Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: WC12GH6TFgFgBsRC6SJsO3j52sJiy0pDn/imcm8VNIg=
Subject key identifier: 5B:09:8A:CD:DE:DA:BF:0E:D3:78:B2:5A:1A:EA:7E:29:10:99:54:20
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 01A0C1B13503E43E857F82986ADC6C7901B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: 0634
Signing time: Mon 21 Sep 2026 02:00:11 +0000
Manifest this update: Mon 21 Sep 2026 02:00:11 +0000
Manifest next update: Tue 22 Sep 2026 02:00:11 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: wtOYhhLMJ9RURIqebTWbdI62Sqwuq56LXQppW5gjTGM=)
2: OpkXHZIicfHCPvft3PttWRGy66g.roa (hash: EVSEcIRV/V3W58OZOul/52nTZj0iMwsLv/i2q2ZyFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:35:03:e4:3e:85:7f:82:98:6a:dc:6c:79:01:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Sep 21 02:00:11 2026 GMT
Not After : Sep 22 02:00:11 2026 GMT
Subject: CN=5b098acddedabf0ed378b25a1aea7e2910995420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:14:6d:8a:ce:02:23:e3:15:ed:20:8a:72:
c7:8b:51:6d:f0:5e:7d:f0:be:b3:39:5a:e1:c5:7f:
5d:7d:ce:4f:5c:06:df:9c:1a:fe:f0:d5:db:e0:6d:
16:6b:1d:56:82:40:b3:df:f1:ef:9c:df:e1:8d:b0:
39:35:17:d5:51:cb:3b:be:57:4e:2c:ad:97:7c:5f:
6b:88:74:6b:c0:0d:25:cf:85:00:31:ab:c2:8e:56:
a3:d2:93:2c:80:64:dd:45:ec:07:82:db:f2:02:5b:
51:e9:59:c5:56:61:b4:b6:16:f4:fc:36:32:30:b6:
75:d1:6e:ef:a0:26:c5:43:ee:43:f0:79:11:f1:18:
b4:0e:dc:2f:74:2d:43:5b:7a:f2:c5:df:b5:43:2e:
51:0e:63:61:84:6f:7e:7e:39:7e:94:1b:46:10:bd:
3d:89:82:24:fc:5a:d2:1d:35:67:0d:49:e9:8c:b4:
e1:d5:a1:cd:50:57:1b:68:3e:e1:a2:37:36:6c:61:
64:c9:6a:15:0a:7a:d9:bd:11:72:9e:60:34:65:9f:
a7:c8:16:ce:88:be:fa:1a:4e:84:3d:fc:87:0b:6f:
c5:5c:1d:6c:fa:90:b4:02:a6:cd:e2:61:9b:fd:75:
91:70:0a:f9:6b:79:9d:34:8c:95:24:ea:13:96:04:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:09:8A:CD:DE:DA:BF:0E:D3:78:B2:5A:1A:EA:7E:29:10:99:54:20
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:06:d0:8e:bc:a1:c0:e9:55:0b:e6:88:0b:0b:35:ba:89:7c:
c4:27:e6:b9:d1:d9:ec:6f:9b:cd:39:ac:e1:b3:08:a6:9d:83:
26:8d:98:d3:a6:2e:49:53:3b:11:2a:67:0a:a1:66:03:42:27:
4a:36:06:24:07:d4:49:67:81:5c:4a:bb:f0:10:76:14:62:9c:
28:3e:35:ed:0f:30:2e:6a:90:d2:64:43:11:e4:e5:69:25:89:
c6:8f:01:b4:b1:3c:85:99:d8:19:da:1e:31:01:3a:fd:1d:32:
15:1b:57:ac:70:e9:85:89:57:42:22:0e:c5:b7:db:e4:ea:58:
75:a2:ce:a2:0d:c3:6a:ae:ea:8d:62:d7:fb:df:28:a7:0d:e2:
40:87:8c:0b:e2:10:a8:86:1b:85:c2:dc:7f:0c:32:27:cb:50:
e4:9b:d4:6d:b1:67:50:d8:d0:f4:f4:62:7d:b8:38:70:0c:6c:
83:8e:ca:43:c0:bb:cf:57:cb:69:e3:42:3e:50:4b:85:18:4b:
0a:d8:7e:cd:5b:87:98:64:6e:ea:0e:02:9a:67:4f:b0:37:73:
b7:0b:bb:37:72:2e:1c:36:2f:cb:99:3a:46:d4:b6:77:fd:50:
a4:e3:0d:eb:d9:bb:a7:fa:76:85:5c:a7:08:24:96:0e:3e:a4:
3d:fd:2e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:48:31 2026 by rpki-client