Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: 2C0B5eU7UY4SeyoC8IWfJDgAR84ih5NSaQji4UtwNsI=
Subject key identifier: A0:86:12:54:36:42:8B:AA:3C:E6:8C:F1:56:47:51:92:79:E2:A5:73
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 01A0D314E6D831553523C0D26B70CF94AB3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: 063D
Signing time: Thu 24 Sep 2026 11:02:37 +0000
Manifest this update: Thu 24 Sep 2026 11:02:37 +0000
Manifest next update: Fri 25 Sep 2026 11:02:37 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: wwpmArGV9VbibeDdFA9rD0KG+YiAglno6KGTW6fytVo=)
2: OpkXHZIicfHCPvft3PttWRGy66g.roa (hash: EVSEcIRV/V3W58OZOul/52nTZj0iMwsLv/i2q2ZyFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:14:e6:d8:31:55:35:23:c0:d2:6b:70:cf:94:ab:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Sep 24 11:02:37 2026 GMT
Not After : Sep 25 11:02:37 2026 GMT
Subject: CN=a086125436428baa3ce68cf15647519279e2a573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:9d:d5:38:b0:45:fa:f0:c1:ac:c9:40:4d:
d3:81:96:af:80:e7:34:71:54:e6:8f:f8:49:43:2e:
54:32:fe:7c:a4:b2:e1:43:2a:37:cd:92:7c:1c:f8:
82:f8:e7:f1:4b:3e:d2:1c:89:b6:41:34:7d:6f:e2:
57:24:fd:4b:75:c7:88:f3:2c:0d:b3:6e:22:5b:36:
af:b1:56:31:87:73:37:d1:a0:a0:91:6b:9d:d8:63:
07:18:61:64:4e:aa:f1:fb:8c:d8:38:41:0c:bb:32:
c4:ae:7c:ba:2b:24:bc:95:ab:2d:c0:a6:01:1f:6f:
c4:4b:fe:a4:65:2e:97:82:32:2e:0f:e6:22:ef:7f:
f0:70:5e:d4:3b:d1:ee:63:7c:3e:59:d6:f0:65:38:
5b:78:0d:87:fe:b7:b9:fe:71:03:bd:b2:fc:36:65:
ca:10:75:bc:7a:e2:a3:17:4c:a4:9c:df:dd:d2:40:
f2:d6:16:71:f7:2a:6b:e0:c1:3c:cd:d0:99:8e:cf:
3e:68:c8:27:ca:bd:cb:87:ab:6f:b9:d8:c4:45:f9:
f0:10:45:6f:5f:5e:53:b9:e3:28:f1:b7:4e:9e:6c:
10:40:b1:43:b7:36:9e:fd:e8:e1:c3:75:e4:5b:53:
0a:b6:dc:8e:dc:aa:c3:5c:fe:f0:2c:bd:bb:63:c0:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:86:12:54:36:42:8B:AA:3C:E6:8C:F1:56:47:51:92:79:E2:A5:73
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:38:05:8f:fb:f8:d0:14:e4:15:1d:33:d1:db:af:e9:93:d1:
38:6a:15:f6:68:dd:85:86:65:42:62:00:87:7d:75:e1:d9:ad:
d2:bc:e9:be:2b:82:c7:9b:8b:e7:df:38:47:23:63:46:9a:60:
86:11:f4:5f:6c:66:ed:8e:26:0f:6e:6d:c9:d8:db:e8:cc:8d:
37:d6:81:20:2e:89:a6:1e:53:58:19:e0:37:73:fb:22:88:f9:
36:52:aa:31:57:64:15:3e:bb:a2:d9:dc:a4:8b:dd:a4:6f:76:
97:00:bb:03:07:f6:9a:08:a1:f4:06:7c:72:1c:0a:6d:c4:e4:
b1:38:66:60:10:a9:94:8f:63:05:8f:df:0f:df:66:6b:b7:da:
ab:d2:37:a9:4e:04:aa:53:93:13:3a:6b:f8:3d:ae:a8:7d:b7:
c4:9c:92:92:9e:b8:f8:70:9d:fd:f2:e1:74:2d:91:a8:57:c1:
61:f4:38:12:dc:21:45:dc:b9:b3:47:cc:38:6a:81:4e:ce:16:
02:e4:c1:8f:9b:ed:ec:cc:61:f1:f0:4d:7e:00:93:bf:23:65:
09:08:34:e4:1b:c0:27:45:a4:6a:54:bb:d4:b7:15:4a:4a:ba:
94:f8:06:cd:cb:ca:52:3a:0e:2f:97:8b:b9:94:a6:9d:bf:05:
97:b5:58:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:41:39 2026 by rpki-client