Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
File: K2nm32CJ1NhhNocX6mbnthbHkMk.mft (raw, json)
Hash identifier: I+eUIXCj3f9BXxEEWeW3xeAjPQd+AfFIIwrj6c9HIl4=
Subject key identifier: 09:22:F1:47:2E:C6:03:88:C8:2E:07:2E:1D:2E:01:4F:17:33:D9:EC
Authority key identifier: 2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
Certificate issuer: /CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Certificate serial: 019F90916CF635853D5893AD378947AFF535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
Manifest number: 0596
Signing time: Thu 23 Jul 2026 20:01:17 +0000
Manifest this update: Thu 23 Jul 2026 20:01:17 +0000
Manifest next update: Fri 24 Jul 2026 20:01:17 +0000
Files and hashes: 1: K2nm32CJ1NhhNocX6mbnthbHkMk.crl (hash: ix7MutPV0wWz+23OiB169INUgvacUSTTT3bGtejz/Mw=)
2: OpkXHZIicfHCPvft3PttWRGy66g.roa (hash: EVSEcIRV/V3W58OZOul/52nTZj0iMwsLv/i2q2ZyFTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:6c:f6:35:85:3d:58:93:ad:37:89:47:af:f5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69e6df6089d4d861368717ea66e7b616c790c9
Validity
Not Before: Jul 23 20:01:17 2026 GMT
Not After : Jul 24 20:01:17 2026 GMT
Subject: CN=0922f1472ec60388c82e072e1d2e014f1733d9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:65:38:6d:ba:01:14:5b:35:51:30:85:d5:
08:e2:46:e5:7f:b8:d2:8e:a5:09:2e:77:f7:6b:a0:
32:c9:42:45:db:5e:52:25:4f:90:69:40:b7:c9:ef:
1a:33:a5:9a:15:12:a4:b0:14:5d:24:70:ac:10:4e:
9a:51:a3:f4:cd:92:4f:e9:34:2a:7c:45:18:f9:f3:
8a:91:0c:5f:1d:6b:24:8a:17:e2:3f:72:d4:43:44:
ed:2d:3d:f1:bd:88:39:a6:32:a3:85:9e:ff:96:b6:
08:5d:fb:4b:bf:2b:a7:f8:0f:07:7e:24:d1:3a:f5:
3e:13:9d:22:0e:39:c7:e1:64:c0:a9:a5:0e:24:67:
89:91:72:a9:3c:e5:37:54:e3:bf:2a:7a:fb:ee:dd:
36:ad:52:cf:bc:26:22:f1:1e:69:40:a7:01:ff:81:
56:bd:98:14:d0:b2:d2:ff:3a:68:a4:16:dc:2e:8e:
7e:db:c6:1f:eb:0c:40:a8:49:e6:f5:03:8b:98:a0:
df:1c:62:75:e4:87:4c:1c:cc:cd:b6:21:a8:23:5e:
69:c0:07:08:fd:e3:34:60:7f:c9:70:8f:8c:a2:b5:
39:88:af:e2:f4:30:68:25:a7:93:60:3e:af:7c:d0:
66:3e:ea:c6:20:af:e5:8b:32:88:38:03:17:86:ea:
55:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:22:F1:47:2E:C6:03:88:C8:2E:07:2E:1D:2E:01:4F:17:33:D9:EC
X509v3 Authority Key Identifier:
keyid:2B:69:E6:DF:60:89:D4:D8:61:36:87:17:EA:66:E7:B6:16:C7:90:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nm32CJ1NhhNocX6mbnthbHkMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c8dadc-8e27-4bbe-aee5-05b3e431c1ea/1/K2nm32CJ1NhhNocX6mbnthbHkMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2c:b1:14:55:83:df:09:cc:ca:4b:37:68:ee:2a:4b:30:5e:
93:d7:2c:60:47:09:d5:98:99:ed:d9:3a:29:dd:bf:a1:ab:d2:
2b:c7:69:5b:6c:43:0f:bd:b1:32:dd:e9:15:cc:ab:4c:c2:26:
2e:4f:31:48:b8:f7:69:2b:8b:5b:ef:8d:7a:09:cd:64:cb:6a:
24:f8:56:64:b1:bc:2f:c7:db:3b:58:47:73:cd:f9:1f:9b:95:
46:05:6a:e7:d1:b9:d8:4f:dd:19:5e:f2:7e:12:df:be:ad:40:
4e:82:e6:7a:fe:fd:00:ac:e1:ab:1c:df:4d:34:18:c8:dc:b1:
3b:6f:e7:38:19:f7:b9:af:32:32:84:16:c7:6d:49:59:11:4a:
bd:a6:d6:24:e5:24:37:1a:5a:c5:88:f1:b2:11:da:7e:c2:50:
15:8e:59:a5:ba:45:5e:06:f2:33:c0:16:96:93:a3:c8:fe:b5:
89:a1:cf:94:42:13:c3:b2:80:81:6d:d1:3b:70:01:51:e8:70:
3d:a0:3e:6b:27:b8:a2:c6:4d:a7:3b:58:60:13:93:2a:82:ef:
d1:17:a1:27:81:51:b6:15:7b:76:a9:fb:7d:23:a7:4c:a9:ce:
c4:ae:6c:af:e0:9a:2b:6f:0f:f5:5a:2d:84:da:bb:ad:47:91:
f4:49:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:58 2026 by rpki-client