Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
File: K3bhVwytdzn9C_9gYy4FvAb2QuM.mft (raw, json)
Hash identifier: r2ZpeYAfTlgZTIrtmxIxy+/4teYOMoK6vVik+fkvp2o=
Subject key identifier: 98:FA:A1:1A:C9:D8:20:CF:B4:7D:69:2D:63:2F:DA:4A:5C:FC:22:FA
Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Certificate serial: 019F8EA2E961D8062D95A753A6237A8D63AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
Manifest number: 03B9
Signing time: Thu 23 Jul 2026 11:01:08 +0000
Manifest this update: Thu 23 Jul 2026 11:01:08 +0000
Manifest next update: Fri 24 Jul 2026 11:01:08 +0000
Files and hashes: 1: HV1KmD-rZRC54waUcFWtUdN1nZI.asa (hash: CM7WmKkuGJam1zdNd7N3h3RWaCzkeUgNB55NaAhm7io=)
2: K3bhVwytdzn9C_9gYy4FvAb2QuM.crl (hash: 9mbNXu5BOIlnwkFCo5dJFFUVoIFBkN+drf9qvCG57pM=)
3: Z92yiTrhR0fQeo1Gpcv8VY0ix_Q.roa (hash: X+YVIvMsha8DVgM98Sir2A7a/vrAXaN9NbnUzgvjneo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:e9:61:d8:06:2d:95:a7:53:a6:23:7a:8d:63:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Validity
Not Before: Jul 23 11:01:08 2026 GMT
Not After : Jul 24 11:01:08 2026 GMT
Subject: CN=98faa11ac9d820cfb47d692d632fda4a5cfc22fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:f1:4f:40:09:fd:58:7f:6a:d4:cc:c3:66:
26:96:46:fc:74:b6:ad:9e:1c:9e:75:b1:ae:c4:4e:
cb:33:54:02:e1:9c:1b:ab:4e:b4:0b:68:cb:9e:a4:
64:b9:12:25:50:08:b6:ac:2c:e9:f1:49:eb:1e:bb:
fe:b3:c2:df:6f:41:e5:05:30:5a:97:71:4d:f7:b7:
a7:81:4f:91:06:73:ef:95:60:b1:f1:c8:44:f1:71:
af:73:f2:3a:9b:47:3b:27:e7:67:49:d9:82:a8:12:
24:ec:ee:7f:71:cc:9a:d2:b0:96:9a:a2:75:0f:cb:
25:89:18:be:e0:83:1b:c2:cf:2f:03:3a:b9:a2:ab:
de:9b:65:c6:a4:fe:f1:88:13:f2:84:6e:10:17:8f:
e3:d5:d4:1c:b8:85:d2:0e:e3:ee:c7:95:07:12:77:
65:24:e3:42:e6:eb:4a:fa:e8:df:61:71:5c:5f:70:
56:23:e5:6f:05:2f:a5:21:f5:35:1c:2c:67:29:fb:
42:4f:3d:2b:bf:27:27:3d:37:4e:25:c4:6e:7e:8c:
01:5b:16:9a:ca:34:7e:e4:b5:cb:26:f9:9e:0a:14:
15:38:7d:1e:ef:d6:b0:96:a7:f0:4b:dd:21:e4:88:
42:1f:ff:a6:25:47:12:bf:ad:6c:29:e7:05:c8:98:
b4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FA:A1:1A:C9:D8:20:CF:B4:7D:69:2D:63:2F:DA:4A:5C:FC:22:FA
X509v3 Authority Key Identifier:
keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3d:3b:83:2c:6d:db:a8:66:75:ba:20:8f:35:ea:a3:fe:bc:
ab:56:97:3b:6c:1f:ac:16:c4:2c:55:e0:e8:80:31:3b:ea:d0:
f7:22:f3:bd:5a:61:98:55:ec:e2:e9:9d:ae:f8:b7:58:92:03:
e2:75:00:c9:46:f0:d7:b4:92:5e:26:f8:23:11:75:55:25:38:
bf:cc:71:ea:df:9b:c2:e1:60:4f:d9:8b:4a:d0:9b:5a:9d:12:
48:83:41:73:7e:30:ab:04:61:0e:3a:b9:d4:b3:a7:73:b7:a4:
89:d8:66:81:48:32:0a:8c:07:2c:f7:83:10:d2:2f:ee:00:74:
17:5c:3b:e1:78:78:1b:d6:28:f7:5a:a2:8d:da:09:77:a0:9d:
da:a6:e2:c4:6c:49:fd:18:c2:9d:65:30:43:f5:07:bd:5e:df:
35:ae:0d:1c:a2:5e:13:87:b9:fb:95:01:62:61:a4:ab:1c:e6:
30:c4:35:b6:fb:74:f3:36:a2:d9:c5:d6:02:eb:4e:96:6b:3a:
5e:a2:f3:4a:c0:25:9b:b1:d4:b9:33:4d:67:97:87:d9:8b:e0:
73:08:39:51:c0:27:05:7f:dd:b9:ff:8e:94:d0:7d:1a:9c:0d:
12:95:d7:54:cf:ac:2f:10:cd:da:fc:7a:b0:60:2c:47:5d:78:
75:16:3c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:22 2026 by rpki-client