Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier: i0G3xcZphJkEpCQ/hkhohmr9LjK+SI6jT+WSUppR6yo=
Subject key identifier: 0C:4A:9D:83:95:CD:DE:D3:C2:0F:D3:50:46:47:E4:87:BD:1A:C0:58
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 01A0DA5FA80F306923E8AAAAB3304C91C283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 21:01:37 +0000
Manifest this update: Fri 25 Sep 2026 21:01:37 +0000
Manifest next update: Sat 26 Sep 2026 21:01:37 +0000
Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: urY2w9+5TbvjZEIyUMsRqycqS8DYm0ZVGqbbudXXdOM=)
2: zc1RxQ-wCAjo2YyTdgBOf576bf0.roa (hash: vkvB5T6NKTKK2PGToAyqMv7sLiy7bF7pWaJUrDMf/r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:a8:0f:30:69:23:e8:aa:aa:b3:30:4c:91:c2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Sep 25 21:01:37 2026 GMT
Not After : Sep 26 21:01:37 2026 GMT
Subject: CN=0c4a9d8395cdded3c20fd3504647e487bd1ac058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ee:62:b8:25:14:34:c3:c8:94:54:00:21:31:
a6:51:40:37:f1:93:fa:cd:67:9f:95:3e:c4:b3:3c:
26:7a:13:bc:c8:3e:7a:cb:2e:c6:42:cd:0a:71:3a:
46:69:8f:3d:56:28:1f:c3:8b:67:e6:9a:6b:b4:70:
a8:20:08:63:7b:84:4c:b4:84:65:3e:80:19:65:0c:
dd:94:e9:c3:70:35:6e:da:70:a0:7a:c5:ad:2e:ac:
64:d7:24:d0:db:fb:d8:d8:f1:24:80:c5:c0:5b:6a:
7f:a1:fb:cc:bd:77:44:5f:2e:7a:f9:ab:6b:56:57:
e3:58:fc:2e:d9:ea:4e:da:5c:72:14:ef:be:d7:d7:
b5:36:10:28:7f:0f:53:83:16:4e:b8:7a:86:4a:e5:
fa:6f:b0:d6:3e:55:80:0a:54:77:33:43:9d:06:d9:
9b:67:a3:7a:b7:32:ad:d8:d8:48:35:90:c1:cb:0e:
c4:3a:7e:0a:54:40:ad:09:51:ff:9b:49:3b:1c:5f:
8e:3a:a9:e8:36:0f:b0:5a:4e:37:b9:43:e0:c1:63:
90:4b:a3:b4:31:3d:90:84:9a:27:2e:c0:23:11:56:
ff:cc:00:8d:1b:c3:26:81:b5:88:a0:f2:08:a7:84:
d5:04:97:3f:cb:65:66:7c:8f:25:d5:b9:60:89:65:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4A:9D:83:95:CD:DE:D3:C2:0F:D3:50:46:47:E4:87:BD:1A:C0:58
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b7:7a:72:28:6b:a6:32:30:36:e6:5f:95:68:b0:75:fd:2d:
a2:fe:9f:b7:ef:ee:2c:c2:62:3f:32:9c:0c:37:21:5f:6c:b8:
b8:15:37:10:1c:0a:74:3e:3f:99:42:6d:f1:43:47:b0:ee:64:
45:d1:7b:89:d5:45:42:c5:38:d0:0e:2f:5c:29:ad:c0:39:81:
9c:85:f3:38:9b:2e:9d:f5:46:63:f3:e8:aa:13:9d:49:f8:f0:
bd:06:7a:67:31:e3:76:6e:5a:97:04:6d:99:af:d9:34:5c:45:
83:2f:1b:fd:b2:d4:98:7f:f3:dd:6d:03:3f:cf:8a:f2:d4:b1:
40:1c:d9:39:41:44:9b:3a:36:bf:13:3e:2e:9a:40:ee:d5:e5:
4e:fd:0c:6f:51:17:ff:3a:1a:7e:3b:8a:81:f0:53:16:19:dd:
fc:ed:7a:34:0b:b9:b0:c5:0a:b6:33:5f:6a:49:6e:a9:8b:d6:
37:9a:55:87:9e:03:73:e5:99:2c:3f:e4:64:7c:e5:a0:90:35:
97:dc:cf:26:d9:97:4d:4d:e8:db:3c:f4:f5:56:0b:f2:1a:d4:
3f:17:f8:f3:14:a0:04:3d:d3:c2:d9:74:48:cb:68:bb:0b:d2:
b4:9f:c2:7e:96:cb:76:21:2d:e4:66:ec:4f:ab:35:27:9f:21:
4f:a8:62:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:01:41 2026 by rpki-client