Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: 9dJUaUy5HW5zDSatzWwVv5Xik/7jyYu5l8Wne1+juac=
Subject key identifier: AC:4B:25:AB:56:78:46:52:35:B8:06:F1:F1:34:60:BD:10:7D:32:F8
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 019D2884901D6C56729496B849338CBBD875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: 0457
Signing time: Thu 26 Mar 2026 05:01:09 +0000
Manifest this update: Thu 26 Mar 2026 05:01:09 +0000
Manifest next update: Fri 27 Mar 2026 05:01:09 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: MfdgmpyThTJ6r8uj3yu5yuRPfWnSWNJSLv5Yq17wTyM=)
2: OpkXHZIicfHCPvft3PttWRGy66g.roa (hash: EVSEcIRV/V3W58OZOul/52nTZj0iMwsLv/i2q2ZyFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:90:1d:6c:56:72:94:96:b8:49:33:8c:bb:d8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Mar 26 05:01:09 2026 GMT
Not After : Mar 27 05:01:09 2026 GMT
Subject: CN=ac4b25ab5678465235b806f1f13460bd107d32f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:b9:4e:93:81:4a:2f:f6:ae:18:1f:b9:01:
62:9b:05:6e:8d:ee:53:43:b3:a4:ab:e2:53:11:5b:
0b:d2:08:51:03:2f:96:0e:ce:f9:14:4e:c4:dc:4c:
56:a4:0b:1a:0b:81:65:b7:ec:3f:74:f9:bf:45:a6:
be:b6:ce:b3:7a:c6:7d:22:21:85:2f:f1:e9:bf:67:
40:f5:5b:63:37:03:91:1c:dd:af:c7:90:b9:09:c6:
6c:5a:3f:b4:13:ee:44:de:0b:d9:39:0b:98:dc:b8:
d5:4f:bf:68:98:01:7a:e5:c4:c2:0c:a3:ef:6c:f5:
98:52:74:96:16:02:88:d5:ff:52:62:fa:7d:dc:c8:
24:b2:51:08:df:08:a7:9b:d2:af:56:21:d2:08:d2:
18:4d:93:0b:0e:0a:6f:2f:5d:c5:d6:1a:1e:c3:55:
16:a4:89:b0:71:47:8d:c1:27:c9:c0:b0:b0:a1:23:
ee:94:90:a8:83:da:f8:9a:f2:43:a0:d0:fd:a5:2d:
f0:3a:a8:f8:ef:62:a9:aa:f4:36:22:eb:1c:e3:c8:
99:4f:9b:af:f5:56:f2:8d:a2:d4:39:ce:10:0e:b6:
c9:98:39:f4:dd:3c:68:5c:8a:00:6d:e7:bd:80:d4:
01:5f:8e:54:b8:2d:a4:cc:d8:ee:f6:26:05:2b:9e:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4B:25:AB:56:78:46:52:35:B8:06:F1:F1:34:60:BD:10:7D:32:F8
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:15:d4:08:f7:e9:56:0c:9a:88:b5:29:dd:36:a4:63:c0:21:
39:d3:bf:e3:85:74:bf:16:58:59:f8:8a:8e:10:99:f6:ab:99:
3e:bd:ea:62:72:99:cd:5b:b8:7b:70:f5:04:31:ff:85:a0:ab:
9d:42:04:ca:a7:c2:6d:f4:00:f9:89:1b:22:f7:88:7f:a6:45:
f6:a4:95:b5:e7:6e:3e:d5:52:57:b2:67:1c:3c:10:d2:be:43:
72:07:db:ec:9f:5c:4d:16:ad:6c:46:6a:a6:98:b0:af:56:e9:
3e:55:b4:b6:f8:be:15:0e:f2:8a:a6:ce:4c:aa:2a:87:3d:6b:
00:c4:19:9d:92:16:7c:3f:e3:13:04:91:a5:da:55:db:f1:25:
fb:02:dd:17:13:c0:1e:e6:81:3b:91:0a:7a:3e:56:1e:28:fb:
3d:a8:44:8c:e2:cf:98:be:52:87:32:ff:29:e4:ef:ea:0e:cd:
44:c0:7d:66:f6:57:a9:19:5d:15:57:e9:20:f5:37:84:f7:e8:
68:a2:36:c0:d3:49:54:8f:8c:c8:12:e0:a8:57:13:8e:b3:39:
48:c6:af:f3:22:b8:82:ee:e7:c9:0b:e4:ed:3b:ca:60:de:54:
c4:5f:a5:16:25:1d:34:fd:a4:07:f7:91:e4:6c:d3:62:04:d6:
03:0a:5b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:36:49 2026 by rpki-client