Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File: K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier: ODjra3BdQ58rCe+LGHxxF2XrYqp6HD05PmUQABLl2go=
Subject key identifier: 34:81:C0:40:E1:54:57:B2:B1:5B:81:62:DE:E9:58:4A:EC:E5:A3:21
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer: /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial: 019CAB6B001AB381D83062BCD210D5CF9260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number: 1014
Signing time: Sun 01 Mar 2026 22:00:42 +0000
Manifest this update: Sun 01 Mar 2026 22:00:42 +0000
Manifest next update: Mon 02 Mar 2026 22:00:42 +0000
Files and hashes: 1: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: isSVOMrEoixfndIi04UD5Vkz1TBx79uOm45f0rp3t6s=)
2: tpy9FJHevA7odk2TH7YsmtN7UFs.roa (hash: HA5XrfWMN5EyPeGIHUHIkCKTU3wDBfCSNcRoSlAlDv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:00:1a:b3:81:d8:30:62:bc:d2:10:d5:cf:92:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Validity
Not Before: Mar 1 22:00:42 2026 GMT
Not After : Mar 2 22:00:42 2026 GMT
Subject: CN=3481c040e15457b2b15b8162dee9584aece5a321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:a0:91:59:38:7b:55:93:1b:80:f0:18:7b:
0a:fe:04:f4:bd:06:cf:9b:5c:af:44:7e:29:b4:22:
29:7c:e4:d7:58:c6:cc:a0:a3:57:a7:28:7f:e2:7f:
d4:37:7c:71:8d:6c:3b:52:60:38:8a:6f:66:39:06:
8b:d5:09:20:3e:b3:c6:36:28:a6:c9:04:86:50:eb:
58:48:76:46:ea:39:ad:c1:19:8d:5c:b2:59:6a:d6:
02:78:1e:47:ea:f1:d2:a2:a5:18:16:f7:bd:f2:81:
ad:bc:c1:72:68:19:1d:02:36:0b:5e:c3:87:62:f2:
5b:db:cb:b3:c1:91:f1:32:23:12:db:13:98:48:e3:
74:14:fc:a0:e4:e2:57:e5:9d:e5:13:0f:81:8b:6d:
e8:d7:a4:9b:83:64:8b:30:8b:9d:4d:0d:06:f3:b0:
dd:d6:ef:80:9a:02:54:ca:62:1d:37:ea:39:02:87:
b2:1c:53:b6:e7:d8:f0:27:c1:e5:ee:af:23:6d:5a:
39:b0:a5:45:46:e0:bd:39:79:1c:1a:bf:63:ca:d4:
50:fd:9f:c4:94:37:af:2a:b1:b7:fa:74:b2:5c:16:
11:ad:99:7f:19:04:1b:50:e6:a0:73:c8:df:8c:76:
11:98:cf:a2:34:e4:89:6c:ec:59:07:a9:78:cc:2e:
45:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:81:C0:40:E1:54:57:B2:B1:5B:81:62:DE:E9:58:4A:EC:E5:A3:21
X509v3 Authority Key Identifier:
keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a7:f4:f2:42:a0:6b:7f:cd:47:a4:c7:25:2c:1c:da:77:9c:
31:d6:37:22:e3:13:8c:26:4e:d9:64:3b:a4:7d:89:4b:13:4c:
4d:a9:0c:20:7b:11:ab:5f:29:27:0d:14:86:f0:3e:68:12:3d:
70:d4:86:4d:fd:70:a3:f0:a5:2e:05:fc:96:3a:60:32:77:0d:
6e:47:86:0c:a8:a2:0b:a6:2f:c6:8e:95:05:f1:a0:14:3c:12:
1c:39:d0:cd:9f:6b:d8:08:ff:ee:a8:cb:ba:67:33:9e:db:e9:
b5:a6:b4:4f:17:4e:6b:e3:3e:9a:19:ac:86:a2:f3:08:d2:78:
93:e1:0d:23:43:dd:2f:57:5b:6c:cb:af:23:fa:5d:21:f1:3f:
a1:87:1d:ef:c1:01:88:eb:69:0a:0a:4d:b9:6e:28:2d:a4:a2:
74:f2:6e:75:fc:a6:8d:6e:66:3a:ce:26:81:fb:bd:fe:a6:0c:
b5:04:0d:a5:2d:e6:79:7d:d1:22:0c:48:4e:65:07:08:91:a4:
3d:c7:31:25:c7:e3:19:a6:a6:51:4e:1e:05:32:e4:40:a6:60:
ac:17:cf:c4:2d:47:2d:b1:3a:60:e4:29:d1:94:a1:4e:28:12:
d8:9f:8d:48:45:1e:a9:33:71:5c:52:4e:42:10:ce:67:7a:56:
96:2d:e2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:35 2026 by rpki-client