Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File: K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier: lm9S7NlfiVLT1w9BHS2Ue0eu4dySw6EEjtaX6EX0oxQ=
Subject key identifier: 3E:F1:F1:62:84:D3:BB:22:17:C4:D8:60:4F:F4:0B:6A:0F:F7:E7:B3
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer: /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial: 01A11AF59C28E5E391C328A9A7DBED7D144C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number: 1260
Signing time: Thu 08 Oct 2026 10:01:06 +0000
Manifest this update: Thu 08 Oct 2026 10:01:06 +0000
Manifest next update: Fri 09 Oct 2026 10:01:06 +0000
Files and hashes: 1: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: WmzFrT4W82Mg54uvSVklhCekLL3VLyPQjjAlXii7V9c=)
2: tpy9FJHevA7odk2TH7YsmtN7UFs.roa (hash: HA5XrfWMN5EyPeGIHUHIkCKTU3wDBfCSNcRoSlAlDv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:9c:28:e5:e3:91:c3:28:a9:a7:db:ed:7d:14:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Validity
Not Before: Oct 8 10:01:06 2026 GMT
Not After : Oct 9 10:01:06 2026 GMT
Subject: CN=3ef1f16284d3bb2217c4d8604ff40b6a0ff7e7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:b8:f3:83:38:80:64:8d:52:5b:2c:53:67:
45:d8:d3:c2:8c:c7:85:10:68:b4:90:6c:bf:1f:f5:
0e:d8:85:cc:51:eb:24:22:10:10:09:ec:bf:09:bb:
df:e8:1a:2a:7d:e6:1f:f6:8a:f7:19:56:b9:4d:9c:
75:16:d7:b0:40:f2:4f:c7:e3:ef:8e:44:36:1a:4d:
87:51:14:31:7d:80:8c:27:9c:a8:ea:06:d2:65:72:
ab:74:84:6f:18:db:bc:26:bf:d3:60:0c:69:fa:94:
aa:02:6b:78:cf:bc:d0:b7:06:77:01:72:d5:52:97:
61:82:2c:ea:2f:dc:ee:a1:3d:b3:2c:3c:a3:4c:a0:
f7:f6:4d:49:fc:4f:7f:ed:4c:c9:56:0b:52:8d:5b:
16:10:08:cb:8a:31:63:e7:df:2d:22:69:81:d5:23:
b6:f4:cb:82:62:09:6c:a4:48:df:57:c5:c3:af:3e:
96:9a:3f:0d:15:20:f8:21:15:39:4f:79:8a:77:a7:
d9:1b:6f:b6:a4:b7:44:05:21:f8:7d:2f:72:b6:0c:
47:f9:26:17:d8:48:d9:1b:e9:af:ba:57:67:c0:90:
3c:29:fc:70:90:36:f3:22:2d:ba:4d:f8:7b:74:1b:
7c:f3:ca:a9:dd:83:72:08:43:45:b6:dd:ea:c1:53:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F1:F1:62:84:D3:BB:22:17:C4:D8:60:4F:F4:0B:6A:0F:F7:E7:B3
X509v3 Authority Key Identifier:
keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c1:ee:b0:f1:09:9a:18:d8:3e:ce:01:64:6a:e1:8a:68:1f:
26:46:b8:e0:db:e9:49:13:f1:79:f9:54:35:9f:22:07:6f:05:
62:02:f4:e0:b5:ac:64:cf:da:54:21:30:81:d7:84:51:19:70:
a7:b6:45:29:79:4e:93:f8:54:14:4f:e2:a8:cb:6c:26:3b:6d:
e2:d2:d4:15:81:24:09:38:a7:43:a8:c5:80:3f:7e:2d:ad:82:
11:f4:2a:ff:ae:4b:93:57:64:a1:be:ba:fc:17:87:d8:b3:a0:
5a:8a:9a:30:cc:fd:e0:77:23:a1:28:95:4d:65:a0:01:0a:6c:
56:2c:91:c6:d6:ad:3a:5c:94:96:09:14:3c:8d:46:60:77:ce:
7c:e2:bc:3b:1e:f5:5e:2e:ab:d9:8d:2f:b6:54:56:79:9f:57:
16:09:4a:51:3b:ed:93:17:65:32:96:9f:31:51:0d:cf:0b:c4:
31:dd:dc:47:11:5f:20:54:e5:c9:1c:cf:1e:8a:13:59:7f:4e:
b5:46:fb:fa:67:28:5f:2d:1b:7a:42:81:1a:72:5c:9d:99:31:
69:06:ad:ae:d6:de:9d:19:e9:71:dc:c7:78:59:f9:bb:33:ce:
07:2b:35:e7:91:f3:9c:ea:f3:6c:d7:15:f3:c7:5e:ee:a4:d9:
b8:93:d1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:02:56 2026 by rpki-client