Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: 8FoK7HvhygYYDFHM8FG4ppq0Nv3br/+uq5WY/mqYtIQ=
Subject key identifier: 31:A8:7B:EC:E1:03:19:C7:16:F3:85:3D:6B:9F:38:7E:89:BA:A2:59
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 019CAED9C55051C4144260B18F382E424D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: 0418
Signing time: Mon 02 Mar 2026 14:00:33 +0000
Manifest this update: Mon 02 Mar 2026 14:00:33 +0000
Manifest next update: Tue 03 Mar 2026 14:00:33 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: Hmaqcz9OJPiJ1bHuuzbAbJFtobc0zeR2wW1VORqbf00=)
2: OpkXHZIicfHCPvft3PttWRGy66g.roa (hash: EVSEcIRV/V3W58OZOul/52nTZj0iMwsLv/i2q2ZyFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:c5:50:51:c4:14:42:60:b1:8f:38:2e:42:4d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Mar 2 14:00:33 2026 GMT
Not After : Mar 3 14:00:33 2026 GMT
Subject: CN=31a87bece10319c716f3853d6b9f387e89baa259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:8b:1d:aa:4c:f0:ec:10:56:a9:a2:37:74:
70:26:91:d7:df:5e:e9:99:6a:36:8c:a4:12:cd:26:
fa:50:be:de:40:58:b9:40:25:f5:d1:d6:39:c1:9c:
6b:52:7a:32:1f:47:7c:7d:13:bf:9b:35:1e:ca:64:
d9:e3:86:06:28:d1:22:43:df:60:aa:52:59:01:0d:
c6:ba:6e:3b:16:1b:95:62:07:e5:7e:69:6a:c0:52:
2b:d2:7c:c5:62:33:04:f7:bb:33:7e:b4:85:af:46:
7d:69:35:74:be:42:a6:a9:08:ba:64:35:0a:76:d9:
d4:74:a9:3e:a2:06:28:3b:f4:ce:16:8e:4e:6d:be:
4f:c5:66:7a:7b:55:2c:16:73:a6:1b:86:ac:44:5c:
6d:dc:48:47:36:11:58:a6:07:ed:97:1c:ba:89:fb:
2c:1a:18:84:34:cb:1d:66:67:97:f1:58:74:5c:99:
43:08:b0:15:df:a7:a4:ca:df:ca:c4:bd:bc:26:07:
54:13:10:c3:64:fd:8f:c0:e7:43:2e:c8:17:d9:40:
72:28:f8:27:c0:f2:d7:5b:7e:65:d7:3b:c9:c0:01:
61:24:7c:45:38:c3:33:3a:4c:80:0d:9d:cc:d4:56:
ab:84:97:c4:70:8a:fe:96:35:b3:4d:be:b4:be:ac:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A8:7B:EC:E1:03:19:C7:16:F3:85:3D:6B:9F:38:7E:89:BA:A2:59
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:94:08:e3:af:bf:6b:df:28:cb:23:e7:03:84:80:50:f8:8d:
7f:1a:ca:8e:89:bb:a6:a1:ad:60:7e:df:e8:51:12:c3:ba:28:
66:b7:06:a2:bc:63:55:9f:5b:28:aa:6a:87:7c:c6:59:db:5d:
c3:50:9e:c6:71:43:76:f0:ab:11:b9:96:3c:73:67:27:24:c3:
0f:88:43:c0:75:90:83:f8:31:a8:fd:7a:83:f4:ed:98:ea:94:
12:bc:91:11:d8:e3:1f:58:e0:7c:d0:8f:12:dd:9e:66:97:06:
70:a6:48:d7:04:8f:32:3b:ca:99:79:01:cc:f1:3a:a4:6c:23:
5d:43:c4:bf:41:ed:4d:69:35:8b:37:ef:f6:72:f0:9b:0c:25:
3d:f2:e2:55:fa:7c:fa:8c:8f:56:bf:cc:ef:00:38:0d:75:2f:
60:e9:a5:3f:d0:3f:36:3e:4d:95:92:a0:70:4f:de:81:ea:ad:
15:dc:d7:2a:eb:9e:7a:77:aa:5b:ba:0f:6b:ce:a7:b6:d8:52:
ca:8a:d8:55:d9:d4:7a:a8:6b:b8:17:51:91:a2:56:14:c0:ad:
ee:2c:e9:f7:2f:ba:76:12:d9:d0:70:03:47:bd:e2:6c:c8:73:
76:86:ab:ae:11:13:63:e7:24:e7:3d:98:d8:35:19:de:50:b2:
42:60:9d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:24 2026 by rpki-client