Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
File: K67n6kgtYqZxBj6sg3ia8585C3Q.mft (raw, json)
Hash identifier: WgHEq6+fmoDWrHPdEkHzRjY7LxjV/voFXOomnASVJwg=
Subject key identifier: CD:FD:4C:44:22:8A:9F:8B:26:BF:7A:8E:C5:E9:24:FD:C7:EC:BD:81
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Certificate issuer: /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial: 019D2AE0DBA9467D0C2D80B5C59C4EAF9A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
Manifest number: 0A46
Signing time: Thu 26 Mar 2026 16:01:12 +0000
Manifest this update: Thu 26 Mar 2026 16:01:12 +0000
Manifest next update: Fri 27 Mar 2026 16:01:12 +0000
Files and hashes: 1: 57OxBTF4X7lyr00PQWTLC_7l0LM.roa (hash: Qu9Cp0fGN2f6UG2Bu1+rVSKBmfLjLGmUIUXyj9DRqEM=)
2: K67n6kgtYqZxBj6sg3ia8585C3Q.crl (hash: yUtFEQ8TTe48dq/vOgXITKwVuOuTb3I2TyjLwhZkeAU=)
3: wLKTHNAi_SKjDTW74BcesnX-WQQ.asa (hash: j48nzI6JGxErzvih/a7iFeEhyD9lYuYhcQYuQ7FCZgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:db:a9:46:7d:0c:2d:80:b5:c5:9c:4e:af:9a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
Validity
Not Before: Mar 26 16:01:12 2026 GMT
Not After : Mar 27 16:01:12 2026 GMT
Subject: CN=cdfd4c44228a9f8b26bf7a8ec5e924fdc7ecbd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:68:f3:5e:55:09:c7:9e:9e:28:e6:33:2d:69:
e5:53:9d:7e:7c:d3:90:2b:79:9c:49:d8:40:12:9e:
eb:01:da:6b:28:19:f3:b3:fb:c3:7f:a8:a6:61:e8:
1e:6a:37:4e:bd:ae:ad:59:12:32:d5:6b:fd:42:66:
35:9f:8c:cf:a5:ec:fa:ed:dc:d9:73:9f:18:ce:bd:
c3:bc:05:c2:55:10:38:0c:c2:e2:57:3d:2e:55:e9:
cf:2f:0a:30:10:f1:8c:75:bd:8b:44:95:f1:ea:15:
b1:cc:db:a0:d7:35:8d:bd:fc:4d:30:02:53:27:07:
b9:5f:2b:9c:06:3b:15:db:2e:59:5c:21:62:29:72:
37:48:56:5e:98:d9:5f:a0:16:e5:7b:b8:51:09:f2:
e3:61:7d:92:1a:8a:a8:2b:fd:37:e6:38:d8:14:1c:
1b:95:28:42:8a:08:cc:a5:1a:04:2e:1b:68:8e:66:
ab:d5:46:0f:42:1a:83:69:4c:5c:ca:a2:85:6f:31:
17:f5:e2:06:97:48:fa:62:d6:aa:76:d4:b2:39:23:
53:ea:79:67:c6:90:93:a4:bb:71:61:f3:c1:fa:00:
6d:69:a9:3c:b3:40:4b:b4:c7:f9:72:30:47:2f:50:
68:ce:77:48:40:ea:da:36:78:21:ae:e4:74:37:61:
b0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FD:4C:44:22:8A:9F:8B:26:BF:7A:8E:C5:E9:24:FD:C7:EC:BD:81
X509v3 Authority Key Identifier:
keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e9:0f:9c:47:33:9e:50:96:2f:21:81:77:39:84:ca:e9:48:
