Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File: K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier: Ci1GC/KSUnFhWxNLU4NKovuCXEmU7GNEdIf/1NwSlj4=
Subject key identifier: A5:B9:25:DA:D4:F6:2C:2D:0C:00:7B:2F:02:22:EE:D5:3D:FE:A5:3E
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial: 019D273A8181BED790D99F8F9EB92916574F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 23:00:38 +0000
Manifest this update: Wed 25 Mar 2026 23:00:38 +0000
Manifest next update: Thu 26 Mar 2026 23:00:38 +0000
Files and hashes: 1: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: O2vGX8KlcOTAjueejW0dpigZzfCg608nXdfudaGPP1M=)
2: U4yJmT1ScaT40kywasOQ8O608yQ.roa (hash: 6wuB5jKMzhDthKEXBc2cgRcakDY0stwctJVIuMEfhMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:81:81:be:d7:90:d9:9f:8f:9e:b9:29:16:57:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Validity
Not Before: Mar 25 23:00:38 2026 GMT
Not After : Mar 26 23:00:38 2026 GMT
Subject: CN=a5b925dad4f62c2d0c007b2f0222eed53dfea53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2c:68:b3:6b:b6:e7:23:53:b1:0b:b0:cf:3f:
80:6a:c0:84:42:ff:ec:fd:ae:77:99:82:d5:27:50:
a0:54:2d:62:31:52:ee:f0:78:ed:aa:58:28:85:05:
b2:b9:e6:f9:b5:37:07:a6:96:6f:12:14:59:a1:0c:
ff:4f:4e:c0:e5:81:20:6d:22:bb:73:dd:3b:7d:29:
fd:50:a5:72:35:4b:fc:2b:85:71:23:ec:4b:80:85:
b8:1c:4b:05:38:0a:a4:6e:32:62:8f:dd:ae:72:0f:
72:5c:35:b7:4d:6c:cc:84:e4:03:90:a0:89:23:a7:
2f:d6:b5:ff:0a:8f:50:72:62:7e:02:fa:76:50:ac:
f1:c2:32:f8:91:00:3f:d0:07:fe:e0:e9:51:2c:ed:
74:27:1c:99:ee:65:13:1f:3d:ed:2e:bd:c9:37:a6:
89:d0:9a:95:b0:77:d1:d6:c3:17:68:cf:42:5b:b3:
91:73:d3:9e:4d:b4:b9:6b:b7:5e:1d:67:c8:b7:7d:
ec:cf:dc:a8:22:ac:93:ae:59:34:df:ff:f9:ea:5c:
58:a6:db:e2:90:09:0f:79:e8:ee:9e:23:b3:4f:3c:
56:72:0d:c9:79:2c:a7:5d:4d:26:7c:c7:da:90:c9:
6f:78:a6:0e:aa:25:e0:84:ac:5d:b2:e3:fc:f9:f8:
2f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B9:25:DA:D4:F6:2C:2D:0C:00:7B:2F:02:22:EE:D5:3D:FE:A5:3E
X509v3 Authority Key Identifier:
keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:33:08:69:40:d2:b2:95:34:c2:fe:c7:d0:70:8c:4b:bd:f3:
6c:0e:1f:79:c5:3e:b2:5b:1d:12:2b:31:a6:61:1d:c1:aa:d4:
af:a3:f5:e8:5f:4d:b1:3a:cf:ab:5a:eb:a1:3d:5e:02:14:cf:
dd:b4:41:0e:f3:87:89:61:24:ca:13:db:33:2f:84:f6:49:bc:
dc:7e:e0:46:f4:5b:b4:b5:83:c7:32:38:e9:eb:1d:23:a2:cd:
68:97:d1:4d:bc:8b:c7:03:bc:ad:ae:53:49:a3:b4:06:d9:0f:
fe:bd:6a:0b:f9:cd:81:b1:d7:46:b7:72:e5:98:c9:36:4a:3a:
1d:06:c7:36:b7:84:0e:99:8e:bb:f2:29:61:3a:eb:39:fa:99:
4d:33:dd:51:79:fb:4e:1a:fa:c4:26:f2:26:72:35:da:94:70:
cf:e7:d3:cf:f7:bf:b6:17:99:9e:ec:ac:4d:35:56:fc:c9:71:
af:54:ca:18:0b:32:16:d1:35:b0:ae:31:34:2f:21:63:2d:ec:
32:12:7b:32:14:27:e1:0b:6b:0e:e9:a3:14:b6:91:51:80:2e:
e6:0e:88:e9:b0:d2:53:ba:71:1c:83:97:cb:99:ad:c3:55:16:
bd:af:5e:56:b0:b8:d7:8f:34:78:53:77:5c:e2:19:cf:99:97:
19:c7:25:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:20 2026 by rpki-client