Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File: K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier: XvtfF7FfT6QluwGfiqyN8++XLkDO250Fuy4eRhOppNU=
Subject key identifier: A9:4C:C7:E7:51:6C:14:EC:B7:A9:D7:73:95:21:D2:B1:06:BD:7A:33
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial: 019F916C5EBEEFD78BD4DD92125EE65AFBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 00:00:26 +0000
Manifest this update: Fri 24 Jul 2026 00:00:26 +0000
Manifest next update: Sat 25 Jul 2026 00:00:26 +0000
Files and hashes: 1: E42ALr85hzHjr7r_9Z5V7NF6a-8.roa (hash: bMH2/YzfTbpse+/akM+4A9X/Bsc5TxJJDbOgKDKeGaQ=)
2: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: jiKGfMOElQQYLq3BgvF8mcW9eagw2qvypNEDxRzGg5o=)
3: Or9-McsdINXpd2AfMY8CRkBHo-c.roa (hash: Hm0aM5yCfz8g6AbodNDmMSYxdlDqVNZ0I10ycbk2bPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:5e:be:ef:d7:8b:d4:dd:92:12:5e:e6:5a:fb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Validity
Not Before: Jul 24 00:00:26 2026 GMT
Not After : Jul 25 00:00:26 2026 GMT
Subject: CN=a94cc7e7516c14ecb7a9d7739521d2b106bd7a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3b:0b:b7:e8:d6:be:7c:58:76:2a:ad:82:b3:
5e:31:83:e2:69:87:7e:3b:b5:7e:68:fc:30:90:ec:
f6:1b:ed:0c:77:ac:92:4a:b0:9e:ac:dc:72:42:ee:
33:95:e9:74:59:b6:5e:07:c4:38:d8:51:41:97:a6:
04:db:65:8f:d4:4b:5e:58:18:e0:97:0a:e1:a3:94:
a0:34:74:e9:5d:64:95:60:05:34:97:0d:54:dc:88:
96:d6:3e:79:87:ac:49:73:ca:00:87:c6:6d:05:28:
e7:0c:0c:1f:85:58:fd:ad:7c:37:74:df:14:03:46:
0d:78:08:f9:1b:e6:88:b1:1f:3d:17:3a:1b:b7:02:
61:49:1a:e1:f8:e0:b3:b5:d5:03:4a:47:69:d6:14:
94:2d:ee:28:79:f8:05:15:c5:8b:39:5e:f3:12:92:
76:bf:7c:c5:00:a1:17:55:f6:dc:d8:6e:88:8b:60:
42:cd:79:e1:22:05:f4:b4:0e:87:8b:61:53:53:ad:
17:f7:ed:a2:4f:d7:3e:55:b1:cc:82:d1:44:b1:33:
22:42:67:5f:17:fd:7d:25:cb:67:2f:9e:15:b5:0b:
8d:76:19:4c:eb:26:21:90:d9:ab:3a:34:15:3f:1b:
e8:69:e6:89:0b:4e:f9:c4:9d:25:ab:ae:8e:d7:a8:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4C:C7:E7:51:6C:14:EC:B7:A9:D7:73:95:21:D2:B1:06:BD:7A:33
X509v3 Authority Key Identifier:
keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:93:b6:d9:25:18:b2:0c:60:7b:52:03:90:6f:30:df:fd:a3:
63:92:e8:92:67:fe:50:ab:5d:88:20:40:5a:1e:12:e0:51:30:
7f:69:69:bf:d8:93:2b:e1:3f:e3:42:ba:9c:c2:05:e0:8b:f4:
