Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier: +pThzI9WF2svlgoBN2LkiySSb8q1itW/XU/ZL7PM9vA=
Subject key identifier: 8C:F7:61:B7:48:54:7A:C9:1C:3F:2A:F8:9B:27:21:87:87:0C:63:2D
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 019E1F4824F0D0EE0E9C8DD0D49A10C8B6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 03:01:21 +0000
Manifest this update: Wed 13 May 2026 03:01:21 +0000
Manifest next update: Thu 14 May 2026 03:01:21 +0000
Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: wIF82cQ9bYXJxv9kSYrjddqXuGg0pOYO+jH83lQ6hAY=)
2: zc1RxQ-wCAjo2YyTdgBOf576bf0.roa (hash: vkvB5T6NKTKK2PGToAyqMv7sLiy7bF7pWaJUrDMf/r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:24:f0:d0:ee:0e:9c:8d:d0:d4:9a:10:c8:b6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: May 13 03:01:21 2026 GMT
Not After : May 14 03:01:21 2026 GMT
Subject: CN=8cf761b748547ac91c3f2af89b272187870c632d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:f4:7e:c9:f8:47:1f:30:14:c5:2c:f2:8b:
cb:1d:48:52:03:5c:87:b2:95:c7:e1:2c:d0:02:dd:
c1:99:69:7f:77:54:ac:58:14:05:9a:e0:4e:a5:10:
6c:b7:8f:a8:de:78:92:12:b7:6e:27:20:3a:37:a2:
7c:ec:21:9f:81:52:51:0a:e2:8d:94:54:f4:bb:b4:
66:56:54:87:4c:09:4c:1b:56:ff:b3:f2:82:da:86:
f8:6f:85:9b:10:42:79:19:9a:66:33:51:6e:d0:11:
ab:93:bd:f0:10:d2:72:1d:c0:b7:7d:91:a7:db:d1:
2b:f8:91:e5:17:9a:3b:c8:48:59:04:21:b0:3b:6e:
52:a0:7a:a8:66:b0:61:81:00:65:99:5d:1c:fb:ed:
81:31:c2:94:36:fe:71:a7:a2:e4:ac:c0:a3:81:e8:
59:b3:a3:9a:9d:30:9c:86:54:fb:28:0f:cf:3c:ac:
78:f8:e3:de:1a:ee:06:aa:0f:2a:e1:ff:b8:44:c4:
df:8c:c5:dd:d2:a3:af:0f:e9:eb:4b:9b:87:7e:62:
09:0b:80:5f:9a:80:39:fc:7b:2f:47:29:01:d9:91:
cb:7f:13:2b:13:0e:29:18:dd:46:a2:e3:c8:59:12:
2d:cf:d8:33:ce:02:b3:e3:23:25:9a:0d:f4:73:3d:
4e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F7:61:B7:48:54:7A:C9:1C:3F:2A:F8:9B:27:21:87:87:0C:63:2D
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5c:d7:b9:df:f2:49:c1:db:03:26:49:3a:79:2d:87:b8:a5:
ad:77:e0:70:28:71:90:f8:d1:c9:be:7f:94:c7:90:e5:33:77:
6c:14:6f:0c:6a:bb:9d:ab:5d:b3:29:70:98:97:5a:f1:94:9e:
cc:46:7e:54:73:63:31:ca:4d:1c:1b:57:6f:ac:49:83:d8:1a:
cc:06:22:d4:c5:32:47:ab:85:68:95:86:ae:84:eb:6d:ea:6e:
e5:3d:5b:38:78:b7:ba:36:d2:b9:07:0a:d6:a7:82:f8:1a:3a:
f4:48:d5:f7:c9:04:6a:72:59:a4:d4:b0:23:70:6c:31:ff:de:
d6:a4:72:a4:e6:90:12:e6:7d:bb:09:e6:09:f6:e2:5a:09:21:
18:44:6a:dd:38:82:ac:e6:a7:1f:30:03:f0:f1:ae:44:ca:3d:
e2:4f:05:57:e5:4c:18:71:9d:7e:a3:62:3b:9c:8a:05:42:e1:
a2:70:40:ad:ff:7e:1c:c8:3c:31:d1:58:31:09:c8:a6:ba:71:
f3:61:1a:f6:a4:44:93:53:3a:b5:ce:fb:10:14:3f:d8:87:42:
3b:3c:30:21:cf:b1:72:d6:a1:a2:73:cc:84:0b:97:6f:9e:29:
d5:46:68:1c:c7:df:ed:e6:0b:94:4c:45:88:f2:74:2b:5e:04:
73:5f:98:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:22 2026 by rpki-client