Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
File: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft (raw, json)
Hash identifier: 8fwVoR/mAR0ro3ctoF60K6XYA8dfPYZzdGFogg3zwaQ=
Subject key identifier: 71:D8:58:6B:FA:A4:B4:04:1B:1A:4C:BA:CC:A0:BF:43:E6:9C:5F:D5
Authority key identifier: 2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
Certificate issuer: /CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Certificate serial: 01A0DEA9DAE5BBA51A41E6163A5FC92EBDD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
Manifest number: 1252
Signing time: Sat 26 Sep 2026 17:01:08 +0000
Manifest this update: Sat 26 Sep 2026 17:01:08 +0000
Manifest next update: Sun 27 Sep 2026 17:01:08 +0000
Files and hashes: 1: K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl (hash: IMjDUR92S4I9MhF082DbndO+t29a81TT6EU4CVm+6GU=)
2: dbilkSZsjUibJ1NutZ76qJvy820.roa (hash: /oJpuqHaWi4ouiqRZTNCC/b0oRgbkGtlYtRLMPSUMXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:a9:da:e5:bb:a5:1a:41:e6:16:3a:5f:c9:2e:bd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6ad90b63642b8fadc9007aa355239edfaf354e
Validity
Not Before: Sep 26 17:01:08 2026 GMT
Not After : Sep 27 17:01:08 2026 GMT
Subject: CN=71d8586bfaa4b4041b1a4cbacca0bf43e69c5fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:46:38:3b:6f:6a:cd:15:2d:2a:f9:2a:02:bf:
3f:6b:39:07:3b:a4:4a:d1:14:2b:cc:76:35:ec:59:
3f:7e:cf:47:6a:b4:2a:2e:40:39:e0:a8:53:03:44:
f9:7c:e6:de:c6:26:1d:c1:c4:05:19:6b:67:17:af:
6e:83:84:6d:6f:87:f2:35:70:a2:b6:1e:d4:d9:f7:
e0:6f:c5:6a:aa:22:f1:24:7f:32:64:20:3a:d8:e0:
82:3d:63:7d:96:47:22:6b:4a:92:fa:b7:cf:88:14:
6d:bb:13:25:ae:3d:46:6b:74:25:a8:c5:89:b9:b8:
61:ab:14:b3:8c:fa:67:d0:46:b2:88:09:6e:90:a4:
4b:29:0e:92:65:21:15:d3:3f:67:b3:51:71:f1:3b:
35:7b:b8:95:d5:df:40:2f:e8:5c:18:76:8b:ed:24:
b3:f1:d9:d9:dd:7e:a2:17:30:9c:de:3f:ba:a4:e7:
ca:b0:18:b9:7f:48:a8:05:eb:bd:0b:19:03:97:0f:
f3:67:3b:c8:4a:4e:92:3a:7d:a0:33:97:60:0f:bd:
0d:83:99:db:89:40:d1:4a:a4:58:3a:ba:1c:e9:b1:
20:9d:b6:de:8a:99:9f:6b:36:8e:a4:da:ec:b2:e1:
99:6c:94:8b:08:57:81:03:35:6f:8e:f8:94:59:a3:
f8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D8:58:6B:FA:A4:B4:04:1B:1A:4C:BA:CC:A0:BF:43:E6:9C:5F:D5
X509v3 Authority Key Identifier:
keyid:2B:6A:D9:0B:63:64:2B:8F:AD:C9:00:7A:A3:55:23:9E:DF:AF:35:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a6db07-f54a-441f-9649-bc9b413b8eed/1/K2rZC2NkK4-tyQB6o1Ujnt-vNU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6d:10:ba:52:f0:03:de:ec:a9:7e:07:f1:72:11:83:36:68:
5b:24:02:ca:59:3a:10:a3:9d:89:39:41:9d:6d:56:87:30:9d:
4c:fe:b0:72:6f:f3:20:b8:b3:0b:ea:fb:df:94:04:13:4d:d7:
9d:cb:0c:dc:84:f0:31:b5:d9:ac:47:9e:e7:62:b1:f6:d6:fe:
1c:ff:b8:55:ee:61:c3:b1:f8:b6:96:1b:fe:92:6b:0f:c0:88:
ca:68:24:76:b4:34:4f:24:f3:61:ea:33:c6:12:24:58:82:2b:
8e:f1:37:c0:47:9d:a2:71:f7:47:07:c0:be:96:bb:b1:fa:53:
17:86:7b:53:9e:eb:3f:ec:22:2f:3c:ea:67:e2:90:bc:0f:0f:
c9:0d:99:df:2d:24:da:99:fb:57:cf:b1:fa:a5:b9:1b:69:9b:
7b:29:73:aa:a8:18:48:4b:3d:00:99:75:70:d4:34:83:b8:0d:
a2:05:c1:92:91:e4:b1:5d:1e:7d:a1:f8:fa:10:ee:31:ab:0d:
83:2e:ec:35:12:13:be:dd:40:58:1b:48:9e:81:06:62:02:88:
cd:fb:6c:b5:48:df:92:c7:1c:19:ff:fd:e3:88:b7:ed:22:f3:
cc:64:38:d9:93:2f:d4:04:f3:5b:00:6d:fb:ee:37:ef:da:ee:
32:02:73:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDeqdrlu6UaQeYWOl/JLr3WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNmFkOTBiNjM2NDJiOGZhZGM5MDA3YWEzNTUyMzllZGZh
ZjM1NGUwHhcNMjYwOTI2MTcwMTA4WhcNMjYwOTI3MTcwMTA4WjAzMTEwLwYDVQQD
Eyg3MWQ4NTg2YmZhYTRiNDA0MWIxYTRjYmFjY2EwYmY0M2U2OWM1ZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50Y4O29qzRUtKvkqAr8/azkHO6RK
0RQrzHY17Fk/fs9HarQqLkA54KhTA0T5fObexiYdwcQFGWtnF69ug4Rtb4fyNXCi
th7U2ffgb8VqqiLxJH8yZCA62OCCPWN9lkcia0qS+rfPiBRtuxMlrj1Ga3QlqMWJ
ubhhqxSzjPpn0EayiAlukKRLKQ6SZSEV0z9ns1Fx8Ts1e7iV1d9AL+hcGHaL7SSz
8dnZ3X6iFzCc3j+6pOfKsBi5f0ioBeu9CxkDlw/zZzvISk6SOn2gM5dgD70Ng5nb
iUDRSqRYOroc6bEgnbbeipmfazaOpNrssuGZbJSLCFeBAzVvjviUWaP4rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHYWGv6pLQEGxpMusygv0PmnF/VMB8GA1UdIwQY
MBaAFCtq2QtjZCuPrckAeqNVI57frzVOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzJyWkMyTmtLNC10eVFCNm8xVWpudC12TlU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNmRiMDctZjU0YS00NDFmLTk2NDkt
YmM5YjQxM2I4ZWVkLzEvSzJyWkMyTmtLNC10eVFCNm8xVWpudC12TlU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hNmRiMDctZjU0YS00NDFmLTk2NDktYmM5YjQxM2I4ZWVk
LzEvSzJyWkMyTmtLNC10eVFCNm8xVWpudC12TlU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASG0QulLw
A97sqX4H8XIRgzZoWyQCylk6EKOdiTlBnW1WhzCdTP6wcm/zILizC+r735QEE03X
ncsM3ITwMbXZrEee52Kx9tb+HP+4Ve5hw7H4tpYb/pJrD8CIymgkdrQ0TyTzYeoz
xhIkWIIrjvE3wEedonH3RwfAvpa7sfpTF4Z7U57rP+wiLzzqZ+KQvA8PyQ2Z3y0k
2pn7V8+x+qW5G2mbeylzqqgYSEs9AJl1cNQ0g7gNogXBkpHksV0efaH4+hDuMasN
gy7sNRITvt1AWBtInoEGYgKIzftstUjfksccGf/944i37SLzzGQ42ZMv1ATzWwBt
++4379ruMgJzbw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:58:44 2026 by rpki-client