Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
File: K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json)
Hash identifier: qfErxjdaBLAC1GRdA0SWSrSxL4cj/QzeGwzk/vD0ekE=
Subject key identifier: B9:69:33:8F:F6:8D:75:CF:9F:30:16:77:2C:55:E6:D5:16:9D:FE:93
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Certificate issuer: /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial: 01A0D34A7C27665FC75CE4B289C93B50AABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
Manifest number: 0842
Signing time: Thu 24 Sep 2026 12:01:09 +0000
Manifest this update: Thu 24 Sep 2026 12:01:09 +0000
Manifest next update: Fri 25 Sep 2026 12:01:09 +0000
Files and hashes: 1: Jr658jPud1G59P1IJrsCszw4gyU.roa (hash: 3CTowatmqrcEGXxJ4Y5uu28J0up58OPmzNLnfXaNssw=)
2: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: /KJdRHm/Owskz4rlwjHNyZKl84Cii004QNj2z3rTT3E=)
3: z8SvFmHjwdkD9rVqW5FJ7sxlfdI.roa (hash: rejHdYVWNM7RsiIxf7jbWM9eJvH26EoCBws9Y59Tnv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:7c:27:66:5f:c7:5c:e4:b2:89:c9:3b:50:aa:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Validity
Not Before: Sep 24 12:01:09 2026 GMT
Not After : Sep 25 12:01:09 2026 GMT
Subject: CN=b969338ff68d75cf9f3016772c55e6d5169dfe93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0e:c3:b3:3d:56:24:0a:58:f7:42:1d:d6:4a:
d1:fd:8d:b6:78:c4:f0:0d:b8:13:ef:7e:a4:7a:cb:
b1:dd:9e:71:de:82:31:69:74:8b:59:d1:3d:dd:bd:
cf:79:22:c2:1c:b0:a9:11:d7:a1:b6:a0:c7:d1:af:
8c:9d:31:65:fc:7c:16:c6:e5:bf:fe:dc:40:75:88:
ff:85:f3:1a:b8:4c:82:72:b2:0f:4c:f3:77:c7:33:
fb:f2:6c:94:6e:54:2e:df:f8:17:e4:38:b8:03:b1:
36:2a:88:d4:8a:cf:d8:85:38:74:ba:20:da:80:a9:
e3:8c:0f:50:b7:fa:42:70:38:dd:ae:3d:11:2c:bf:
c3:c9:dd:44:b8:57:c7:fc:51:31:9f:2b:99:5c:9e:
57:50:79:14:d9:aa:c5:61:63:e2:53:cc:08:ce:cb:
71:8c:88:26:d7:7f:0c:e9:48:76:79:0f:6d:fe:e5:
93:3b:b2:cd:4d:3b:8e:7b:b4:21:ee:fb:52:49:ce:
3b:c9:c3:2a:6b:e8:bc:07:39:c1:12:7b:28:1c:a3:
30:a3:9b:f2:11:87:c0:30:ac:d2:e4:87:0e:26:96:
ec:e0:bf:67:bb:b4:04:24:75:76:8a:17:54:6e:2c:
4d:c5:55:a7:7f:a5:ba:56:21:65:11:fb:5f:40:7f:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:69:33:8F:F6:8D:75:CF:9F:30:16:77:2C:55:E6:D5:16:9D:FE:93
X509v3 Authority Key Identifier:
keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:7e:2e:33:54:85:a6:6d:2e:2b:b4:98:3b:4b:c4:8c:29:59:
b2:52:87:1e:84:52:1b:b7:0e:8b:9b:38:4e:e9:aa:b2:de:62:
08:1e:f4:ad:49:6b:12:ae:5e:4e:ef:72:e5:77:c2:7b:82:c6:
86:cc:5e:f4:dd:09:1e:50:f1:74:27:39:42:69:ed:4c:d1:10:
b5:00:32:9b:15:5a:26:d4:f1:ab:f1:14:6b:fd:bf:bf:97:7d:
b5:73:ff:c3:48:d3:cb:0e:7f:3c:ae:9e:45:3b:26:bb:66:7b:
a1:b4:b7:a6:5a:10:a6:ce:b9:fe:1e:85:f2:47:f3:4a:e4:1e:
f0:de:ff:75:7f:a1:a4:45:a4:56:16:c8:db:f3:64:16:fe:01:
f4:16:ea:31:f8:e0:d5:32:57:f6:3f:c0:11:df:ec:4c:d5:62:
3b:ff:d5:87:40:29:05:6c:a4:59:41:78:7e:26:57:ee:52:96:
6c:4f:fc:f4:f0:a5:68:c6:e9:c2:5b:27:61:ef:93:9a:a9:19:
a1:11:ad:d9:81:9f:83:01:3a:89:cc:7d:70:05:4e:be:fc:da:
5e:8c:b4:12:d2:b3:ba:5b:bf:dd:27:f3:7f:fc:cf:f8:b1:e3:
2f:cd:e0:33:fe:94:19:52:a3:e4:c4:39:c9:dd:67:20:bd:7d:
89:af:12:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTSnwnZl/HXOSyick7UKq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNjUyNzU1MjFkMjljYWY3MTc2ZWUyYzM5OGQ0MGExZWM0
NzljNDIwHhcNMjYwOTI0MTIwMTA5WhcNMjYwOTI1MTIwMTA5WjAzMTEwLwYDVQQD
EyhiOTY5MzM4ZmY2OGQ3NWNmOWYzMDE2NzcyYzU1ZTZkNTE2OWRmZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ7Dsz1WJApY90Id1krR/Y22eMTw
DbgT736kesux3Z5x3oIxaXSLWdE93b3PeSLCHLCpEdehtqDH0a+MnTFl/HwWxuW/
/txAdYj/hfMauEyCcrIPTPN3xzP78myUblQu3/gX5Di4A7E2KojUis/YhTh0uiDa
gKnjjA9Qt/pCcDjdrj0RLL/Dyd1EuFfH/FExnyuZXJ5XUHkU2arFYWPiU8wIzstx
jIgm138M6Uh2eQ9t/uWTO7LNTTuOe7Qh7vtSSc47ycMqa+i8BznBEnsoHKMwo5vy
EYfAMKzS5IcOJpbs4L9nu7QEJHV2ihdUbixNxVWnf6W6ViFlEftfQH/CGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlpM4/2jXXPnzAWdyxV5tUWnf6TMB8GA1UdIwQY
MBaAFCtlJ1Uh0pyvcXbuLDmNQKHsR5xCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJVblZTSFNuSzl4ZHU0c09ZMUFvZXhIbkVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yN2Y1OTUtOTY0Zi00MDU1LWI5MmYt
OWVhOWY1ZTIwM2EwLzEvSzJVblZTSFNuSzl4ZHU0c09ZMUFvZXhIbkVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8yN2Y1OTUtOTY0Zi00MDU1LWI5MmYtOWVhOWY1ZTIwM2Ew
LzEvSzJVblZTSFNuSzl4ZHU0c09ZMUFvZXhIbkVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsn4uM1SF
pm0uK7SYO0vEjClZslKHHoRSG7cOi5s4Tumqst5iCB70rUlrEq5eTu9y5XfCe4LG
hsxe9N0JHlDxdCc5QmntTNEQtQAymxVaJtTxq/EUa/2/v5d9tXP/w0jTyw5/PK6e
RTsmu2Z7obS3ploQps65/h6F8kfzSuQe8N7/dX+hpEWkVhbI2/NkFv4B9BbqMfjg
1TJX9j/AEd/sTNViO//Vh0ApBWykWUF4fiZX7lKWbE/89PClaMbpwlsnYe+TmqkZ
oRGt2YGfgwE6icx9cAVOvvzaXoy0EtKzulu/3Sfzf/zP+LHjL83gM/6UGVKj5MQ5
yd1nIL19ia8SQg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:22:33 2026 by rpki-client