49:65:19:f4:47:53:37:0f:3a:77:60:4f:d8:89:6b:59:82:90:
20:8e:cc:1a:e2:c6:dd:77:02:6e:3b:c9:4b:44:f9:53:52:a1:
e9:08:e4:48:74:56:08:87:19:94:2d:95:e0:cb:2d:fe:2d:a0:
88:ec:d8:18:63:6d:00:90:1c:60:f5:8f:6b:6b:bb:d6:5c:d3:
c0:2f:50:42:53:fa:43:d4:75:ef:52:d4:0d:ae:6b:59:8a:f6:
5f:62:8c:d2:fc:6d:1c:1b:f4:94:fb:e7:46:9b:9b:9d:66:fe:
7f:fa:9e:5e:60:a3:92:fb:1b:3e:6d:dd:32:8b:e3:36:34:3c:
04:56:fa:c3:9d:09:d8:aa:96:19:3f:14:81:d5:52:c7:71:fc:
3c:76:b6:95:b3:15:31:d8:37:2a:2e:52:26:7a:c8:ba:71:f8:
2d:e3:2c:35:c7:b8:a4:04:e4:bd:f3:ee:81:9a:35:da:ea:85:
2d:90:7b:d0:7e:4d:ce:45:50:37:c2:9f:6a:a2:24:20:ce:18:
92:06:46:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbF6+79eL1N2SEl7mWvvbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNDllODg0YTQ0MWYwNGI3ZjVlMmVkNDc0YjU4NDdlODMy
MTJiY2IwHhcNMjYwNzI0MDAwMDI2WhcNMjYwNzI1MDAwMDI2WjAzMTEwLwYDVQQD
EyhhOTRjYzdlNzUxNmMxNGVjYjdhOWQ3NzM5NTIxZDJiMTA2YmQ3YTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jsLt+jWvnxYdiqtgrNeMYPiaYd+
O7V+aPwwkOz2G+0Md6ySSrCerNxyQu4zlel0WbZeB8Q42FFBl6YE22WP1EteWBjg
lwrho5SgNHTpXWSVYAU0lw1U3IiW1j55h6xJc8oAh8ZtBSjnDAwfhVj9rXw3dN8U
A0YNeAj5G+aIsR89FzobtwJhSRrh+OCztdUDSkdp1hSULe4oefgFFcWLOV7zEpJ2
v3zFAKEXVfbc2G6Ii2BCzXnhIgX0tA6Hi2FTU60X9+2iT9c+VbHMgtFEsTMiQmdf
F/19JctnL54VtQuNdhlM6yYhkNmrOjQVPxvoaeaJC075xJ0lq66O16imqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlMx+dRbBTst6nXc5Uh0rEGvXozMB8GA1UdIwQY
MBaAFCtJ6ISkQfBLf14u1HS1hH6DISvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzBub2hLUkI4RXRfWGk3VWRMV0Vmb01oSzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hZjUyOGMtZmY0MS00ZWVmLThhOTMt
NDJkZDk4NWNkN2IwLzEvSzBub2hLUkI4RXRfWGk3VWRMV0Vmb01oSzhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hZjUyOGMtZmY0MS00ZWVmLThhOTMtNDJkZDk4NWNkN2Iw
LzEvSzBub2hLUkI4RXRfWGk3VWRMV0Vmb01oSzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJO22SUY
sgxge1IDkG8w3/2jY5Lokmf+UKtdiCBAWh4S4FEwf2lpv9iTK+E/40K6nMIF4Iv0
SWUZ9EdTNw86d2BP2IlrWYKQII7MGuLG3XcCbjvJS0T5U1Kh6QjkSHRWCIcZlC2V
4Mst/i2giOzYGGNtAJAcYPWPa2u71lzTwC9QQlP6Q9R171LUDa5rWYr2X2KM0vxt
HBv0lPvnRpubnWb+f/qeXmCjkvsbPm3dMovjNjQ8BFb6w50J2KqWGT8UgdVSx3H8
PHa2lbMVMdg3Ki5SJnrIunH4LeMsNce4pATkvfPugZo12uqFLZB70H5NzkVQN8Kf
aqIkIM4YkgZGVw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:32 2026 by rpki-client