Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File: K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier: AxP326qTfySDHuG/tRBb1e4WGT57k2AmZlOAopumIXI=
Subject key identifier: 72:18:96:C9:32:74:3A:DC:17:10:68:90:67:39:DB:57:1A:05:36:38
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer: /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial: 01A1152AE69ABDAA4F0BA1CCFE5223A442CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number: 125D
Signing time: Wed 07 Oct 2026 07:01:35 +0000
Manifest this update: Wed 07 Oct 2026 07:01:35 +0000
Manifest next update: Thu 08 Oct 2026 07:01:35 +0000
Files and hashes: 1: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: B+y+nQJ/P5rfT/NcjTOF+exuxZ+qyDEZa/I3D5yZ7gA=)
2: tpy9FJHevA7odk2TH7YsmtN7UFs.roa (hash: HA5XrfWMN5EyPeGIHUHIkCKTU3wDBfCSNcRoSlAlDv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:2a:e6:9a:bd:aa:4f:0b:a1:cc:fe:52:23:a4:42:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Validity
Not Before: Oct 7 07:01:35 2026 GMT
Not After : Oct 8 07:01:35 2026 GMT
Subject: CN=721896c932743adc171068906739db571a053638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:0d:72:7b:bd:e2:7a:37:64:85:0a:bb:82:
a7:3b:99:06:bb:88:0d:ab:7e:e6:de:12:93:b3:fc:
df:b6:4d:23:6c:a2:f3:5b:b5:1f:9b:1a:2d:9a:9c:
b3:0a:68:17:d7:cf:be:4c:4a:6d:f5:37:11:75:a6:
53:76:e0:e0:8b:33:a6:82:f0:a0:2c:44:87:4e:6e:
92:7f:98:17:2c:89:90:ee:87:62:31:91:1a:54:f5:
d4:95:6f:de:f3:46:be:9f:c7:67:6f:d7:bd:87:13:
ff:a3:54:96:9c:d5:4d:93:5b:53:49:a8:27:3b:4d:
18:80:a7:8d:c1:d2:e8:10:ca:7c:93:51:c7:e1:41:
4e:18:eb:0d:96:5a:3c:92:37:04:70:e1:02:c4:e5:
c3:5f:be:4e:08:f9:a4:5b:83:d9:68:8b:43:7d:b5:
28:bd:f5:25:f4:c0:d2:8c:c9:5a:4e:e2:6a:55:b5:
99:cf:56:79:37:b3:e8:87:ca:8b:81:71:b2:f7:b8:
71:b0:32:f5:7e:1b:f8:31:0f:3f:ac:9d:8f:7e:13:
f7:77:08:25:c5:86:42:fa:b0:f9:c2:0f:e8:f8:6e:
1c:32:ff:fe:83:e3:22:5b:38:4d:e4:13:62:3a:6c:
32:4a:a2:ca:90:23:ee:4b:fa:0a:d6:ad:f2:53:80:
53:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:18:96:C9:32:74:3A:DC:17:10:68:90:67:39:DB:57:1A:05:36:38
X509v3 Authority Key Identifier:
keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8c:d4:ea:ac:df:6e:dd:12:59:d8:ca:19:e2:ae:60:30:ef:
5e:56:af:7d:e0:73:e6:f2:d7:67:07:0f:d5:a8:45:4a:46:c5:
72:a6:a6:37:e8:bd:f9:ac:1e:9d:db:ba:0a:76:97:23:4b:73:
e6:19:13:30:a5:80:07:48:ce:d9:92:7d:35:61:39:1c:0a:33:
83:e4:78:38:18:67:74:1e:32:e6:e4:ef:1e:5b:f2:5f:90:25:
a3:6b:67:09:71:bb:2d:9a:04:f1:df:90:27:e7:76:53:3f:d1:
e8:9a:70:32:c6:f3:31:99:00:ab:93:4a:b7:33:c8:ff:36:e0:
05:e7:48:d7:26:2f:4b:13:cf:ed:d5:74:0b:54:85:83:ef:86:
f9:16:9a:bb:83:6c:42:df:7f:64:d9:70:f3:9f:05:b3:70:0f:
82:15:fc:65:89:d8:52:6c:90:37:a1:ae:37:00:22:7f:26:6b:
a5:51:80:f7:87:70:61:c1:d6:bc:ed:5e:e5:80:00:f6:0d:20:
a8:e3:08:e4:bd:ca:a2:d7:a9:df:0c:58:a7:6d:8b:b5:13:74:
e5:77:a5:8c:75:8c:09:00:10:f2:d1:16:b5:59:a6:65:58:3f:
e9:84:f0:b6:59:d8:c5:04:12:ec:e6:7d:e0:4d:cf:23:85:90:
00:17:70:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:11:42 2026 by rpki-client