Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json)
Hash identifier: 66RLl0JYuiH6JjFNAqiXguIthmvRbrvB8tSYodn1lok=
Subject key identifier: 17:7E:0D:94:87:6A:3C:F6:7E:68:5A:C1:6D:7D:10:AE:C5:2F:91:76
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 019D288442A6118BBEB9EE274F75095C97EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
Manifest number: 04F8
Signing time: Thu 26 Mar 2026 05:00:49 +0000
Manifest this update: Thu 26 Mar 2026 05:00:49 +0000
Manifest next update: Fri 27 Mar 2026 05:00:49 +0000
Files and hashes: 1: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: b5VX41sZABL0TD2SG8j3Adh42zL+3P+JQ+Q3t+gcYa4=)
2: ujXjrHSBskkRtzQpgabT3c58RZQ.roa (hash: hcJwU6ySjyVPwOkpMUkEEZB++4hAYjO13djZi7l/+iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:42:a6:11:8b:be:b9:ee:27:4f:75:09:5c:97:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Mar 26 05:00:49 2026 GMT
Not After : Mar 27 05:00:49 2026 GMT
Subject: CN=177e0d94876a3cf67e685ac16d7d10aec52f9176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:75:bd:5c:77:5a:0e:8e:0f:5f:9d:b7:37:
dd:f2:85:87:eb:01:b3:88:91:2d:0f:43:f3:5e:fb:
ce:e8:d0:11:34:74:f1:8f:2d:b5:91:7a:c6:a2:31:
e5:9d:9f:61:c3:3d:ac:ca:52:d7:4c:df:b6:33:ed:
4c:3b:7a:24:b0:7a:fe:2b:97:07:9f:f3:ff:ab:ee:
3d:08:bd:a6:96:f3:d1:49:f1:45:ed:a7:64:59:e7:
01:76:78:14:dc:41:88:ef:9f:94:4e:99:ac:ae:03:
0b:39:26:86:35:4d:ff:8e:e7:8c:c9:a7:51:6d:05:
4d:7d:4c:2f:d6:36:7e:cf:6c:f6:19:74:d7:4f:86:
58:3a:34:4b:c2:e1:03:2b:85:d2:f5:59:50:60:58:
2d:02:df:bc:26:88:80:02:62:bd:3d:92:89:7a:72:
0a:9b:20:70:f3:a3:fc:b8:3c:e7:a2:66:55:f3:53:
d5:ba:64:58:d6:94:d5:a6:84:71:ec:7b:2f:e2:09:
dd:62:43:8d:2b:d4:b0:4a:cc:dc:a2:6a:82:ff:a0:
d7:f8:cb:28:33:08:71:e7:e9:37:e5:ff:04:3b:3a:
7f:a5:c2:6d:24:59:48:2c:91:ee:d2:de:d3:49:90:
0c:f1:57:fa:fa:db:e2:a9:7e:b1:6d:70:e2:d9:19:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7E:0D:94:87:6A:3C:F6:7E:68:5A:C1:6D:7D:10:AE:C5:2F:91:76
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5f:9b:d5:28:7a:42:6d:c4:b1:22:2f:2a:2b:43:8c:32:7f:
22:f2:74:0f:28:23:13:40:d4:1b:35:b2:89:6d:f2:2c:89:94:
08:98:db:da:b7:d6:97:3b:a4:e7:56:4c:9f:0e:6d:62:8b:99:
77:1b:06:19:e6:89:d6:6e:91:60:7d:2b:f7:67:ed:30:f9:9b:
44:73:50:2b:10:ea:ed:22:27:df:eb:e7:42:c7:9a:80:a8:53:
7a:d5:e3:53:c9:08:29:02:3e:69:11:8a:9a:ff:60:07:cc:2f:
f7:1c:3b:d7:71:ac:3d:42:eb:f9:9b:a7:ff:88:20:b8:34:6c:
8b:89:58:0a:7a:6c:37:ad:fb:a8:7c:75:76:1e:1b:a0:c7:28:
77:a9:d3:39:29:2d:ca:3e:45:b0:a0:2f:2d:74:57:d8:4f:02:
93:40:97:bb:68:e1:1d:04:ab:33:ab:25:21:dc:6d:e7:1f:3f:
8c:a7:68:59:5b:fd:75:26:39:34:b9:bd:9b:7b:1f:34:b4:8a:
39:5a:07:38:54:3c:6e:45:f0:fd:c0:50:99:ae:1c:7b:08:9b:
cf:5f:97:6c:77:9e:f9:16:36:df:ef:64:75:a7:df:c7:4c:d1:
7e:77:14:61:78:c8:3a:4a:ea:35:ed:ca:41:0c:85:17:51:5f:
77:56:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:53 2026 by rpki-client