Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
File: k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft (raw, json)
Hash identifier: OY9dyjDrLf6WKOzM8aSik6Z7rSpmY2qDKrzeDZved00=
Subject key identifier: 82:3B:B6:73:2F:E1:EA:25:A7:BC:7B:C9:6A:00:F6:79:D3:2F:66:AF
Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
Certificate issuer: /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Certificate serial: 019D2583DBF2CDA49459C2EBBA6900DA4E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
Manifest number: 1022
Signing time: Wed 25 Mar 2026 15:01:31 +0000
Manifest this update: Wed 25 Mar 2026 15:01:31 +0000
Manifest next update: Thu 26 Mar 2026 15:01:31 +0000
Files and hashes: 1: 4vfCRtoiH1cndLSB-TTpHJwhG_I.roa (hash: 09h5AAcqogX7HNRV00Ls3XC8qozaIbuTMOkY1F7yq6o=)
2: k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl (hash: r0H48QibJkGsoGAibMxZXw8AABcOKxD/bG1e8bRo+Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:db:f2:cd:a4:94:59:c2:eb:ba:69:00:da:4e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Validity
Not Before: Mar 25 15:01:31 2026 GMT
Not After : Mar 26 15:01:31 2026 GMT
Subject: CN=823bb6732fe1ea25a7bc7bc96a00f679d32f66af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3d:52:05:6b:b4:87:f2:77:30:64:c9:98:21:
7f:7e:9e:fe:b1:31:74:b1:bb:1f:66:8b:ae:75:84:
34:09:53:74:95:ee:c3:6f:53:54:d5:72:13:d8:90:
34:ee:53:88:df:af:f3:6e:47:22:37:a8:89:d6:7d:
dc:3f:64:4a:13:59:34:26:37:36:3a:5c:0f:a0:d9:
ea:eb:e7:8b:ed:5b:cb:cf:22:43:2b:fa:8c:b8:77:
d8:68:d7:e7:1a:b9:93:66:b3:d7:91:3f:fc:ba:4c:
71:bb:82:46:e3:96:47:29:db:a5:67:4a:59:81:df:
0f:06:ed:f4:a6:31:5a:b6:eb:30:ce:fa:98:a4:0b:
5f:f8:d4:38:f9:ac:e1:c3:67:b8:92:a9:55:c4:90:
9c:59:0a:3a:3a:47:66:a7:b9:5a:8b:1a:f0:fd:6c:
cd:00:e3:44:91:06:88:3d:6b:b4:d4:26:4d:aa:1a:
81:9d:5a:83:24:30:3c:27:4b:7c:da:d7:a3:7a:d8:
7c:0f:5e:33:2a:3a:5f:18:8d:7a:0c:2a:c3:a9:7d:
b6:9e:7e:00:51:44:7a:e3:17:96:27:bb:07:ea:8a:
20:66:3d:ce:11:a5:d8:18:4e:81:68:d3:69:25:a1:
78:71:c9:58:8d:45:39:3c:80:ac:76:36:72:ab:bf:
45:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3B:B6:73:2F:E1:EA:25:A7:BC:7B:C9:6A:00:F6:79:D3:2F:66:AF
X509v3 Authority Key Identifier:
keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:72:2a:e8:d0:0c:c5:2d:8f:37:37:d4:0a:12:af:5e:27:84:
b6:d2:e8:31:6a:f0:9a:e3:81:2a:0b:47:de:90:77:eb:b2:b6:
8b:c4:b1:e3:b9:39:15:5a:87:8d:a4:5f:61:cb:04:ee:ad:ec:
c6:4c:c8:93:fd:e6:b8:cf:d3:a0:64:bb:cb:ad:40:29:6b:40:
2a:29:47:31:5d:45:13:27:30:8d:00:bf:25:cb:b7:5a:b3:d9:
33:8f:d1:45:90:a7:e2:5a:5d:d0:bd:8b:72:a3:33:37:5f:33:
19:2b:f2:75:a2:ca:c3:39:c2:46:a8:e3:39:02:a6:5d:ef:78:
25:c3:5c:11:03:58:c7:3b:5e:3f:27:3c:be:e8:1c:b9:a2:aa:
4c:c5:f6:89:c4:70:da:86:90:96:88:8e:24:ca:bb:2d:a9:e6:
7e:9b:a1:82:23:b0:00:a2:89:8b:50:9a:1f:59:5a:1f:80:b8:
f5:81:fc:50:80:c7:0a:1e:43:9d:39:d3:a7:1a:d6:e5:ff:34:
c0:6d:70:c0:00:c9:f9:8f:26:82:df:7c:e5:45:74:ab:b2:b1:
1a:9f:95:9f:9f:29:71:79:30:ba:31:84:d9:2d:2f:4f:1e:df:
53:09:cc:a1:21:c7:00:58:13:ea:2e:13:56:79:53:d6:c1:04:
0d:6f:43:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:27 2026 by rpki-client