Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
File: K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json)
Hash identifier: OCM+vdBi+toOZyXwmjzUgWk1JPj0+ms8dIMz4Hq+OPQ=
Subject key identifier: 8E:44:60:13:E0:95:9B:05:96:14:01:72:2F:F9:92:D7:D5:35:3B:E5
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Certificate issuer: /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial: 01A101A413F3EA224227D9F47C99B1AFBAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
Manifest number: 085A
Signing time: Sat 03 Oct 2026 12:01:32 +0000
Manifest this update: Sat 03 Oct 2026 12:01:32 +0000
Manifest next update: Sun 04 Oct 2026 12:01:32 +0000
Files and hashes: 1: Jr658jPud1G59P1IJrsCszw4gyU.roa (hash: 3CTowatmqrcEGXxJ4Y5uu28J0up58OPmzNLnfXaNssw=)
2: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: R5Dah2YoEO+77R2NFACE/P3HhP+06qDFXhPNKl4xtIo=)
3: z8SvFmHjwdkD9rVqW5FJ7sxlfdI.roa (hash: rejHdYVWNM7RsiIxf7jbWM9eJvH26EoCBws9Y59Tnv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:a4:13:f3:ea:22:42:27:d9:f4:7c:99:b1:af:ba:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Validity
Not Before: Oct 3 12:01:32 2026 GMT
Not After : Oct 4 12:01:32 2026 GMT
Subject: CN=8e446013e0959b05961401722ff992d7d5353be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:98:0b:9e:2d:f2:8f:b3:9f:6c:1f:4c:21:fe:
c2:cf:0f:48:6c:f4:12:76:ec:3e:78:b2:4b:58:11:
e1:b1:18:56:b5:15:d3:54:91:f8:a3:0d:e9:3e:c9:
15:2b:e9:99:1b:31:ae:ab:40:e9:8b:0c:73:9b:2d:
53:c0:78:61:96:7d:9e:2c:d3:76:e9:08:fd:e7:6b:
25:e6:f7:7e:75:03:0b:e2:c2:b8:c7:15:f1:36:41:
38:40:c8:67:cf:50:12:22:f4:30:cc:b8:84:55:3c:
ff:01:9d:60:44:95:2a:3a:ae:4c:c3:33:3a:e4:27:
69:ba:30:c8:26:51:8b:ff:ed:5c:0f:3f:87:8d:94:
ef:ac:af:21:0c:43:35:bf:d4:7a:a6:5c:a0:13:cc:
e8:7d:b0:fc:17:24:6f:94:2a:6c:30:52:43:fc:8c:
21:33:64:ca:aa:96:23:04:32:34:30:13:bb:55:ba:
53:ba:ae:a7:a2:e6:28:14:f4:1b:32:8a:80:59:d6:
cf:eb:e6:0f:0e:e4:35:bb:4d:fe:49:cb:59:e5:86:
7f:16:b1:f7:67:40:45:c7:c0:e3:d1:e6:db:2b:cb:
45:0b:33:db:8e:bf:a5:03:52:24:b6:72:17:11:c8:
e9:15:aa:90:b9:62:87:de:4a:37:83:ec:54:3a:96:
4e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:44:60:13:E0:95:9B:05:96:14:01:72:2F:F9:92:D7:D5:35:3B:E5
X509v3 Authority Key Identifier:
keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:be:71:8e:7f:f1:83:79:b7:9f:f8:d3:37:04:55:52:59:8a:
56:cc:89:59:79:72:e6:c4:9b:88:8b:99:93:79:55:f2:55:0c:
91:22:ef:e3:04:7e:f2:18:bd:46:17:47:79:34:32:e4:67:72:
4e:20:eb:f6:4b:49:aa:ed:3b:1d:c0:90:20:2e:e6:65:43:72:
a0:da:94:92:95:21:2f:9c:16:0a:41:80:5e:d5:e2:36:53:76:
73:50:d7:7f:74:a8:1f:0c:9b:21:c1:a6:64:b1:2f:31:44:2e:
3c:32:4e:2c:11:eb:d7:a1:ac:7c:ff:b6:dd:81:b9:0a:26:ab:
7e:91:b7:e1:e4:5e:fb:6a:6e:6c:cb:05:29:2f:ae:ea:fb:a6:
97:40:c9:55:30:5a:ab:a2:46:e7:38:bd:56:09:cd:64:f5:ad:
e9:4a:9a:48:5a:87:d8:48:84:69:31:61:4f:09:4c:f2:3f:f1:
3b:03:0e:4c:bf:14:ec:76:0e:c6:4a:5a:a7:77:4a:6b:10:6a:
91:76:c6:bf:0f:e3:d0:3b:c4:20:0f:a8:4c:ae:5e:9b:d3:8f:
5b:d7:60:eb:71:56:8c:9e:e8:ab:5e:37:f2:46:f2:e5:18:db:
ec:24:5f:c1:63:8e:31:5e:02:68:a5:25:22:2d:b8:d3:09:1a:
75:59:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 18:42:22 2026 by rpki-client