Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
File: K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json)
Hash identifier: 5w2HaWkEDkOsg2yBAAfrFIgFebqPERb0d86ksd/eHSs=
Subject key identifier: DA:F4:36:B8:82:D7:9F:DB:A8:78:D7:9D:1B:6C:B2:AE:68:DE:E9:1C
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Certificate issuer: /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial: 019D98BDE9167836E867519E71A465882180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
Manifest number: 0696
Signing time: Fri 17 Apr 2026 00:01:15 +0000
Manifest this update: Fri 17 Apr 2026 00:01:15 +0000
Manifest next update: Sat 18 Apr 2026 00:01:15 +0000
Files and hashes: 1: Jr658jPud1G59P1IJrsCszw4gyU.roa (hash: 3CTowatmqrcEGXxJ4Y5uu28J0up58OPmzNLnfXaNssw=)
2: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: pIc9fsWun610Khz+465hHC8A9mIJYpbITTZvI2puE5E=)
3: z8SvFmHjwdkD9rVqW5FJ7sxlfdI.roa (hash: rejHdYVWNM7RsiIxf7jbWM9eJvH26EoCBws9Y59Tnv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:e9:16:78:36:e8:67:51:9e:71:a4:65:88:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Validity
Not Before: Apr 17 00:01:15 2026 GMT
Not After : Apr 18 00:01:15 2026 GMT
Subject: CN=daf436b882d79fdba878d79d1b6cb2ae68dee91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:c6:9d:41:c3:cd:e8:15:78:2a:53:42:2e:
11:ba:64:a1:5e:e7:60:d4:f4:b2:16:e4:3a:16:b8:
fa:cc:66:81:b9:6e:94:f4:08:a0:bc:84:36:d0:66:
47:f3:2d:50:ea:df:e1:32:23:c3:2f:8b:64:0d:5f:
b1:81:b8:da:26:32:b0:b7:82:60:cd:0d:07:5f:ce:
91:4e:91:05:05:21:b9:ac:73:ef:2c:c3:76:04:cc:
ec:31:e4:c1:c9:4c:38:1a:72:ec:af:0a:62:c5:86:
8f:13:1a:11:de:b7:b8:64:5a:45:c1:fc:d7:98:b7:
10:0c:bc:b0:5d:06:f1:66:2c:4a:b8:70:35:c6:a9:
7b:28:1e:70:53:c0:a8:6b:19:5a:61:c3:e8:d8:c9:
b5:8f:fb:7f:3d:ca:2f:f4:69:2a:49:cd:68:b4:84:
69:c6:f7:c9:f5:9c:cb:4f:4c:74:6e:34:3b:83:fc:
db:9e:6d:90:3a:63:88:57:f9:b7:3d:72:03:53:0b:
2b:64:e3:6f:92:fa:96:9e:f5:3e:32:cd:cf:74:5d:
ac:ad:89:c5:a6:f7:c7:da:a6:a4:c1:0b:e2:bc:77:
b9:5b:18:c6:f5:94:11:f3:b2:cf:0c:61:f8:57:68:
63:85:44:7a:3d:9d:f1:dc:6a:c4:6d:55:5a:8c:f4:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F4:36:B8:82:D7:9F:DB:A8:78:D7:9D:1B:6C:B2:AE:68:DE:E9:1C
X509v3 Authority Key Identifier:
keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:87:8f:3a:41:10:aa:8f:25:6e:a3:4f:89:0e:62:5f:65:99:
97:53:6b:8e:09:bd:37:3a:e6:8f:d2:d5:63:0e:d5:85:db:ca:
b5:53:c2:fd:5d:56:bd:c7:4a:3c:9f:b9:24:ce:f3:9c:d9:d0:
b8:b2:0c:72:c0:36:58:53:61:d5:3a:b0:6f:d9:1e:05:7e:76:
a7:5c:b8:55:de:3e:0b:fb:be:27:e4:b8:6d:62:8a:68:38:82:
d2:94:d3:48:c5:98:64:bf:a5:89:91:d8:b6:9f:be:b5:dc:c7:
95:62:d3:74:8f:d9:79:6b:49:cc:0e:fa:0c:73:9d:05:13:ca:
2d:37:a9:4e:86:c1:89:cc:b6:f0:69:8f:6b:49:0b:1a:b2:bb:
ec:2f:67:a1:f8:18:17:65:0b:3f:08:8a:c3:16:dd:ad:06:4c:
86:a3:ac:08:30:f8:99:5a:98:bb:3b:83:b6:2a:b4:fe:25:a2:
21:90:08:f5:5d:19:12:4d:e8:46:5f:e6:55:4d:f7:ed:68:40:
c3:97:2d:60:70:cd:04:c1:1b:49:ba:c0:da:f4:e9:97:07:c3:
ed:a1:95:b0:58:ac:d1:9c:65:69:3c:bd:45:b4:b6:02:97:b4:
4e:64:2a:d5:df:90:6a:eb:c5:e9:1c:26:83:00:85:ac:3e:f8:
55:a7:a2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:04 2026 by rpki-client