Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
File: K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft (raw, json)
Hash identifier: 0A6DCePlaOT+yyMoDSjMRoRjsqa4HO8RDD3jOI9zuUg=
Subject key identifier: 70:7A:52:80:1A:AF:85:20:0A:97:B0:5C:B5:43:51:4E:CE:A8:66:A2
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 019D26287134AE5F831A8FC818C1C50C6BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 18:01:17 +0000
Manifest this update: Wed 25 Mar 2026 18:01:17 +0000
Manifest next update: Thu 26 Mar 2026 18:01:17 +0000
Files and hashes: 1: K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl (hash: FsDOK6TtuVl7/TGuuCun0/x6lIGKX7FlQS5WeDGmjFw=)
2: zc1RxQ-wCAjo2YyTdgBOf576bf0.roa (hash: vkvB5T6NKTKK2PGToAyqMv7sLiy7bF7pWaJUrDMf/r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:71:34:ae:5f:83:1a:8f:c8:18:c1:c5:0c:6b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Mar 25 18:01:17 2026 GMT
Not After : Mar 26 18:01:17 2026 GMT
Subject: CN=707a52801aaf85200a97b05cb543514ecea866a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9a:5c:45:6d:d8:80:6c:a3:e7:df:fc:4f:75:
02:bd:dd:e7:1b:dc:a2:9e:99:ff:10:b9:67:49:0e:
94:f3:03:37:6e:38:d5:5b:75:62:63:15:f9:41:80:
f3:d5:79:ca:66:d4:a2:5d:17:f0:6d:29:8a:0d:1f:
5b:d7:d2:49:f6:72:43:9b:5b:e4:c6:ee:df:f8:16:
ae:e4:a2:16:d8:2b:62:3b:2d:70:d9:73:ae:81:b4:
aa:d0:c5:c1:69:98:35:a0:86:ce:3e:2d:a9:a7:94:
3a:11:d3:65:d9:4c:4a:87:37:ad:3f:85:06:05:a0:
67:2e:25:f3:22:a8:fd:ea:b7:16:05:22:e5:2f:9c:
b0:a0:15:29:6e:e8:eb:08:fb:2a:d2:bd:ac:59:f5:
b8:d5:87:74:0b:c9:bf:72:c4:ec:c3:64:12:c7:46:
3a:ad:01:91:5c:24:8f:8c:d3:d5:a3:c9:50:e0:40:
37:79:c3:87:2d:f1:a0:53:6c:74:4c:a0:43:0c:db:
dc:8a:ed:c3:b6:2c:aa:84:1d:8e:09:b2:9b:1c:00:
d3:56:12:7e:7a:8d:da:32:a9:d0:d8:b7:69:94:53:
1f:89:c7:78:90:67:36:04:06:d3:43:b9:b6:7a:23:
0a:10:bc:be:f4:bf:ba:86:4d:c9:8b:8c:9c:65:02:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7A:52:80:1A:AF:85:20:0A:97:B0:5C:B5:43:51:4E:CE:A8:66:A2
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:cb:a3:33:3a:f1:ee:cc:61:0f:51:eb:e6:9d:60:3d:bf:c3:
e8:7a:da:c6:83:2c:dd:41:38:d1:4e:b3:a0:f1:41:49:fc:4b:
be:88:6d:b8:bc:48:81:04:34:e4:0a:b6:d5:66:a7:b0:17:71:
4c:26:c3:6d:c9:32:50:3b:c0:f5:d4:45:d1:5b:77:ef:e2:8f:
8e:54:89:72:ac:63:45:04:2a:d8:70:1b:92:61:28:47:c2:bf:
fb:7c:36:02:1b:d3:f7:f5:fc:4a:93:be:3c:bf:60:57:d0:4c:
8d:69:36:58:b7:7a:45:84:a5:8f:19:77:c7:cd:4a:46:ec:16:
bc:34:e8:e3:5d:29:4b:7f:f7:4d:f0:b5:ed:35:bf:b1:ac:1f:
15:65:4c:c4:4a:56:e9:d9:00:b4:57:5e:22:35:56:08:38:f8:
50:08:e2:89:aa:b2:82:55:cb:b7:61:48:8d:3f:dd:05:cd:03:
0f:a1:ec:fe:3e:da:1c:a1:f8:fd:59:e3:58:f7:0d:74:52:66:
2b:da:f4:f6:d3:e6:05:77:7f:b8:a8:5b:ab:91:66:64:85:ec:
7f:b5:5d:83:d5:8e:d5:2c:b2:4f:24:90:dc:79:fe:1c:14:4f:
e1:e8:de:e9:f3:23:02:aa:5d:f7:d8:49:61:63:3c:c5:4e:8d:
0c:ea:31:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:55 2026 by rpki-client