Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File: K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier: nSm0OXcfJPlpjbMHCuIqOb7X5CopegXJbH0ry99nwV4=
Subject key identifier: 81:B0:06:EE:8B:70:70:21:40:ED:A0:E2:69:76:23:76:EA:8E:9C:7A
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer: /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial: 019E2211A0B57A69E22D0CC7BCBDBE704013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number: 10D6
Signing time: Wed 13 May 2026 16:00:41 +0000
Manifest this update: Wed 13 May 2026 16:00:41 +0000
Manifest next update: Thu 14 May 2026 16:00:41 +0000
Files and hashes: 1: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: ZsLACvQ8l6W+SERr6hi/IjQrYFLRNa6Twux6aqI49G4=)
2: tpy9FJHevA7odk2TH7YsmtN7UFs.roa (hash: HA5XrfWMN5EyPeGIHUHIkCKTU3wDBfCSNcRoSlAlDv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:11:a0:b5:7a:69:e2:2d:0c:c7:bc:bd:be:70:40:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Validity
Not Before: May 13 16:00:41 2026 GMT
Not After : May 14 16:00:41 2026 GMT
Subject: CN=81b006ee8b70702140eda0e269762376ea8e9c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:3d:3a:42:52:30:e9:20:6c:cd:02:a6:3f:
90:d3:ae:12:13:3f:12:b2:b6:0d:a2:08:6d:b1:53:
df:9a:8f:e4:a3:86:53:23:44:69:28:fc:50:d0:6e:
b2:02:f4:ae:c2:cc:2d:79:75:c0:43:6b:6e:d4:1a:
05:18:4a:f1:7c:93:db:d3:f4:42:1e:f4:f2:82:ce:
fd:91:3e:bc:6d:93:a9:7f:d0:73:15:9e:27:b5:68:
77:f6:90:50:b5:57:72:31:fa:9d:b4:7d:e0:2d:5d:
dd:dd:7d:b5:94:fb:0b:a8:c4:3e:57:34:69:2f:96:
2a:91:be:30:32:d4:c9:12:25:74:f4:07:0f:6e:a7:
e2:98:2e:da:01:12:50:99:c7:5c:2a:bc:50:5b:6f:
ce:14:69:13:15:39:06:a0:e3:6e:4d:c9:8f:c9:13:
d1:d1:da:93:e5:7b:a8:46:f9:9a:39:67:83:18:94:
22:cc:f1:df:ce:53:1c:9f:27:09:fe:fb:c9:58:d5:
51:78:82:c7:0a:ca:6a:8e:e2:94:3a:50:ac:57:fe:
23:5e:c4:e0:ce:3b:02:8b:d3:c8:28:6e:69:d0:86:
6d:c8:1d:9d:7b:d9:6c:d3:83:48:a2:ea:65:b5:65:
fb:b1:d2:1a:e4:40:0a:51:8f:6c:64:10:33:e3:4c:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B0:06:EE:8B:70:70:21:40:ED:A0:E2:69:76:23:76:EA:8E:9C:7A
X509v3 Authority Key Identifier:
keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5e:44:13:fd:58:4e:29:6d:a2:88:95:a3:84:83:ec:b8:f6:
88:6a:20:d9:68:5e:8a:a9:95:f6:f7:75:9c:98:88:d9:01:6d:
72:06:c3:7b:85:ef:ae:fe:c2:e8:17:6c:c6:ab:87:3d:e4:68:
33:53:17:3c:46:e6:14:aa:35:e8:a3:dd:ff:2f:8f:07:b1:98:
d4:a3:08:9d:14:13:25:8e:90:b7:30:93:f4:ba:32:c7:1f:14:
b6:ae:e8:2a:15:bf:6b:31:01:67:9f:e0:62:fe:22:fb:b5:68:
6a:db:75:2d:68:f7:df:cf:43:e6:b9:ae:f9:aa:3a:e1:83:a5:
d3:3c:5a:5e:93:ca:f8:fd:29:79:70:39:55:24:ec:eb:d7:73:
26:1c:c3:8f:a7:4f:12:fc:ec:01:06:44:b0:9b:7a:5d:76:7b:
14:20:f6:11:e1:a0:03:7d:c2:5c:a1:63:a0:99:3a:cc:0f:a6:
e0:6e:a2:b0:b7:25:e8:d6:59:78:6d:a3:6c:9a:bf:b4:67:9e:
59:18:00:ce:ab:a7:6c:cf:9c:ac:2e:68:4c:54:d4:58:a4:66:
43:e5:00:06:d1:92:8b:6f:57:38:f6:d1:e1:7b:f0:12:6c:17:
16:5a:cc:db:b0:3b:2a:ac:67:44:54:ed:03:26:16:e6:56:e6:
10:a9:54:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:54:18 2026 by rpki-client