Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: +MU/QqIHL3pDX3W5zyqhk5rFgmi9Oghx2Mjp5LoubpQ=
Subject key identifier: 32:0C:AF:41:CC:3A:E1:24:E3:74:B4:99:54:C1:68:A4:70:71:1B:9B
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 019E1DC749C5083DA01788976944425F5740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: 04D6
Signing time: Tue 12 May 2026 20:01:00 +0000
Manifest this update: Tue 12 May 2026 20:01:00 +0000
Manifest next update: Wed 13 May 2026 20:01:00 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: sKFKjbhqctEv/mQ/LWO8squxtpGd0MgGRxi2mJNhVzs=)
2: OpkXHZIicfHCPvft3PttWRGy66g.roa (hash: EVSEcIRV/V3W58OZOul/52nTZj0iMwsLv/i2q2ZyFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:49:c5:08:3d:a0:17:88:97:69:44:42:5f:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: May 12 20:01:00 2026 GMT
Not After : May 13 20:01:00 2026 GMT
Subject: CN=320caf41cc3ae124e374b49954c168a470711b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:20:46:9f:4a:cc:1f:ed:72:84:6b:78:b3:
42:20:a7:22:9f:2d:d0:cc:ec:c6:f7:aa:5f:71:9f:
6f:f7:d5:95:26:40:b3:75:b5:5b:af:98:9d:73:44:
69:10:ac:c5:36:7f:ec:50:38:92:8c:c4:e7:7c:7f:
db:fc:07:54:12:d1:63:a2:91:7a:c3:f0:fd:2f:7f:
b8:81:1e:b9:86:ca:43:ef:35:f7:90:df:d2:ed:7a:
39:86:0d:67:21:45:4f:9d:c6:10:40:8e:2e:c2:76:
7b:57:b6:4c:9e:97:2b:80:e6:60:40:5a:8b:97:05:
1b:dc:97:59:b9:cc:bb:5e:2c:c4:bb:72:33:a1:c0:
bc:19:ed:d1:83:69:aa:35:f1:eb:0d:a5:2b:96:b9:
09:c7:65:34:2a:a9:14:61:55:3d:7d:b9:89:84:bf:
d1:e2:f7:90:72:c4:ac:66:4b:74:9f:94:21:46:44:
7f:e7:a7:e9:8a:ac:e3:e3:2d:ad:21:dd:82:00:94:
ce:02:20:6f:cc:cb:6d:a4:b6:93:e0:43:2a:b3:96:
0c:98:e2:0b:7d:33:40:fa:ef:96:d2:b5:f4:83:98:
9a:6f:48:a3:b4:8d:fc:0f:73:2c:84:07:9e:ed:4c:
c6:10:7b:37:ae:55:08:49:94:1e:4a:9f:04:2d:2b:
8e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0C:AF:41:CC:3A:E1:24:E3:74:B4:99:54:C1:68:A4:70:71:1B:9B
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2a:b6:e8:e6:ea:86:4b:48:c4:6e:61:87:1c:a0:f1:22:47:
6a:ec:ea:fc:d0:34:ce:43:9b:e3:b0:c5:ef:58:d7:f9:11:f2:
8f:28:b2:5f:0f:80:03:6e:26:d2:6c:91:ff:87:ec:4a:be:83:
73:cc:4a:cb:ca:7a:65:9c:11:99:0e:61:41:85:13:ee:91:67:
2b:64:43:e8:c3:0f:06:fe:2b:f3:d1:f4:01:b3:85:2c:f9:46:
2a:47:fd:e0:c3:ba:6e:13:b0:13:86:03:a0:27:58:cf:13:c2:
81:85:4a:15:19:74:3e:4e:22:f0:79:b6:e2:a8:bc:e4:ea:5e:
a8:0b:98:8e:b7:0d:00:d2:18:6e:1d:a4:52:b7:39:a0:be:c8:
8a:44:49:2c:1c:8b:d3:c4:5b:e7:1d:0d:0d:a4:12:ed:13:6f:
87:34:6c:c6:ac:8e:36:4b:7e:25:22:c4:10:53:1b:66:27:9e:
3f:94:76:85:c2:7d:6f:e4:49:71:9a:56:10:3b:fe:60:66:5f:
d2:12:1d:b1:3f:6a:15:37:04:25:f1:22:9e:44:e3:18:28:e5:
cc:18:ab:7f:23:72:5d:55:7f:a5:47:4e:eb:a4:6b:38:d5:bd:
4e:b7:c3:4e:46:47:a1:f1:7a:d7:ce:71:f1:0c:f9:a6:af:9f:
8b:dd:9d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:26:27 2026 by rpki-client