Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier: 04vF+DIjyzPY2lYbW5KihAEwOQCYFZomY8rz+nE0Lco=
Subject key identifier: 70:A3:FD:E7:BF:1A:2D:87:CC:6A:E0:FF:B5:B3:7B:7D:0C:AE:75:AA
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 019F93FF646EEB88E75B05FEBA76D700DCF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 12:00:15 +0000
Manifest this update: Fri 24 Jul 2026 12:00:15 +0000
Manifest next update: Sat 25 Jul 2026 12:00:15 +0000
Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: /BmqbCSxsRKX4sCDAHrmOoOlu1nu2cmumt/T0chAptk=)
2: zc1RxQ-wCAjo2YyTdgBOf576bf0.roa (hash: vkvB5T6NKTKK2PGToAyqMv7sLiy7bF7pWaJUrDMf/r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:64:6e:eb:88:e7:5b:05:fe:ba:76:d7:00:dc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Jul 24 12:00:15 2026 GMT
Not After : Jul 25 12:00:15 2026 GMT
Subject: CN=70a3fde7bf1a2d87cc6ae0ffb5b37b7d0cae75aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:be:e1:4d:66:b5:0e:12:ec:75:f0:b9:78:
18:12:91:5d:f6:ae:ba:ee:f6:7b:24:52:5d:38:c9:
c1:06:bf:a8:1a:a3:6f:06:a4:8c:6c:b7:aa:55:f4:
40:eb:37:4f:93:da:bb:09:3f:a7:ee:2f:ce:3c:f2:
58:42:e3:4c:77:b0:77:7d:58:ba:ca:c0:2a:ce:46:
ca:ef:74:46:90:e7:85:58:37:19:45:e8:64:01:3b:
49:f5:39:20:f0:58:a6:03:47:29:b5:32:79:33:51:
5e:0c:ab:64:93:f8:e5:24:5a:4d:f4:3c:18:36:d1:
08:bd:8d:63:77:03:f8:40:6b:f6:08:22:89:e7:6d:
e3:9a:ce:77:d1:7a:88:5f:43:1e:c8:dd:e7:9c:87:
17:6d:f8:7b:a7:76:c3:5e:f3:f0:f2:44:9d:83:4f:
96:80:ec:90:21:e5:82:7c:f8:bc:ef:c6:df:48:0a:
93:86:a4:ca:82:b2:f7:66:bc:6d:42:35:f4:53:b4:
8d:f5:bd:2f:43:3c:f7:2f:29:97:a5:30:ab:0b:e9:
97:30:06:60:e3:d5:7e:62:a0:16:84:9f:c1:07:88:
5a:59:7a:1c:07:01:06:e3:69:c4:58:6c:93:79:8d:
bd:b6:9c:93:42:70:72:f6:f5:94:43:94:73:d1:9a:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A3:FD:E7:BF:1A:2D:87:CC:6A:E0:FF:B5:B3:7B:7D:0C:AE:75:AA
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d4:06:c0:bb:54:1a:f1:97:26:32:dd:71:e6:d0:e5:f8:fd:
af:e4:b6:87:2e:f5:eb:49:f0:50:a3:00:67:eb:62:be:ec:7d:
3c:54:e4:9a:64:17:0e:38:55:c6:f1:24:21:a6:18:c1:10:6c:
28:fb:b8:46:64:d7:de:0b:88:36:d5:16:2d:3a:5e:cb:d2:db:
72:ac:89:35:a2:0e:f6:40:43:49:c4:11:88:54:75:2f:a6:9e:
36:81:c7:47:e2:53:f1:65:81:b3:89:7c:ed:9b:23:b7:e8:70:
56:d1:67:35:66:72:83:a8:01:3f:48:f2:9b:32:25:15:34:2a:
7a:6e:da:0a:88:03:74:2d:06:b5:cf:28:bb:f4:9b:37:bc:94:
30:0a:06:05:58:28:f7:2e:7b:48:a4:59:70:3a:77:f4:7e:dd:
2a:43:52:c0:3c:83:cf:98:b2:7e:db:b5:6e:e1:d8:19:6e:ea:
1e:a2:0e:d9:da:b0:23:f5:e3:59:55:46:28:a4:6e:81:ad:41:
77:65:c8:1d:87:94:2a:8a:e6:5f:db:9e:f6:3d:69:93:bd:c8:
ad:b8:00:f4:2c:d8:b3:21:5e:d9:99:34:f4:3b:9f:af:1f:5e:
e0:35:27:1c:f3:dd:a9:be:95:be:4d:32:84:b0:14:b7:ec:c3:
fa:48:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:24 2026 by rpki-client