Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
File: K2UnVSHSnK9xdu4sOY1AoexHnEI.mft (raw, json)
Hash identifier: om6SD5yiN6aP/yMBwqUW3MVubvRJ5yZBiKVHWncwkaM=
Subject key identifier: 17:34:F3:71:98:BE:DE:32:72:EA:6A:FE:3C:F8:2D:82:2A:5F:15:4B
Authority key identifier: 2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
Certificate issuer: /CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Certificate serial: 019E1DFEA3742C582CDCA57865234378F807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
Manifest number: 06DB
Signing time: Tue 12 May 2026 21:01:27 +0000
Manifest this update: Tue 12 May 2026 21:01:27 +0000
Manifest next update: Wed 13 May 2026 21:01:27 +0000
Files and hashes: 1: Jr658jPud1G59P1IJrsCszw4gyU.roa (hash: 3CTowatmqrcEGXxJ4Y5uu28J0up58OPmzNLnfXaNssw=)
2: K2UnVSHSnK9xdu4sOY1AoexHnEI.crl (hash: H2973ibPrPex3F6IjevdYuXzbM1VRqpk3hIlkKaVjCw=)
3: z8SvFmHjwdkD9rVqW5FJ7sxlfdI.roa (hash: rejHdYVWNM7RsiIxf7jbWM9eJvH26EoCBws9Y59Tnv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:a3:74:2c:58:2c:dc:a5:78:65:23:43:78:f8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b65275521d29caf7176ee2c398d40a1ec479c42
Validity
Not Before: May 12 21:01:27 2026 GMT
Not After : May 13 21:01:27 2026 GMT
Subject: CN=1734f37198bede3272ea6afe3cf82d822a5f154b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:38:67:ac:1a:3b:48:a8:ee:60:2c:c6:2c:9d:
c7:b5:68:bc:e9:13:f8:90:2e:eb:1b:81:8b:a8:92:
e3:1c:31:87:ab:b0:98:78:94:9b:a2:e2:13:d2:ce:
30:1e:21:27:32:1d:89:80:23:92:2f:b2:e2:d4:70:
88:8a:cf:30:89:5f:47:29:9a:02:e2:99:cb:84:4d:
c9:e5:06:ff:59:a8:3c:f3:61:36:55:f8:d9:06:b8:
d1:b9:61:aa:e9:48:9b:f4:7e:79:50:ab:7c:6c:8c:
d5:e7:32:4b:6d:cd:b6:20:07:99:c1:43:05:e6:d4:
f4:e8:65:c6:cf:bd:63:55:8a:47:13:b7:fa:3c:11:
d1:f3:7c:59:c8:a1:2c:d5:03:84:92:c6:15:f9:fc:
c8:a4:61:06:21:4e:d1:18:35:02:7e:88:fc:04:66:
fd:72:6f:1d:f6:37:6e:56:ad:79:b6:92:7d:e7:60:
09:e2:00:26:cd:76:6f:bb:1a:1c:89:d6:e2:5c:74:
c0:7f:4e:f9:89:23:f1:b5:f0:97:99:36:4f:96:9e:
48:46:c6:b5:68:7f:ef:fe:16:e4:63:17:5c:44:bc:
6d:07:a9:6a:24:ca:ee:9b:1e:22:22:c7:fe:1b:f6:
ab:d8:4e:05:47:4b:59:cf:39:f5:82:8f:ff:e2:9a:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:34:F3:71:98:BE:DE:32:72:EA:6A:FE:3C:F8:2D:82:2A:5F:15:4B
X509v3 Authority Key Identifier:
keyid:2B:65:27:55:21:D2:9C:AF:71:76:EE:2C:39:8D:40:A1:EC:47:9C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2UnVSHSnK9xdu4sOY1AoexHnEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/27f595-964f-4055-b92f-9ea9f5e203a0/1/K2UnVSHSnK9xdu4sOY1AoexHnEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:01:ae:4d:3d:10:fd:b8:e4:1d:75:f4:1a:a3:9f:b7:41:f5:
56:c2:e8:4c:ef:e3:62:c7:1c:11:c8:1d:d7:b6:68:5f:5b:9c:
ec:f0:57:07:90:a7:53:d3:47:1f:ed:9d:ff:5f:7f:3f:a2:9f:
35:4b:71:80:d1:48:05:12:dc:d2:2c:9e:62:77:f0:a7:e6:90:
5f:a4:1a:d5:3e:c9:c9:96:ec:48:7e:8c:b7:4f:63:5c:20:48:
6a:79:f5:31:2c:bd:40:c2:b6:aa:58:18:ed:1e:ba:23:92:d3:
c7:c6:45:78:d8:a8:d9:bc:1d:1c:a5:4d:40:3b:fe:5e:ef:d4:
a9:8e:bf:c8:9f:5c:0b:00:a7:e9:b9:a6:2a:85:0a:d6:ac:23:
de:aa:58:e8:93:24:0d:db:ee:da:e2:e3:41:77:9f:1a:69:d7:
86:a9:69:a8:e1:4a:a0:c5:62:a1:c2:60:d8:d7:05:e6:db:5d:
44:8b:3e:20:8c:3b:9f:39:7f:22:29:c3:4b:58:75:62:6d:e6:
12:5c:c4:8b:92:a2:37:84:08:27:ba:f9:61:30:6d:b0:ee:e2:
4b:61:d2:74:13:cd:9c:43:f5:df:8b:7c:42:45:fb:b6:df:1f:
4e:f8:1f:d0:48:a3:b6:d1:1b:6b:18:fa:d5:7d:da:f5:cc:1f:
27:88:92:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:56 2026 by rpki-client