Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
File: K3bhVwytdzn9C_9gYy4FvAb2QuM.mft (raw, json)
Hash identifier: KUTyLKuUaJSgy/axHTePxUE26S9Xj4UUOA7+9AONFL4=
Subject key identifier: 87:A4:2F:9C:80:33:02:D6:10:31:64:86:D0:26:5C:41:3B:9B:AF:C0
Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Certificate serial: 019E1D9012A2885BE4E44A3CD79EE74BA0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
Manifest number: 02F7
Signing time: Tue 12 May 2026 19:00:41 +0000
Manifest this update: Tue 12 May 2026 19:00:41 +0000
Manifest next update: Wed 13 May 2026 19:00:41 +0000
Files and hashes: 1: B65rjwLsAKNHyDmSqKvHUJ8cNBc.roa (hash: 5NrfUPDXXXmhJ+JmLFvf/QPQMfrwfuMZfIVQvRGPZHc=)
2: K3bhVwytdzn9C_9gYy4FvAb2QuM.crl (hash: pkeb7qvHdynpFmqPSdqUQKvAmlvyE6ZTNveo8dntdJY=)
3: ZVEt9mXu1eJe81PrexDO4FphB_M.asa (hash: DhqFzLrsMjhd/GYHnppx/kLawShg14X54LUCOOfhDY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:12:a2:88:5b:e4:e4:4a:3c:d7:9e:e7:4b:a0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Validity
Not Before: May 12 19:00:41 2026 GMT
Not After : May 13 19:00:41 2026 GMT
Subject: CN=87a42f9c803302d610316486d0265c413b9bafc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:64:fb:a6:2e:ac:28:ab:a7:69:e9:c6:a5:
ec:44:8a:4a:51:80:e0:a5:3b:f1:c8:18:c8:63:f6:
93:d3:80:78:43:38:59:3a:a5:dd:8c:8b:e4:52:95:
d8:c1:3d:34:01:2e:90:10:a2:55:bd:b4:2e:fe:67:
f2:6f:74:62:30:f9:85:5c:43:b0:8f:3a:3d:d2:08:
fd:9b:44:b6:61:ec:22:9a:1b:9c:55:ef:de:5b:27:
4e:c1:ad:44:06:fb:42:56:06:fc:9a:31:ae:6f:10:
8d:eb:c8:ed:1d:27:ab:8f:57:dd:ff:51:81:d5:b7:
b5:52:0c:f5:82:3d:16:4d:77:e5:04:c6:b3:17:83:
89:58:5c:c4:1e:82:88:cf:6e:6c:d7:ad:8b:a5:ca:
10:1d:64:86:f0:76:62:d3:3e:f4:ae:86:2b:ae:46:
da:28:b7:f6:6f:31:cb:e1:dc:f2:22:54:f4:72:ac:
7b:e7:df:7a:06:9a:c9:6a:a0:9d:2f:2c:31:0a:89:
2c:80:89:f7:72:f7:e1:67:be:25:f1:6f:49:ea:db:
69:d1:69:7f:f3:11:44:04:f9:a4:aa:9b:59:d5:2f:
df:58:56:db:09:43:cb:04:1a:eb:52:3e:23:a1:7d:
5d:16:5a:0f:95:bc:2a:c3:96:bc:68:43:25:5a:d4:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A4:2F:9C:80:33:02:D6:10:31:64:86:D0:26:5C:41:3B:9B:AF:C0
X509v3 Authority Key Identifier:
keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:47:ea:d3:97:05:e3:e0:f0:16:4f:57:25:5b:60:58:fd:6e:
9e:b7:84:24:a3:f1:b9:c7:c0:07:fc:eb:0e:9b:ea:91:59:03:
54:f8:aa:3f:f4:29:7b:dd:1a:84:ac:da:11:81:ce:94:8b:b7:
f7:21:d0:11:6e:b6:4f:43:4d:9a:70:a5:da:8e:35:1a:66:65:
4b:c3:f6:57:40:96:d6:c3:d0:19:02:11:45:5d:5e:6f:06:64:
a9:f6:d6:88:83:72:9a:85:7d:9a:e0:15:4a:48:b2:40:0e:39:
ef:a4:56:10:5f:94:28:a9:46:d8:d8:fc:a8:71:ee:d9:e7:c4:
0f:84:eb:89:d3:42:3a:e3:a0:05:ab:83:ab:af:db:3f:71:92:
93:34:5e:87:3d:4e:af:a6:32:2d:9e:e6:0f:97:bb:a6:f8:bb:
40:1e:56:95:b0:e3:1c:9a:73:f1:15:bf:d5:98:ea:69:7c:ba:
80:67:98:38:c3:1a:ce:a4:f2:87:60:08:b9:38:3f:75:e7:6f:
a3:97:34:b8:b3:ab:30:18:8c:bc:9a:0d:11:7d:f9:72:a1:d0:
f7:c3:cd:40:2f:40:39:c5:aa:d3:66:de:95:fe:c9:87:41:07:
79:a7:e4:55:31:74:81:0d:70:95:b5:a7:26:28:4e:a4:ab:4c:
2c:0a:b8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:05:54 2026 by rpki-client