Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
File: k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft (raw, json)
Hash identifier: lhmOhp/swTY3udX3LipVfP5wg9idRDKP3wzqIeTaG20=
Subject key identifier: 93:B8:5A:B4:A9:E7:DD:3A:57:2E:5D:4E:8C:DE:50:E7:A2:29:8C:C3
Authority key identifier: 93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
Certificate issuer: /CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Certificate serial: 01A0E17556C551035A798E225A8BF8584DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
Manifest number: 1211
Signing time: Sun 27 Sep 2026 06:02:38 +0000
Manifest this update: Sun 27 Sep 2026 06:02:38 +0000
Manifest next update: Mon 28 Sep 2026 06:02:38 +0000
Files and hashes: 1: 4vfCRtoiH1cndLSB-TTpHJwhG_I.roa (hash: 09h5AAcqogX7HNRV00Ls3XC8qozaIbuTMOkY1F7yq6o=)
2: k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl (hash: kUuJn3Heq+QrsGJ/lbFv1oIBaQszPCscFtu/6hy3U8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:75:56:c5:51:03:5a:79:8e:22:5a:8b:f8:58:4d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93608a0cda0133f876ab9ad83fa37bcef62df2df
Validity
Not Before: Sep 27 06:02:38 2026 GMT
Not After : Sep 28 06:02:38 2026 GMT
Subject: CN=93b85ab4a9e7dd3a572e5d4e8cde50e7a2298cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:3e:fd:45:3a:e9:26:c5:58:09:7e:58:35:
51:af:eb:72:73:02:ff:03:82:54:42:1e:03:64:f9:
b7:08:4b:fe:db:cf:fa:17:32:b9:c3:1d:b6:f7:6f:
c7:46:67:a1:de:f8:0d:f9:24:2c:e7:73:28:06:ba:
a1:da:41:8f:84:47:1b:17:21:a1:ee:b4:61:5e:a2:
4a:d9:59:07:d6:b4:6f:4f:1a:52:93:d7:47:20:bf:
4b:68:9a:d9:59:f5:1e:27:5b:b8:5e:46:1d:3c:ea:
e7:3a:9a:cd:90:f1:ae:9a:a1:44:33:f6:93:80:f1:
aa:af:08:74:85:8d:bf:30:08:18:aa:52:25:8d:2e:
c8:57:6a:2e:e5:ee:59:51:89:1d:01:81:f5:1f:ff:
a6:6e:3f:0f:ac:47:b0:41:97:5b:8f:0e:76:8e:fd:
be:d0:2f:00:01:7b:a4:dd:a9:8c:af:5e:df:8d:74:
da:13:b5:d4:1a:7c:aa:52:4c:d2:76:cc:f4:75:a7:
d3:0f:39:5f:50:42:15:5e:09:b3:bf:8d:3f:a7:70:
85:81:24:9c:3d:99:7b:0d:ed:cc:6a:9b:8e:94:d3:
4b:a7:c4:df:51:68:8d:bd:29:ca:01:d2:b0:fd:14:
35:23:10:72:a1:fc:1f:f5:a3:da:7b:5e:44:7e:f9:
36:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B8:5A:B4:A9:E7:DD:3A:57:2E:5D:4E:8C:DE:50:E7:A2:29:8C:C3
X509v3 Authority Key Identifier:
keyid:93:60:8A:0C:DA:01:33:F8:76:AB:9A:D8:3F:A3:7B:CE:F6:2D:F2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2CKDNoBM_h2q5rYP6N7zvYt8t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08cb2a-034b-47b6-b132-7f8ba96f5e49/1/k2CKDNoBM_h2q5rYP6N7zvYt8t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:88:a8:91:38:2d:ed:cc:f2:aa:07:d8:94:8b:79:0c:e6:4c:
6c:fc:ab:c5:29:80:80:0f:da:1d:e8:3a:70:8d:b5:f2:5b:b0:
62:18:eb:73:3c:b1:42:11:90:78:2a:5b:cf:a3:34:da:18:bd:
83:07:88:03:6e:34:1b:4e:eb:41:8e:35:21:bb:6a:c4:4d:11:
6c:58:96:53:25:5c:5b:c4:94:53:05:bd:18:e6:d4:f1:7d:d5:
e6:e2:f3:f1:ef:0f:08:9e:31:63:9c:df:ff:10:52:86:be:41:
46:81:b3:8d:88:68:1e:f1:40:5b:5a:ef:5e:1b:85:f2:e6:ce:
f8:3b:63:50:b6:7e:5d:a1:b5:c4:09:e1:db:16:c9:ca:be:e5:
6b:60:d1:31:a9:9d:af:11:9d:5f:aa:76:69:01:f9:ed:27:45:
d8:6b:c8:d1:71:e5:7b:c8:36:f9:45:63:33:b6:36:04:ce:ae:
a6:47:8f:59:be:04:1a:fb:bc:3c:d5:66:1a:25:bc:66:53:74:
c3:d0:5a:f0:60:04:d3:59:90:e7:e9:b6:30:0c:80:a7:0a:94:
78:67:f3:73:aa:0f:71:73:80:da:23:f2:99:89:92:f9:54:a5:
02:54:37:65:e6:b6:72:61:8f:93:56:18:71:7c:e8:fa:55:e7:
e2:96:16:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:53:12 2026 by rpki-client