 2026 02:01:18 +0000
Manifest this update: Wed 17 Jun 2026 02:01:18 +0000
Manifest next update: Thu 18 Jun 2026 02:01:18 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: RL2SnHuHwhL/8jko1RY8wXfoTxwF2M1V/k2UB0Uumyg=)
2: OpkXHZIicfHCPvft3PttWRGy66g.roa (hash: EVSEcIRV/V3W58OZOul/52nTZj0iMwsLv/i2q2ZyFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:4f:bb:75:95:97:5f:d0:5a:60:55:6b:0b:26:97:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Jun 17 02:01:18 2026 GMT
Not After : Jun 18 02:01:18 2026 GMT
Subject: CN=c95a8b102bf9224960cf7fcfb5c92aded5396c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d8:07:e0:0c:ca:f8:27:dd:47:11:09:b3:5e:
36:d4:ed:81:e9:9a:d2:b0:b1:43:88:6d:d7:7a:97:
aa:d0:79:81:0f:49:83:a5:c7:3c:31:68:af:b8:ef:
2b:90:1e:93:ed:fb:ab:f1:b0:5f:89:83:a7:6f:b9:
ec:b4:5f:a8:a3:d7:6e:25:c3:02:98:79:a5:a1:05:
32:fa:db:9c:0d:3a:83:ce:4e:7e:3f:3e:7d:b2:47:
7e:49:5a:23:98:d9:f3:e7:a5:cb:e1:ae:5c:75:e5:
d6:20:02:0f:36:44:28:fb:9c:5b:d2:b8:20:3a:44:
1a:d3:7f:1a:2b:a1:2c:39:4b:24:2b:8c:1a:97:39:
fb:52:cb:c8:39:55:d1:b8:cd:12:2f:a0:60:4d:1b:
10:91:4b:22:98:f6:e7:49:6e:3d:87:a1:54:88:db:
9c:dd:7f:56:4d:45:87:26:36:90:27:25:a7:52:c8:
23:d6:3d:b4:af:74:f8:2f:88:64:f8:f5:09:2a:36:
67:47:b2:c6:26:3d:4e:2c:8e:76:e4:38:a7:69:bb:
cb:07:7e:97:d9:6c:f3:14:0c:35:e0:ac:0e:68:d6:
d6:d7:a9:e2:be:f8:bc:8b:0a:5e:6c:3e:36:d0:c0:
bd:52:f0:b5:d0:4b:fc:46:19:1a:31:9e:9c:f5:96:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5A:8B:10:2B:F9:22:49:60:CF:7F:CF:B5:C9:2A:DE:D5:39:6C:01
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:45:6a:53:b9:c2:9c:bc:61:e7:a3:91:af:48:52:71:23:b9:
14:d7:e5:f5:e1:de:ec:48:07:d1:17:37:1a:55:79:7e:46:9a:
62:5a:ba:d0:bb:1b:fd:7f:43:d0:9b:66:d4:d8:6b:50:09:7b:
f4:67:ca:d8:ed:70:8a:c2:94:d8:64:ea:8d:ed:ec:cd:84:db:
f1:83:4c:24:44:d1:50:94:36:10:99:45:4e:2c:24:d0:d6:0c:
cb:1d:0d:85:09:66:02:12:dd:49:73:0e:dc:71:26:1e:47:3b:
bf:16:e0:a7:a6:2d:c1:6c:41:68:e3:9d:a3:47:80:ec:2a:f8:
bb:01:73:fa:26:76:ed:c2:d5:99:56:ec:cd:ae:ec:2c:5d:02:
1a:38:f1:c6:12:43:2d:a0:4e:64:03:6e:7d:53:e4:05:1c:22:
7f:74:b2:34:1d:6b:bf:d1:79:d4:c4:85:3c:de:d6:92:6f:50:
fb:11:5e:c0:1a:4d:49:c9:68:3b:ec:6d:7f:20:ff:b6:bc:dd:
7a:73:e2:67:ab:1e:0b:1e:92:d5:46:c5:4c:d7:a1:5b:83:a6:
93:85:c4:26:b7:94:b0:af:99:7e:1c:48:ec:8c:1f:72:6a:60:
b8:b0:7b:e2:1b:1a:b1:51:e4:bb:d0:22:21:dd:d2:2e:d5:2a:
9d:b9:6e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:00:54 2026 by rpki-client