
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
File: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json)
Hash identifier: p8NXMelbHjKcNjU833AAdFyS0uczyatk7Wn4k5aLeS0=
Subject key identifier: CB:E7:7F:F2:20:18:70:88:04:1B:62:42:3C:6F:05:7B:63:50:B7:27
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Certificate issuer: /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial: 019D9A75194A53F8B07E0B9E45AC5836C1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
Manifest number: 10A1
Signing time: Fri 17 Apr 2026 08:00:58 +0000
Manifest this update: Fri 17 Apr 2026 08:00:58 +0000
Manifest next update: Sat 18 Apr 2026 08:00:58 +0000
Files and hashes: 1: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: xNHEXlUhZ95ssRWFG00ceyVE0MnqJaje4NaBWSVrs6U=)
2: dbilkSZsjUibJ1NutZ76qJvy820.roa (hash: /oJpuqHaWi4ouiqRZTNCC/b0oRgbkGtlYtRLMPSUMXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:19:4a:53:f8:b0:7e:0b:9e:45:ac:58:36:c1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Validity
Not Before: Apr 17 08:00:58 2026 GMT
Not After : Apr 18 08:00:58 2026 GMT
Subject: CN=cbe77ff220187088041b62423c6f057b6350b727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:55:66:92:13:4c:9a:c4:80:f1:5a:bb:e5:
82:18:24:4c:e8:70:25:d9:f2:0c:fa:27:86:86:4f:
a3:0a:70:aa:51:54:f9:9b:78:90:26:63:15:99:ac:
af:95:20:1e:ec:49:04:75:90:65:bd:9f:31:86:8b:
c0:8a:b0:77:8e:dd:5e:d1:e0:71:e3:9f:b3:72:26:
d2:c6:d9:64:5a:e5:d8:9b:00:9c:55:9f:e5:54:de:
26:81:37:4d:a6:a0:20:51:75:66:2b:70:37:67:4d:
90:62:f7:95:55:82:90:5d:dd:ff:23:17:d1:c0:16:
b5:60:fc:ce:37:a6:ba:d6:10:c9:82:8f:ca:5b:0f:
2c:82:b3:ab:53:2e:50:23:82:09:31:aa:5e:d1:8b:
7f:96:8d:aa:91:95:dc:4d:3d:ac:df:94:7f:c6:27:
fe:b1:81:48:28:d9:0a:ad:e1:69:de:18:e4:3e:e2:
6a:72:d4:2c:ea:6e:28:e7:86:81:cf:96:31:39:0c:
a6:71:67:c8:1b:2f:e8:ee:60:d1:ab:7f:10:cb:91:
49:84:1f:87:42:80:ab:37:bc:05:62:12:d4:96:a3:
44:fe:38:3b:07:13:76:74:41:b1:10:9c:bd:9b:dc:
f8:8c:de:24:8d:e5:95:a5:13:44:a1:71:2a:21:e3:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E7:7F:F2:20:18:70:88:04:1B:62:42:3C:6F:05:7B:63:50:B7:27
X509v3 Authority Key Identifier:
keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:90:15:b8:13:15:e9:42:e1:6e:93:ee:d2:e6:87:a5:6d:28:
6a:5e:74:c7:9a:c4:5b:f0:56:1a:3d:81:27:52:77:fb:23:49:
a3:7c:da:53:dd:38:5b:62:59:67:00:00:18:31:74:0c:3f:1f:
1f:ad:25:40:9e:ce:d5:9d:57:37:af:71:5e:49:12:bf:19:db:
3d:ec:bf:1a:f8:d1:4f:06:8a:ad:0e:fe:f0:b3:8d:e9:f9:04:
d5:d0:ed:a3:f3:03:68:c3:86:a0:0b:be:c3:00:2b:ef:3a:e6:
37:59:83:5c:24:0b:a7:81:7a:03:6b:bf:88:86:6c:b5:4d:5a:
31:f2:1e:b3:27:1d:23:32:75:7b:16:fa:fb:cf:a1:2f:fd:5c:
44:27:e1:b5:36:58:82:db:f8:3d:db:89:42:54:ef:0b:ea:64:
8b:e6:13:52:46:7e:00:04:31:1b:6c:b6:98:ae:1d:01:3e:4b:
02:fc:0c:db:fb:45:14:8d:a5:36:1c:db:af:81:f2:8f:d2:9d:
09:2a:74:9d:bb:27:38:c1:10:51:3a:e6:8d:ee:67:51:70:1a:
a0:7a:05:a0:04:fa:4e:8e:96:97:4e:68:0e:c5:f5:df:6f:1f:
b9:f2:56:a9:51:17:e4:c6:8e:10:06:a3:e7:27:d4:43:b0:c9:
68:48:4c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:58 2026 by rpki-client