Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
File: K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json)
Hash identifier: I8lgRjHrSg2pvKKwCJkiWqicVSqeLSn3kV0kYy8RqeQ=
Subject key identifier: 48:5B:47:58:4E:21:DE:FC:62:E6:FC:14:4A:66:69:7C:E0:0E:AA:44
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial: 019D25BACEB98B623FDB069FD3F6C0237907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
Manifest number: 05EC
Signing time: Wed 25 Mar 2026 16:01:32 +0000
Manifest this update: Wed 25 Mar 2026 16:01:32 +0000
Manifest next update: Thu 26 Mar 2026 16:01:32 +0000
Files and hashes: 1: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: bXBemCStD5lvHFSVlOeJOkl4ySJF3tLXgYUN8KbEW8M=)
2: iOwYO4Lxb7-lX1XZvdtMWr_SxeI.roa (hash: X1eh/qobiG09DJ7YvAOhgY6UujJecU+Lh8+lJTDAajg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:ce:b9:8b:62:3f:db:06:9f:d3:f6:c0:23:79:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Validity
Not Before: Mar 25 16:01:32 2026 GMT
Not After : Mar 26 16:01:32 2026 GMT
Subject: CN=485b47584e21defc62e6fc144a66697ce00eaa44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:2c:45:33:70:d6:ac:77:88:d9:33:ee:03:
b7:f1:03:4a:b7:bf:14:27:0d:e9:e1:4d:a1:b5:70:
bc:40:e5:dc:4b:30:c7:31:d0:04:1d:2a:52:c7:8c:
7c:6c:ff:e0:a4:3b:84:7f:95:fe:c9:7c:9a:2d:05:
3a:1c:74:71:00:3d:39:ad:3f:17:8b:0e:5a:e9:63:
10:7f:0d:0e:e1:e8:17:b3:30:56:07:52:6c:bb:0a:
a8:a8:3f:a5:65:20:51:ff:2f:3b:0a:a8:01:62:40:
3b:23:93:96:c7:05:61:3e:d1:cc:8a:c9:38:1f:8c:
09:11:af:95:d9:36:a3:57:ce:58:90:d6:2b:9c:f6:
ef:25:c7:41:35:97:64:b8:98:3f:99:69:03:df:1f:
7e:9e:ee:23:bd:4c:63:f1:2e:9f:06:ea:ce:eb:a1:
82:87:00:b7:71:98:43:0b:a6:ae:df:b4:96:86:58:
c7:8f:bb:0e:97:97:9f:bd:a6:f9:b2:7c:f4:6f:e3:
9b:cd:6c:41:28:c6:0e:b5:31:99:60:dd:46:d6:23:
a2:79:c9:1b:0e:b9:f3:17:a2:de:51:67:04:d3:eb:
a0:4f:10:1e:47:6c:36:26:b6:65:13:ca:64:9b:bd:
44:c7:ba:a2:de:3b:54:80:1a:cc:89:15:08:c0:3c:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5B:47:58:4E:21:DE:FC:62:E6:FC:14:4A:66:69:7C:E0:0E:AA:44
X509v3 Authority Key Identifier:
keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c5:8e:ac:4e:59:2f:8a:62:74:64:57:33:04:ad:46:5b:da:
97:81:0f:11:4d:79:98:48:94:06:36:ee:0b:c6:aa:9f:49:96:
92:4b:21:e0:07:f2:24:93:be:70:17:b4:73:60:ad:7b:35:71:
2f:ee:99:90:1c:99:87:a7:bd:e9:3a:ce:83:39:b3:5b:37:52:
5b:f6:32:6b:1f:c6:55:a2:d9:7e:3f:ca:e5:53:ea:c2:81:0f:
3d:ac:97:56:7f:55:1b:3c:43:94:23:ec:1d:a3:e5:80:64:af:
24:35:8a:e2:3e:69:8d:ba:ee:84:37:05:82:d0:01:3b:2a:c6:
28:71:a7:41:1c:74:7d:55:26:cb:e7:e5:fc:b1:05:b5:06:57:
88:0a:33:b5:fb:51:ba:ed:09:9b:08:7d:65:aa:ad:f1:d3:d1:
80:84:4d:ab:f4:36:89:4a:af:40:45:a2:a6:0a:e7:b8:99:8c:
9c:a5:26:58:59:d2:9e:df:84:c8:a9:ec:00:2c:89:12:8e:81:
12:f4:78:04:74:c9:ac:1c:93:3f:4c:b8:ba:be:bd:d0:3a:c9:
ad:a5:89:bb:62:66:aa:f2:1a:3b:95:36:75:80:2d:e2:1b:1f:
1f:01:3d:36:fb:e8:4f:b0:24:e4:60:1f:34:07:16:56:9d:96:
e2:54:54:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:52 2026 by rpki-client