Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
File: K3bhVwytdzn9C_9gYy4FvAb2QuM.mft (raw, json)
Hash identifier: 5MzshGW+1s+kuX0ogNr4uznXirg9yiOW09DqOdelXJ4=
Subject key identifier: 1A:53:C8:21:DD:9C:B6:0E:D6:EC:AC:5E:99:D3:88:7B:12:0E:EC:E6
Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Certificate serial: 019D265FEBC034D004DAE95998975682A7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
Manifest number: 0277
Signing time: Wed 25 Mar 2026 19:01:53 +0000
Manifest this update: Wed 25 Mar 2026 19:01:53 +0000
Manifest next update: Thu 26 Mar 2026 19:01:53 +0000
Files and hashes: 1: B65rjwLsAKNHyDmSqKvHUJ8cNBc.roa (hash: 5NrfUPDXXXmhJ+JmLFvf/QPQMfrwfuMZfIVQvRGPZHc=)
2: K3bhVwytdzn9C_9gYy4FvAb2QuM.crl (hash: Ij/xRDmjRINaZoXjxF9Q9XcaQh9PRoXCFQXu4Ofbj/U=)
3: ZVEt9mXu1eJe81PrexDO4FphB_M.asa (hash: DhqFzLrsMjhd/GYHnppx/kLawShg14X54LUCOOfhDY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:eb:c0:34:d0:04:da:e9:59:98:97:56:82:a7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Validity
Not Before: Mar 25 19:01:53 2026 GMT
Not After : Mar 26 19:01:53 2026 GMT
Subject: CN=1a53c821dd9cb60ed6ecac5e99d3887b120eece6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:55:6d:bb:6d:b1:e6:ea:27:0d:db:8a:cb:
00:77:71:33:a6:f8:4e:db:9a:23:b4:c0:91:08:f0:
62:94:b2:21:de:e5:70:0d:d0:e0:11:ed:d9:3b:96:
e6:2f:3e:34:1b:ec:23:8d:02:22:6e:70:ff:f5:d9:
f2:27:95:56:97:22:36:90:e9:57:5e:53:65:0f:4d:
7d:26:24:84:04:57:ef:d6:da:39:79:ea:c1:78:c5:
e8:ef:b7:90:c8:43:3e:16:fb:24:7b:5f:17:ef:7f:
e7:b1:63:86:1e:7e:1a:f0:62:22:2c:03:24:a5:1d:
32:1a:04:20:d1:ac:ae:74:14:ce:34:2a:bc:1b:be:
30:a3:f7:f7:ae:65:00:b1:7f:d5:97:01:e1:d9:e9:
83:09:70:6b:cf:88:bc:cc:ca:7f:61:ae:b8:f6:83:
65:59:62:60:57:42:28:e7:8c:af:7e:a5:af:6a:dc:
08:48:54:29:36:09:7e:72:75:ec:76:eb:e4:5d:83:
94:a9:0b:0c:1a:8c:83:c8:09:53:d5:aa:74:de:6f:
f0:15:42:1b:78:f0:06:c7:88:ba:9b:41:f6:42:e0:
3b:29:d5:d4:9b:11:b7:f0:37:df:27:56:ef:52:9a:
18:a9:1c:c9:bf:df:af:3a:27:ba:1a:e6:00:07:7e:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:53:C8:21:DD:9C:B6:0E:D6:EC:AC:5E:99:D3:88:7B:12:0E:EC:E6
X509v3 Authority Key Identifier:
keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d6:9d:9c:81:cf:37:98:af:a5:9e:e1:1e:c3:4a:e3:3b:13:
8d:50:ee:23:25:97:74:b5:4b:c6:3b:a8:ad:8b:65:9f:88:57:
1c:80:d8:9e:cd:36:82:22:aa:48:02:fd:b9:94:30:2e:1e:ee:
40:15:99:f2:2a:cc:7f:08:a8:e5:c0:ff:98:43:e8:5d:96:27:
64:80:5f:20:d9:d8:40:57:9c:18:ba:cb:76:23:0a:2e:c4:7f:
ee:d6:49:3b:9b:c8:c9:3a:dc:f6:1f:f5:89:41:00:b2:d3:8d:
01:a0:6c:64:a9:c0:4b:79:c7:20:05:c5:e9:4e:44:03:7d:c6:
3e:8a:f9:02:66:11:a8:f2:0e:3a:27:94:05:cf:3d:15:08:e9:
bd:c9:aa:0b:6d:3c:78:0c:b2:09:8c:b1:ab:e8:57:59:7d:02:
95:b1:eb:5a:d6:28:44:98:42:bd:ab:63:87:7b:1f:c3:dd:aa:
07:b2:15:05:23:66:7d:51:64:c3:10:32:10:f0:f7:88:cf:bb:
54:4e:dd:c3:81:df:07:d3:79:c5:58:f6:25:4e:dd:25:35:92:
0f:e7:b8:50:ab:c4:16:7a:f9:29:ea:ea:50:50:a9:41:1d:dd:
71:58:81:fa:d2:ee:09:f0:89:24:1e:59:66:6f:05:7b:e6:b4:
b0:f0:2f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:15:37 2026 by rpki-client