Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
File: k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft (raw, json)
Hash identifier: ZS400IIyvvvCRK0DnSdgTAGZKdNO4jCPqm5qp42IAoE=
Subject key identifier: 46:FC:D0:70:2F:13:A2:EC:14:31:99:3C:56:B1:5C:2E:DE:5C:DF:D9
Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
Certificate issuer: /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Certificate serial: 019E1EA3E227E1F23BE516C70797A3661C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
Manifest number: 10A3
Signing time: Wed 13 May 2026 00:01:57 +0000
Manifest this update: Wed 13 May 2026 00:01:57 +0000
Manifest next update: Thu 14 May 2026 00:01:57 +0000
Files and hashes: 1: 4vfCRtoiH1cndLSB-TTpHJwhG_I.roa (hash: 09h5AAcqogX7HNRV00Ls3XC8qozaIbuTMOkY1F7yq6o=)
2: k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl (hash: FjgTfulrn/6VaD7d6kiUTY/931ckD7i8tR//uFyOQks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:e2:27:e1:f2:3b:e5:16:c7:07:97:a3:66:1c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Validity
Not Before: May 13 00:01:57 2026 GMT
Not After : May 14 00:01:57 2026 GMT
Subject: CN=46fcd0702f13a2ec1431993c56b15c2ede5cdfd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:9d:de:c1:12:3d:ec:1a:3a:65:07:18:70:
11:e8:77:2c:0e:12:1b:11:c2:1d:e3:bd:61:30:0b:
5c:82:6c:39:1c:8e:bf:5d:89:69:26:9a:05:96:e1:
98:6d:82:8b:73:f6:f5:86:44:07:67:9e:b6:05:ee:
10:dc:7c:9a:a8:17:4d:e3:ad:b4:4a:fe:cf:0d:85:
6a:cd:6f:24:c6:9a:0e:cc:6b:07:cd:ee:db:33:3d:
86:6d:28:e1:9b:f7:e9:86:c3:d2:33:91:ed:96:32:
2f:56:e0:71:98:69:66:e6:92:73:a7:dc:31:f1:13:
2d:ee:ae:bc:f9:94:d8:ec:63:0a:b2:b8:19:59:50:
66:69:1f:e7:82:6a:72:36:91:9d:4f:1d:f5:df:b7:
a7:d8:2d:13:96:4f:0e:c6:5c:d7:42:c9:2c:fb:1a:
2d:33:a9:ba:f5:57:4e:82:f1:a4:65:ed:60:c2:96:
3a:21:7c:b7:d6:43:66:73:50:ea:6e:69:f1:09:12:
c8:04:71:93:33:94:82:07:9a:bd:79:82:5a:37:68:
4e:26:af:16:b2:b6:bd:1e:11:5b:e1:3a:32:66:58:
0e:d0:5f:cf:ca:57:87:7a:f2:61:3e:1d:ab:be:16:
7b:66:ca:c5:4d:52:73:5c:5f:0f:68:3d:dd:e9:fe:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FC:D0:70:2F:13:A2:EC:14:31:99:3C:56:B1:5C:2E:DE:5C:DF:D9
X509v3 Authority Key Identifier:
keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:86:0e:9d:d9:28:9e:74:da:cf:f4:79:1a:66:c4:a9:fa:7f:
cd:09:96:a6:81:8b:6b:fb:fc:77:43:cb:64:b1:4c:20:37:49:
f2:8a:d9:02:20:f0:21:18:51:59:b9:eb:4b:bc:b3:12:6e:09:
7a:19:65:4d:5c:d0:d4:32:55:1b:c2:97:92:cc:c5:7f:62:3a:
3f:34:11:d3:a2:47:fb:72:e3:91:bf:ec:dc:21:b0:d2:47:8f:
f0:33:cc:66:9a:13:a6:a5:ab:66:e5:c4:b6:3a:f1:69:47:35:
7a:dd:78:f0:b4:af:e4:43:09:2f:30:b1:ef:b3:59:09:05:b4:
f4:aa:52:2a:d1:33:57:64:e1:25:13:63:70:ed:88:a4:1e:98:
0a:7c:e9:a2:54:46:1e:dc:9c:b6:9b:66:a9:d3:60:8e:7e:d6:
ce:3a:b5:1b:17:c4:6a:c6:6a:77:a5:7a:b3:31:5e:d2:ea:2a:
52:92:71:cf:15:15:f0:8a:46:4f:23:0e:07:89:b5:e2:c9:92:
13:f4:cb:8d:8d:16:e1:82:65:ff:6a:b7:ed:6c:c5:64:b2:4f:
bb:81:4c:71:e5:e5:fe:80:48:f1:1a:80:72:df:c9:24:cb:3b:
0f:61:39:23:3f:14:ea:54:a5:e2:2f:38:ed:37:4f:92:fd:29:
43:8e:fb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:45:42 2026 by rpki-client