Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
File: K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json)
Hash identifier: 1OtPo5+TTgglN1Zqjzjfrc0GYA20blQWbFetthqWrOs=
Subject key identifier: 23:AA:F7:FE:BE:B3:BC:35:6F:4F:E7:48:E7:B3:EF:BB:DF:C5:94:2E
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Certificate issuer: /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial: 019D26CD6E58495023ACE538D2D03629D008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
Manifest number: 065B
Signing time: Wed 25 Mar 2026 21:01:30 +0000
Manifest this update: Wed 25 Mar 2026 21:01:30 +0000
Manifest next update: Thu 26 Mar 2026 21:01:30 +0000
Files and hashes: 1: Jr658jPud1G59P1IJrsCszw4gyU.roa (hash: 3CTowatmqrcEGXxJ4Y5uu28J0up58OPmzNLnfXaNssw=)
2: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: yhriAAfZXY4kN52Wc8sAm5SgN+Dky6gMtzmX+nP+ftM=)
3: z8SvFmHjwdkD9rVqW5FJ7sxlfdI.roa (hash: rejHdYVWNM7RsiIxf7jbWM9eJvH26EoCBws9Y59Tnv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:6e:58:49:50:23:ac:e5:38:d2:d0:36:29:d0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Validity
Not Before: Mar 25 21:01:30 2026 GMT
Not After : Mar 26 21:01:30 2026 GMT
Subject: CN=23aaf7febeb3bc356f4fe748e7b3efbbdfc5942e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:95:9a:f3:f5:32:3f:46:7b:ac:9d:d9:49:e5:
7d:60:b9:a5:b7:f6:fd:c6:bb:c5:4a:da:7f:cb:f9:
41:8f:47:75:42:75:34:29:0e:16:8f:f9:e2:47:aa:
80:4d:c1:77:d8:15:02:f8:91:00:a7:67:d5:7b:12:
f3:0d:75:d8:2d:37:e9:b6:cf:4e:7c:cf:20:f0:b6:
41:62:62:31:32:8f:4f:81:21:36:ba:74:1a:f5:be:
e7:3f:7e:3f:6c:01:09:4f:5f:e4:24:9b:85:6a:89:
dd:6e:eb:53:46:1c:bf:25:26:14:8d:52:d4:ed:a5:
2c:37:e1:4f:9d:4e:53:32:a5:f1:74:93:e0:cf:57:
c4:7f:4b:f5:11:8a:96:c2:19:9d:7f:10:18:63:67:
41:fb:3b:1e:09:5b:18:89:fb:44:4e:2e:c8:16:d8:
db:66:c2:45:71:13:cb:bf:36:8d:b5:0f:1d:74:47:
c9:d1:c9:e8:11:eb:78:d5:1f:97:a0:7d:99:92:13:
43:4f:e3:82:5c:99:97:32:37:81:01:68:06:70:c7:
a8:16:36:ba:16:c6:1b:d9:4b:f6:37:7e:5c:a0:cc:
fb:30:69:54:53:ab:11:cf:57:8a:5c:4e:ca:6c:6a:
a7:cb:99:da:f7:cb:3d:27:49:8e:d9:51:c4:39:5e:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:F7:FE:BE:B3:BC:35:6F:4F:E7:48:E7:B3:EF:BB:DF:C5:94:2E
X509v3 Authority Key Identifier:
keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ec:be:89:80:7f:03:52:67:12:4c:59:ba:46:19:d8:20:a1:
fe:84:03:09:93:0b:4b:cc:6d:e8:22:78:88:aa:40:12:3a:72:
e2:81:5f:10:6a:c2:fe:97:4c:a2:fb:82:d6:c6:28:49:9f:5c:
16:6d:d2:d1:01:5f:0a:e6:04:9b:e6:2e:72:c4:63:30:40:83:
41:87:9d:f2:c3:1a:f1:af:e1:d4:02:2c:e4:58:4d:51:54:55:
0d:48:21:3a:db:92:fb:5c:83:ab:31:71:d8:5e:ef:bb:54:f9:
27:d5:fc:9c:72:08:7b:62:8c:52:3e:a3:3a:f3:72:3d:e3:48:
24:47:09:e9:38:c9:1d:f7:de:ed:67:ff:c6:49:83:f0:ff:83:
0e:c0:1d:b5:7e:fa:7b:0c:1a:e7:af:25:0b:75:55:a8:6a:52:
2e:77:b3:3a:c6:32:4c:bd:96:0e:53:33:18:fd:56:5c:d2:4f:
51:d4:3b:64:db:84:d8:ea:9c:c8:8f:a7:c4:d6:04:3f:45:b3:
82:ee:66:2d:6e:6e:24:1c:a6:3d:3a:22:a2:ef:a6:05:48:84:
3b:a2:dc:1e:d7:65:d8:e1:c5:8a:37:cd:fe:98:68:80:ce:06:
a4:3f:56:ec:fc:87:d2:2f:a0:bf:aa:7b:89:b7:10:7c:f2:e6:
5f:53:31:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:28 2026 by rpki-client