Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
File: K67n6kgtYqZxBj6sg3ia8585C3Q.mft (raw, json)
Hash identifier: 3mzGpkB9zUM9bx67WUn2+x0Fs9uS3n4yd5zTwWyyWqA=
Subject key identifier: B8:A3:39:77:98:6C:6D:E4:08:61:73:23:5F:FA:48:64:FA:6A:B2:99
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Certificate issuer: /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial: 019D27044363630002FCE57451CA4C1BDC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
Manifest number: 0A44
Signing time: Wed 25 Mar 2026 22:01:23 +0000
Manifest this update: Wed 25 Mar 2026 22:01:23 +0000
Manifest next update: Thu 26 Mar 2026 22:01:23 +0000
Files and hashes: 1: 57OxBTF4X7lyr00PQWTLC_7l0LM.roa (hash: Qu9Cp0fGN2f6UG2Bu1+rVSKBmfLjLGmUIUXyj9DRqEM=)
2: K67n6kgtYqZxBj6sg3ia8585C3Q.crl (hash: /8ocwx2dUZUQC2NPoGceozkaSAr3qMV9W8AzRlSJJo0=)
3: wLKTHNAi_SKjDTW74BcesnX-WQQ.asa (hash: j48nzI6JGxErzvih/a7iFeEhyD9lYuYhcQYuQ7FCZgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:43:63:63:00:02:fc:e5:74:51:ca:4c:1b:dc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
Validity
Not Before: Mar 25 22:01:23 2026 GMT
Not After : Mar 26 22:01:23 2026 GMT
Subject: CN=b8a33977986c6de4086173235ffa4864fa6ab299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6d:d7:f5:38:e0:56:5a:55:47:e7:dc:9b:5f:
cd:11:8c:db:36:6b:7b:93:76:08:8a:2e:64:a5:27:
ae:81:27:6e:21:a5:fb:cc:f2:73:40:f0:29:ac:77:
00:01:1b:32:7d:21:ad:df:d8:86:56:bf:db:7b:63:
32:ad:d7:34:69:e5:88:a9:1f:f6:68:08:c5:39:f9:
62:b4:04:72:fc:12:26:5e:8c:87:b0:f4:cb:19:7f:
6f:6a:26:e3:43:54:6a:c2:4e:a2:6d:43:24:61:03:
5e:3d:b0:3a:c9:1b:ac:3a:9f:c6:8f:ef:da:69:54:
32:22:08:a8:28:5d:5b:cc:2c:90:f6:7a:2f:cb:f9:
a2:e4:22:bf:f7:b2:86:03:fd:c9:5f:da:b0:4d:04:
d6:f8:fa:ab:32:77:97:d3:98:ec:9a:b6:70:f1:80:
03:38:54:9a:49:16:40:ba:d8:8b:b0:ce:ad:c4:ea:
85:af:ab:35:80:06:f8:1b:36:e5:2e:ee:b8:67:b1:
cc:4a:3d:43:03:29:ff:39:f0:07:95:83:84:7b:e1:
5a:4f:45:af:94:4d:a2:8f:8f:13:8e:6a:53:b1:89:
f4:f4:10:b8:e7:9d:bd:d8:fa:f8:53:79:ab:f0:a0:
56:7a:88:8d:f0:da:c3:ce:bf:05:b3:cf:5e:1d:41:
f6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A3:39:77:98:6C:6D:E4:08:61:73:23:5F:FA:48:64:FA:6A:B2:99
X509v3 Authority Key Identifier:
keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:62:d7:62:2a:8a:e4:1f:90:be:37:e6:93:0c:90:90:f0:1c:
8e:6c:0a:27:f9:e2:6f:57:fa:ce:db:ac:20:67:b5:ee:a5:45:
73:d2:16:3a:96:60:7d:9e:f2:9c:c9:cc:c2:60:31:04:85:38:
0b:69:1e:fb:33:34:59:a4:37:17:cd:71:ce:59:eb:dd:8d:0d:
d6:13:f0:5b:2f:31:30:b4:3e:a5:91:5d:60:67:ce:67:36:52:
32:f1:ee:3f:e8:79:f6:e1:56:68:c4:b9:3d:ed:94:f3:f2:f1:
88:a4:2f:1c:3e:87:5a:00:fe:cc:d8:b0:98:eb:9a:e4:f9:9b:
96:79:e0:33:b6:d7:f2:7d:9f:cc:b0:25:f8:f2:4c:2a:14:c7:
de:5d:ca:ed:32:da:d0:7f:42:40:84:1a:9f:48:8a:60:55:33:
9a:bb:4c:f3:6b:ff:be:3b:b8:4f:65:e9:5d:f2:1d:c4:9f:e4:
19:62:e6:31:e5:25:ec:31:43:9c:5f:f6:d0:d5:92:2b:09:f7:
1b:9f:1a:03:96:e7:e1:bb:83:4a:43:5b:6c:ff:b6:d6:67:ff:
32:84:4f:85:23:c8:5f:41:1e:56:90:e4:ee:01:01:48:78:cc:
d4:2d:b3:5f:4f:fe:fc:83:47:fa:1f:4a:b5:a0:f2:0b:7d:b6:
7b:16:ea:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:00:47 2026 by rpki-client