Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File: K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier: v1+SsEP6pE5Tr85Y/ANrzD8SNx8kfd+cXJWt12+Jh+o=
Subject key identifier: F5:DA:E6:12:74:11:BA:E4:D4:E5:DA:C8:65:24:C2:A4:88:DB:0D:81
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial: 019E1EA3A1B2729C20C4B119CF21E5065A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number: 1904
Signing time: Wed 13 May 2026 00:01:40 +0000
Manifest this update: Wed 13 May 2026 00:01:40 +0000
Manifest next update: Thu 14 May 2026 00:01:40 +0000
Files and hashes: 1: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: TTY2AKTpH8nTDRujYdqioPFcpv0Vj31zbCIXag4brTU=)
2: Or9-McsdINXpd2AfMY8CRkBHo-c.roa (hash: Hm0aM5yCfz8g6AbodNDmMSYxdlDqVNZ0I10ycbk2bPE=)
3: U4yJmT1ScaT40kywasOQ8O608yQ.roa (hash: 6wuB5jKMzhDthKEXBc2cgRcakDY0stwctJVIuMEfhMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:a1:b2:72:9c:20:c4:b1:19:cf:21:e5:06:5a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Validity
Not Before: May 13 00:01:40 2026 GMT
Not After : May 14 00:01:40 2026 GMT
Subject: CN=f5dae6127411bae4d4e5dac86524c2a488db0d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e7:99:aa:5c:cc:20:5a:2b:4d:54:bf:76:9d:
1c:d3:62:69:27:dd:d8:7b:ac:8a:71:8c:3b:6f:81:
bb:40:fe:87:04:59:8a:a2:35:06:6b:d6:27:26:17:
24:48:0a:f3:e6:c0:90:f6:70:b9:8f:37:06:1d:2d:
2f:33:4f:a6:74:c8:71:d8:3c:98:8d:75:49:d2:b1:
d4:d6:20:aa:38:0f:97:09:d3:63:67:ba:33:5a:57:
5c:5d:ea:b6:08:b2:83:f6:11:8e:5c:92:6f:03:b4:
da:95:c5:5e:25:9e:49:79:f4:dd:fe:c9:02:20:7d:
ee:9e:b8:42:ac:27:01:35:84:8c:f7:55:13:a8:2e:
41:0c:27:11:23:a1:a4:aa:1f:67:85:04:5d:5e:bc:
fa:76:f0:7c:19:84:03:5d:60:3b:85:5b:c1:59:4c:
11:c7:b2:ee:b9:e0:0f:d8:6c:18:bb:9f:23:c2:5a:
0c:ca:05:75:5d:82:09:e7:a5:ad:ae:f2:60:cb:79:
ad:c1:2d:28:87:49:b2:0e:47:b8:21:9b:5f:dc:ac:
1d:5b:05:61:b8:65:11:4f:7c:ef:63:3f:17:95:fb:
33:0e:09:cd:a1:a5:5f:74:64:72:2d:94:9b:cf:97:
7a:04:c6:b8:74:d5:e7:3e:a9:37:40:48:16:77:d8:
2d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DA:E6:12:74:11:BA:E4:D4:E5:DA:C8:65:24:C2:A4:88:DB:0D:81
X509v3 Authority Key Identifier:
keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1c:c5:35:d4:eb:31:ff:44:0b:d7:39:b5:ec:41:b7:4c:fc:
0f:ff:01:d5:aa:b0:c5:0d:80:a5:22:18:2a:da:e8:ca:26:43:
52:93:69:27:ca:6c:97:b9:15:cd:fe:7c:0e:79:5d:c5:5b:6e:
41:ab:6f:7d:4d:38:79:33:b2:da:5f:5c:7c:e7:39:a8:b7:d6:
8e:27:f3:a3:48:bb:8c:70:62:e4:07:00:6c:19:ef:55:cf:b1:
ca:6b:c2:30:ef:62:8d:e5:b0:54:ca:18:37:dd:f9:47:cf:da:
fb:21:f7:ff:42:92:a3:91:59:72:ec:d5:85:23:e3:7c:08:60:
13:ba:06:8e:89:f7:7d:98:b1:96:06:8f:5b:3c:ce:30:90:14:
a1:45:12:7e:e9:ad:7a:f3:ff:c7:91:9f:8f:55:61:d5:68:6c:
5b:f8:3f:4f:81:84:c2:b2:eb:de:0e:87:14:0a:e4:64:da:1f:
01:53:f7:a0:e4:bb:b9:2d:be:f0:75:b7:79:7d:54:d8:cc:ed:
5d:68:83:50:86:07:3a:4c:f4:8c:cf:6c:06:f9:aa:17:73:0d:
50:ad:f9:8a:75:d2:0c:b8:49:43:a1:d7:d8:0a:15:63:69:b3:
1a:18:b1:04:be:b4:88:5a:0f:e3:fe:77:f0:0b:2f:52:03:06:
79:bb:95:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo6GycpwgxLEZzyHlBlowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNDllODg0YTQ0MWYwNGI3ZjVlMmVkNDc0YjU4NDdlODMy
MTJiY2IwHhcNMjYwNTEzMDAwMTQwWhcNMjYwNTE0MDAwMTQwWjAzMTEwLwYDVQQD
EyhmNWRhZTYxMjc0MTFiYWU0ZDRlNWRhYzg2NTI0YzJhNDg4ZGIwZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeeZqlzMIForTVS/dp0c02JpJ93Y
e6yKcYw7b4G7QP6HBFmKojUGa9YnJhckSArz5sCQ9nC5jzcGHS0vM0+mdMhx2DyY
jXVJ0rHU1iCqOA+XCdNjZ7ozWldcXeq2CLKD9hGOXJJvA7TalcVeJZ5JefTd/skC
IH3unrhCrCcBNYSM91UTqC5BDCcRI6Gkqh9nhQRdXrz6dvB8GYQDXWA7hVvBWUwR
x7LuueAP2GwYu58jwloMygV1XYIJ56WtrvJgy3mtwS0oh0myDke4IZtf3KwdWwVh
uGURT3zvYz8XlfszDgnNoaVfdGRyLZSbz5d6BMa4dNXnPqk3QEgWd9gttwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXa5hJ0Ebrk1OXayGUkwqSI2w2BMB8GA1UdIwQY
MBaAFCtJ6ISkQfBLf14u1HS1hH6DISvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzBub2hLUkI4RXRfWGk3VWRMV0Vmb01oSzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hZjUyOGMtZmY0MS00ZWVmLThhOTMt
NDJkZDk4NWNkN2IwLzEvSzBub2hLUkI4RXRfWGk3VWRMV0Vmb01oSzhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hZjUyOGMtZmY0MS00ZWVmLThhOTMtNDJkZDk4NWNkN2Iw
LzEvSzBub2hLUkI4RXRfWGk3VWRMV0Vmb01oSzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhzFNdTr
Mf9EC9c5texBt0z8D/8B1aqwxQ2ApSIYKtroyiZDUpNpJ8psl7kVzf58DnldxVtu
QatvfU04eTOy2l9cfOc5qLfWjifzo0i7jHBi5AcAbBnvVc+xymvCMO9ijeWwVMoY
N935R8/a+yH3/0KSo5FZcuzVhSPjfAhgE7oGjon3fZixlgaPWzzOMJAUoUUSfumt
evP/x5Gfj1Vh1WhsW/g/T4GEwrLr3g6HFArkZNofAVP3oOS7uS2+8HW3eX1U2Mzt
XWiDUIYHOkz0jM9sBvmqF3MNUK35inXSDLhJQ6HX2AoVY2mzGhixBL60iFoP4/53
8AsvUgMGebuVfQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:23:21 2026 by rpki-client