db:4e:2e:22:84:af:7b:fc:e6:99:91:37:eb:c5:20:62:81:ce:
ef:d9:d2:e4:64:4f:ee:21:d0:b9:b2:f4:40:12:5f:43:0b:3e:
9c:3b:c8:39:b7:58:98:f0:c9:09:33:69:18:c1:0f:43:44:eb:
6e:af:25:37:ae:04:a0:19:e1:28:f0:d0:0d:72:af:25:f4:a3:
56:87:01:d9:98:f7:7e:04:23:6b:95:59:82:48:14:20:12:cd:
47:39:f2:0f:9c:c1:6d:e1:79:4e:bc:3f:85:a6:1f:00:aa:cd:
8d:62:e0:84:8e:d1:e6:7a:c1:9e:e1:e0:f3:33:bb:85:59:4d:
6c:c1:e9:f4:d6:f6:0c:ea:41:62:a2:32:5e:28:cd:91:4d:eb:
a2:34:ee:96:c7:2b:46:83:b5:f5:ae:0c:a3:90:1d:2f:b8:98:
52:47:27:35:a8:6e:e7:4b:5b:12:61:a4:e0:38:06:e9:3b:bf:
6c:0c:91:93:b4:e0:b0:5c:47:75:55:d0:b9:f9:c4:6d:28:a1:
3a:7b:ee:48:56:1e:79:7f:55:c2:8b:b6:14:2b:e7:2e:2d:ed:
39:7c:81:2a:35:5f:34:8f:b1:a7:24:bc:50:98:5c:c0:1c:8e:
7d:b5:1e:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4NupRn0MLYC1xZxOr5pVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYWVlN2VhNDgyZDYyYTY3MTA2M2VhYzgzNzg5YWYzOWYz
OTBiNzQwHhcNMjYwMzI2MTYwMTEyWhcNMjYwMzI3MTYwMTEyWjAzMTEwLwYDVQQD
EyhjZGZkNGM0NDIyOGE5ZjhiMjZiZjdhOGVjNWU5MjRmZGM3ZWNiZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GjzXlUJx56eKOYzLWnlU51+fNOQ
K3mcSdhAEp7rAdprKBnzs/vDf6imYegeajdOva6tWRIy1Wv9QmY1n4zPpez67dzZ
c58Yzr3DvAXCVRA4DMLiVz0uVenPLwowEPGMdb2LRJXx6hWxzNug1zWNvfxNMAJT
Jwe5XyucBjsV2y5ZXCFiKXI3SFZemNlfoBble7hRCfLjYX2SGoqoK/035jjYFBwb
lShCigjMpRoELhtojmar1UYPQhqDaUxcyqKFbzEX9eIGl0j6YtaqdtSyOSNT6nln
xpCTpLtxYfPB+gBtaak8s0BLtMf5cjBHL1BozndIQOraNnghruR0N2Gw9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM39TEQiip+LJr96jsXpJP3H7L2BMB8GA1UdIwQY
MBaAFCuu5+pILWKmcQY+rIN4mvOfOQt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTU3ODQtMzcwNS00MThhLWI5OTQt
NzUyMWFmMWNlMjU5LzEvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMTU3ODQtMzcwNS00MThhLWI5OTQtNzUyMWFmMWNlMjU5
LzEvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOkPnEcz
nlCWLyGBdzmEyulI204uIoSve/zmmZE368UgYoHO79nS5GRP7iHQubL0QBJfQws+
nDvIObdYmPDJCTNpGMEPQ0Trbq8lN64EoBnhKPDQDXKvJfSjVocB2Zj3fgQja5VZ
gkgUIBLNRznyD5zBbeF5Trw/haYfAKrNjWLghI7R5nrBnuHg8zO7hVlNbMHp9Nb2
DOpBYqIyXijNkU3rojTulscrRoO19a4Mo5AdL7iYUkcnNahu50tbEmGk4DgG6Tu/
bAyRk7TgsFxHdVXQufnEbSihOnvuSFYeeX9Vwou2FCvnLi3tOXyBKjVfNI+xpyS8
UJhcwByOfbUefA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:18:42 2026 by rpki-client