Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
File: K3bhVwytdzn9C_9gYy4FvAb2QuM.mft (raw, json)
Hash identifier: ez6ybE1PNCGVVTxqV/w85qxnWwUypjtJtV/omXgVyw4=
Subject key identifier: 38:80:FF:BF:D2:61:2B:5F:90:22:A1:9A:CC:BC:79:EC:6A:29:18:82
Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Certificate serial: 01A0D8DF2DFA21D69C8086047F6A32759C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
Manifest number: 0464
Signing time: Fri 25 Sep 2026 14:01:39 +0000
Manifest this update: Fri 25 Sep 2026 14:01:39 +0000
Manifest next update: Sat 26 Sep 2026 14:01:39 +0000
Files and hashes: 1: HV1KmD-rZRC54waUcFWtUdN1nZI.asa (hash: CM7WmKkuGJam1zdNd7N3h3RWaCzkeUgNB55NaAhm7io=)
2: K3bhVwytdzn9C_9gYy4FvAb2QuM.crl (hash: cB9s9YAKBgb7k28hVGIuTtOgyvXq30bc0JdeO7SQNuo=)
3: Z92yiTrhR0fQeo1Gpcv8VY0ix_Q.roa (hash: X+YVIvMsha8DVgM98Sir2A7a/vrAXaN9NbnUzgvjneo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:2d:fa:21:d6:9c:80:86:04:7f:6a:32:75:9c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Validity
Not Before: Sep 25 14:01:39 2026 GMT
Not After : Sep 26 14:01:39 2026 GMT
Subject: CN=3880ffbfd2612b5f9022a19accbc79ec6a291882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:69:49:1e:35:3f:21:f2:9d:96:de:b8:15:
10:54:f4:f6:03:15:a4:88:55:1f:79:4f:75:21:8b:
12:56:b3:1b:e3:fe:83:d0:de:41:f1:30:88:69:e5:
53:61:a6:a8:a3:25:9d:ee:92:7d:bb:66:9b:8b:7f:
69:5c:0a:db:4d:2d:4a:85:d9:b6:77:0d:c0:66:77:
21:74:e5:fc:1a:5c:70:f6:ad:e9:05:a8:55:09:28:
72:2e:6a:7a:4b:2b:d4:d8:37:eb:66:70:71:5e:92:
39:b6:37:23:e9:a9:ba:5e:bc:8c:85:ab:45:18:d1:
e9:bd:70:64:3c:a9:5a:ea:53:53:49:86:47:c1:0c:
2e:fd:79:0b:e5:f4:57:75:72:08:79:b0:fa:01:b2:
fb:1b:d3:dd:09:9a:9c:75:e1:2a:78:1a:b3:d5:c6:
a2:4f:0d:11:56:bf:c0:7f:81:3b:93:09:04:26:16:
cb:b7:44:d5:7e:d6:0d:c9:ec:f9:5c:ef:a4:8f:31:
03:75:ec:15:2d:f7:8a:bf:ff:97:b8:29:fc:1e:a8:
31:6f:48:c6:e6:20:76:3d:7b:2f:52:e8:2b:53:bc:
95:42:f5:17:2b:f4:3f:e8:f8:04:80:26:7d:e8:ed:
51:5d:2f:2b:61:9e:be:3c:25:6e:d0:9f:9f:30:e2:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:80:FF:BF:D2:61:2B:5F:90:22:A1:9A:CC:BC:79:EC:6A:29:18:82
X509v3 Authority Key Identifier:
keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:bd:b6:fe:cf:06:9c:22:76:1e:41:17:9d:dd:e8:ba:2d:fe:
a1:9f:01:73:fa:2d:99:19:3a:e2:e2:19:78:8e:80:64:52:0c:
d0:c4:09:0d:b5:12:14:ae:1d:3d:48:fe:42:30:e4:cc:f6:22:
e3:c7:05:8e:a9:ae:14:2f:39:9e:b5:ff:65:fe:17:bc:65:4c:
84:15:ab:93:fd:42:64:9b:3a:e5:e8:1c:8e:5a:4f:8c:79:01:
d1:53:10:7a:1e:b3:da:54:3c:f2:19:36:8f:0b:f9:ad:a1:81:
d7:6a:7b:d7:da:15:4a:92:fb:3e:d3:cb:5a:7f:58:89:51:5b:
21:b0:6e:1c:07:35:7d:f9:24:31:bb:27:dc:17:7d:df:a6:b6:
94:cc:a9:03:5a:08:fa:cd:48:40:d9:2c:51:47:5f:af:30:c4:
b0:7d:c7:8a:5f:fa:52:df:bc:2e:db:e3:ab:63:57:e7:25:2e:
56:a8:b2:f4:4e:17:41:21:bd:d8:76:fd:ef:47:42:1f:c1:df:
f8:f7:f1:70:d5:e1:f9:67:d3:98:24:ba:a0:3c:5b:da:79:cc:
e1:c7:a1:bd:bf:76:07:f8:09:ea:02:c7:b4:fe:b8:f3:b7:f6:
a0:bc:59:31:40:ba:9e:91:3e:03:3a:d1:1a:f9:c5:7c:33:9d:
91:3c:f3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:31:56 2026 by rpki-client