Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
File: K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft (raw, json)
Hash identifier: hmQWhK9Y4gH++GZMVx4ChYdxtYknNHhtM4YTdnJNbHg=
Subject key identifier: 07:03:16:B0:8B:D8:A3:FA:B2:35:93:EC:0B:31:D7:E5:A7:5D:C7:7E
Authority key identifier: 2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
Certificate issuer: /CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Certificate serial: 019D27DFFF149242858C6119D0D78875485A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
Manifest number: 0FEA
Signing time: Thu 26 Mar 2026 02:01:24 +0000
Manifest this update: Thu 26 Mar 2026 02:01:24 +0000
Manifest next update: Fri 27 Mar 2026 02:01:24 +0000
Files and hashes: 1: K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl (hash: SWHkUk5S1ugXFnwdBlzbbYBeQdelWip4CQLUjQcehoY=)
2: bu3GjlAHqZGZd-3BPhXHMjgIpEs.roa (hash: 6kJDyG+HOxoCKQIkV5vpdJcFhE6os3v3cOBxJZ2yDRI=)
3: fPsEgQuy3pzVeuBd6zMW_oRHokg.roa (hash: U4VIYhVg4lb5wUdDxrd25hgbl1aaNe3P84jW7DjCI4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ff:14:92:42:85:8c:61:19:d0:d7:88:75:48:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Validity
Not Before: Mar 26 02:01:24 2026 GMT
Not After : Mar 27 02:01:24 2026 GMT
Subject: CN=070316b08bd8a3fab23593ec0b31d7e5a75dc77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:e0:99:47:cd:8d:db:e6:cd:da:32:a0:50:
01:15:16:97:f4:c1:b3:60:d5:91:44:74:57:53:1b:
f6:5b:2c:75:45:57:a9:67:c4:fc:bb:bb:f7:7e:8c:
ba:fd:4a:4e:99:0a:8a:2b:0a:a3:4b:cf:b5:84:5a:
f5:16:25:a0:71:6b:08:87:09:f7:e3:24:b6:54:78:
e9:b6:86:4e:95:b2:c5:4e:e6:e8:b0:45:9c:54:87:
bb:ff:94:94:9b:99:46:f2:97:99:61:30:ab:5e:0c:
87:f7:b5:aa:ee:e7:c1:a7:59:f2:c9:c8:e6:e7:cd:
70:8d:f8:ae:b7:03:3e:29:71:25:3b:ba:66:70:88:
02:75:cd:50:b2:47:12:a7:bf:56:b4:a3:c1:1c:9c:
f2:89:21:48:1b:44:af:0e:cd:0f:68:e3:a5:34:c1:
b4:b1:e3:22:76:e3:e3:fb:17:b3:ee:c6:76:c4:93:
09:30:1e:93:45:ec:2f:c7:ac:9d:9b:f0:b2:99:05:
55:61:d1:76:b5:cf:40:52:23:cb:fc:86:19:e7:cb:
9f:98:ce:6e:2a:85:0b:bd:2f:4c:26:b3:e5:a7:f9:
b7:fa:e0:91:8f:4e:25:b9:a0:40:bd:c5:df:41:43:
c6:58:98:15:dc:3b:78:dc:f6:58:6e:5b:e3:bb:9c:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:03:16:B0:8B:D8:A3:FA:B2:35:93:EC:0B:31:D7:E5:A7:5D:C7:7E
X509v3 Authority Key Identifier:
keyid:2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b0:de:0c:5e:60:77:60:a5:35:4a:f8:c8:20:eb:0c:ef:75:
20:2e:70:d5:fa:b9:c7:ec:f7:c9:61:40:9b:37:a6:10:3b:67:
cc:d4:4f:d4:94:4d:d2:e1:76:95:30:82:65:7d:8f:e5:d3:90:
9a:e1:c0:d6:c8:aa:f9:19:63:6a:ca:6d:2f:9d:79:c5:d2:0c:
1a:b6:7a:f5:95:41:7a:1b:93:a3:84:a1:50:53:81:77:4d:be:
69:9d:30:ee:f2:38:03:36:0d:21:02:af:20:47:78:14:6a:1c:
78:c1:93:0a:ca:e1:47:1d:c2:d9:c4:a7:93:a4:e0:08:29:fa:
ac:e3:28:43:d0:1c:3c:4f:37:f3:5d:b0:1e:54:4b:fd:fd:60:
e1:4f:5e:4a:fc:95:7c:5c:ac:d1:33:58:19:96:82:62:4b:a4:
3d:fc:4a:d3:33:e8:8a:1e:d6:11:65:4f:a0:37:86:a3:4e:0e:
8b:a3:8d:36:0c:e0:16:d7:de:72:fc:f4:e9:65:9b:98:c9:f9:
9c:88:57:ba:dd:9a:8e:ee:be:4e:dc:7a:07:5a:f7:ba:57:f3:
69:62:77:ac:b4:11:19:3d:8a:de:19:88:30:0d:3e:2a:1e:48:
60:9a:94:d7:1e:91:7f:cb:66:3e:04:81:3a:eb:96:dd:35:ed:
0a:c7:6a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:20:31 2026 by rpki-client