Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
File: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json)
Hash identifier: bbNqIjSu8mZP5NStzlqJseU7/1h36Ic/ml7PP8jL0+A=
Subject key identifier: 7F:7A:A2:E2:CE:36:C2:3C:15:C4:11:5C:8A:20:5B:F4:8F:56:96:7C
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Certificate issuer: /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial: 019D26962BFAC012C6D8181745AFED4E7409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
Manifest number: 1065
Signing time: Wed 25 Mar 2026 20:01:09 +0000
Manifest this update: Wed 25 Mar 2026 20:01:09 +0000
Manifest next update: Thu 26 Mar 2026 20:01:09 +0000
Files and hashes: 1: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: wrmwQrXuZw1JC1s3V/s2AoiMwDtrvIMrLsWp3uA6/O8=)
2: dbilkSZsjUibJ1NutZ76qJvy820.roa (hash: /oJpuqHaWi4ouiqRZTNCC/b0oRgbkGtlYtRLMPSUMXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:2b:fa:c0:12:c6:d8:18:17:45:af:ed:4e:74:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Validity
Not Before: Mar 25 20:01:09 2026 GMT
Not After : Mar 26 20:01:09 2026 GMT
Subject: CN=7f7aa2e2ce36c23c15c4115c8a205bf48f56967c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:08:53:0d:7d:b0:97:9d:af:91:08:e7:0d:e5:
b5:7e:12:b5:41:06:cc:3e:30:43:2b:b6:6d:b0:66:
83:37:61:c2:0d:dc:2d:99:17:10:ef:09:e4:54:6e:
0e:1d:eb:bd:50:1f:dc:e9:ce:8d:8f:59:cb:58:8e:
af:a4:ad:b0:31:cb:62:33:82:a7:a0:e3:97:bd:3d:
6d:13:60:ea:d2:af:fa:05:49:ab:3f:26:79:81:10:
f1:18:d0:95:a5:87:2f:ed:6b:a3:5a:64:b9:cf:ca:
60:d6:42:33:9d:a2:49:3d:88:b7:2e:57:4d:5e:ff:
1b:03:60:6e:12:59:4d:d5:89:01:bd:58:56:ec:fc:
2b:fc:37:ef:e9:2e:fd:8d:77:c0:4a:a3:8a:4c:de:
fa:19:39:b5:06:99:d3:6f:34:c2:eb:b7:2d:99:66:
0d:e8:ce:70:65:28:fd:69:bb:23:54:fc:96:c5:79:
f5:51:b6:b9:b9:b2:ab:7e:6d:35:25:70:f3:ab:d7:
a1:7b:7c:7f:6e:f8:42:bd:26:6b:21:8c:c9:b7:b4:
4f:57:f9:17:90:c5:f1:8e:3b:a7:91:7d:bd:1c:cf:
10:ce:b6:25:1d:12:03:02:46:6e:a3:32:e5:20:39:
41:4b:53:1c:da:04:09:11:1b:48:4a:df:7a:e8:96:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7A:A2:E2:CE:36:C2:3C:15:C4:11:5C:8A:20:5B:F4:8F:56:96:7C
X509v3 Authority Key Identifier:
keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:47:4d:70:35:cf:41:53:da:60:09:cc:dc:1c:26:75:c1:1f:
4a:33:05:8d:47:2c:00:bf:6e:0e:82:9b:7c:9c:8d:f7:4a:d7:
a9:41:80:bc:f8:9b:d5:f9:a9:b7:3a:e4:b3:25:56:d8:e5:cc:
b1:c2:97:3d:b5:2c:68:bd:68:32:95:90:cc:64:18:5d:c5:58:
33:f5:c9:c0:5c:e7:90:e5:ee:ef:d8:53:23:73:c2:58:a5:be:
99:21:33:0a:b0:a6:ea:5b:16:c3:45:cc:5d:36:41:26:96:85:
ab:55:de:0f:0d:a6:1d:39:ba:14:e6:6d:71:5d:0d:25:85:81:
5b:7f:7f:0f:c9:65:8a:48:ff:aa:66:68:01:ff:85:0b:e0:9d:
ac:9a:cc:4e:53:f5:e7:42:b7:5e:8c:aa:e9:95:a4:14:e2:ac:
c6:f3:29:96:39:b2:81:da:66:63:b2:75:8c:be:66:44:19:83:
cb:4f:df:89:4f:85:d2:83:4c:90:35:51:93:53:59:91:d4:16:
46:ea:e7:3a:3a:d8:7b:c9:0f:6c:51:bb:4f:c6:c3:f2:25:90:
55:9b:2b:ad:b1:1a:00:29:ee:01:72:78:89:10:8e:67:9d:90:
3b:89:fb:34:d9:a1:0e:0b:3b:9b:63:1d:37:6f:86:f2:32:9b:
42:7f:4e:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mliv6wBLG2BgXRa/tTnQJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmFkOTBiNjM2NDJiOGZhZGM5MDA3YWEzNTUyMzllZGZh
ZjM1NGUwHhcNMjYwMzI1MjAwMTA5WhcNMjYwMzI2MjAwMTA5WjAzMTEwLwYDVQQD
Eyg3ZjdhYTJlMmNlMzZjMjNjMTVjNDExNWM4YTIwNWJmNDhmNTY5NjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AhTDX2wl52vkQjnDeW1fhK1QQbM
PjBDK7ZtsGaDN2HCDdwtmRcQ7wnkVG4OHeu9UB/c6c6Nj1nLWI6vpK2wMctiM4Kn
oOOXvT1tE2Dq0q/6BUmrPyZ5gRDxGNCVpYcv7WujWmS5z8pg1kIznaJJPYi3LldN
Xv8bA2BuEllN1YkBvVhW7Pwr/Dfv6S79jXfASqOKTN76GTm1BpnTbzTC67ctmWYN
6M5wZSj9absjVPyWxXn1Uba5ubKrfm01JXDzq9ehe3x/bvhCvSZrIYzJt7RPV/kX
kMXxjjunkX29HM8QzrYlHRIDAkZuozLlIDlBS1Mc2gQJERtISt966JYhUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH96ouLONsI8FcQRXIogW/SPVpZ8MB8GA1UdIwQY
MBaAFCtq2QtjZCuPrckAeqNVI57frzVOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJyWkMyTmtLNC10eVFCNm8xVWpudC12TlU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNmRiMDctZjU0YS00NDFmLTk2NDkt
YmM5YjQxM2I4ZWVkLzEvSzJyWkMyTmtLNC10eVFCNm8xVWpudC12TlU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hNmRiMDctZjU0YS00NDFmLTk2NDktYmM5YjQxM2I4ZWVk
LzEvSzJyWkMyTmtLNC10eVFCNm8xVWpudC12TlU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUdNcDXP
QVPaYAnM3BwmdcEfSjMFjUcsAL9uDoKbfJyN90rXqUGAvPib1fmptzrksyVW2OXM
scKXPbUsaL1oMpWQzGQYXcVYM/XJwFznkOXu79hTI3PCWKW+mSEzCrCm6lsWw0XM
XTZBJpaFq1XeDw2mHTm6FOZtcV0NJYWBW39/D8llikj/qmZoAf+FC+CdrJrMTlP1
50K3Xoyq6ZWkFOKsxvMpljmygdpmY7J1jL5mRBmDy0/fiU+F0oNMkDVRk1NZkdQW
RurnOjrYe8kPbFG7T8bD8iWQVZsrrbEaACnuAXJ4iRCOZ52QO4n7NNmhDgs7m2Md
N2+G8jKbQn9O/g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:20:40 2026 by rpki-client