Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
File: K3BccjJSLxtRhLGpI61d9azKgpY.mft (raw, json)
Hash identifier: 43DzB7aKu0NPdswl+MBb3xn22sHuYK9ASbePPLR2SBk=
Subject key identifier: E0:64:0B:2F:5E:C5:7E:41:3D:59:0B:81:A9:4C:F9:78:5E:42:0D:53
Authority key identifier: 2B:70:5C:72:32:52:2F:1B:51:84:B1:A9:23:AD:5D:F5:AC:CA:82:96
Certificate issuer: /CN=2b705c7232522f1b5184b1a923ad5df5acca8296
Certificate serial: 019F957FEEEA887DAB6FF1C3179F5190FF93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
Manifest number: 05
Signing time: Fri 24 Jul 2026 19:00:17 +0000
Manifest this update: Fri 24 Jul 2026 19:00:17 +0000
Manifest next update: Sat 25 Jul 2026 19:00:17 +0000
Files and hashes: 1: 5R-Ml5tqIm_FJpJXkUdDiSStRjY.roa (hash: s0w7EnEzaL3hvd2P1WfGCyS4/IjBnkkqTOFQOK9O+hc=)
2: K3BccjJSLxtRhLGpI61d9azKgpY.crl (hash: ZQiDQ7LbaeqrqdD8Tl1kBLVEz57JNYWhUQKBWQmSuDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:7f:ee:ea:88:7d:ab:6f:f1:c3:17:9f:51:90:ff:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b705c7232522f1b5184b1a923ad5df5acca8296
Validity
Not Before: Jul 24 19:00:17 2026 GMT
Not After : Jul 25 19:00:17 2026 GMT
Subject: CN=e0640b2f5ec57e413d590b81a94cf9785e420d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:17:7d:6d:3f:66:03:a5:db:40:87:38:66:79:
13:17:68:21:a3:d7:23:dc:c9:63:ad:9a:03:c7:c8:
10:16:92:39:e1:2f:74:af:63:b1:2f:e2:ce:17:84:
7b:c2:92:92:3e:68:64:bd:97:78:fa:34:e5:9a:53:
71:15:ce:9f:6b:8f:81:69:14:8b:33:6a:72:15:72:
dc:82:54:0a:92:9a:52:b9:fa:9d:c6:94:9b:1a:7b:
69:cc:cc:bd:f0:9f:0b:3f:18:c2:09:d7:2c:58:fc:
ed:8c:51:40:b9:92:50:80:9a:ff:52:90:27:ca:74:
86:3b:92:11:d5:01:9f:9e:9d:c0:2f:a3:d3:47:ee:
cc:33:14:ed:8f:4e:17:5a:15:de:fe:e0:ef:57:6f:
f1:2e:88:d8:d9:93:2d:d1:4f:43:56:e7:40:59:a2:
56:48:f2:46:65:0f:3c:32:12:6a:71:21:94:f5:25:
63:cc:5d:d1:da:ea:4f:b4:d7:51:7e:fe:55:00:0e:
86:13:a9:08:03:81:67:73:61:2c:c8:cb:5b:6f:ae:
e7:b4:2a:4b:64:d5:43:bd:6d:13:5f:08:fe:68:5e:
02:12:28:b8:ff:e3:38:81:88:e9:2f:31:84:9a:56:
c0:f7:62:ee:b7:01:48:e6:de:1e:18:8f:58:22:87:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:64:0B:2F:5E:C5:7E:41:3D:59:0B:81:A9:4C:F9:78:5E:42:0D:53
X509v3 Authority Key Identifier:
keyid:2B:70:5C:72:32:52:2F:1B:51:84:B1:A9:23:AD:5D:F5:AC:CA:82:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a6:e9:d5:7a:e3:42:11:96:26:0c:92:ab:6a:1a:6a:bc:e0:
bc:13:93:d9:84:b1:42:55:80:91:35:fd:af:d1:1e:5e:ff:62:
e0:4c:e4:a0:af:fb:c1:87:4c:57:a2:f2:5e:24:78:ce:27:93:
2d:63:8a:bf:4b:23:8f:79:50:54:f2:d7:35:5c:81:08:1f:a1:
3d:ae:19:34:1e:62:4a:b5:59:04:06:8d:9f:48:b7:c3:cb:32:
5b:35:9b:1a:e6:8a:28:81:35:3d:94:e6:05:aa:6a:cd:85:9f:
e3:04:19:86:d3:9d:1a:4a:0e:5a:4a:86:53:c2:08:32:33:d2:
5d:12:6e:5d:26:c8:03:b2:dc:fe:c3:1b:75:76:2f:49:75:2d:
19:78:bb:ff:c4:1a:93:57:1c:5a:ef:4e:19:8e:95:78:4f:b3:
90:54:c6:fb:1f:7c:d7:61:de:6f:f2:43:9d:6e:46:02:07:52:
f2:76:e2:1e:ef:5b:7a:0f:a7:fd:2d:12:90:47:46:a6:ee:d3:
2c:f7:3f:01:6f:39:ac:6c:a2:58:fa:f7:3d:30:26:3c:fb:49:
69:35:a2:a4:2d:b6:97:4f:01:83:79:6f:ec:a2:d4:b5:7d:b6:
41:86:6a:20:be:96:ff:db:70:8d:ec:02:68:79:e5:69:03:03:
3b:d0:e2:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Vf+7qiH2rb/HDF59RkP+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNzA1YzcyMzI1MjJmMWI1MTg0YjFhOTIzYWQ1ZGY1YWNj
YTgyOTYwHhcNMjYwNzI0MTkwMDE3WhcNMjYwNzI1MTkwMDE3WjAzMTEwLwYDVQQD
EyhlMDY0MGIyZjVlYzU3ZTQxM2Q1OTBiODFhOTRjZjk3ODVlNDIwZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhd9bT9mA6XbQIc4ZnkTF2gho9cj
3MljrZoDx8gQFpI54S90r2OxL+LOF4R7wpKSPmhkvZd4+jTlmlNxFc6fa4+BaRSL
M2pyFXLcglQKkppSufqdxpSbGntpzMy98J8LPxjCCdcsWPztjFFAuZJQgJr/UpAn
ynSGO5IR1QGfnp3AL6PTR+7MMxTtj04XWhXe/uDvV2/xLojY2ZMt0U9DVudAWaJW
SPJGZQ88MhJqcSGU9SVjzF3R2upPtNdRfv5VAA6GE6kIA4Fnc2EsyMtbb67ntCpL
ZNVDvW0TXwj+aF4CEii4/+M4gYjpLzGEmlbA92LutwFI5t4eGI9YIof+FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBkCy9exX5BPVkLgalM+XheQg1TMB8GA1UdIwQY
MBaAFCtwXHIyUi8bUYSxqSOtXfWsyoKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzNCY2NqSlNMeHRSaExHcEk2MWQ5YXpLZ3BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9hYTFjOTEtMzVkZi00MmYwLTg4Nzct
NTE2ZTA1OGU4Nzg0LzEvSzNCY2NqSlNMeHRSaExHcEk2MWQ5YXpLZ3BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9hYTFjOTEtMzVkZi00MmYwLTg4NzctNTE2ZTA1OGU4Nzg0
LzEvSzNCY2NqSlNMeHRSaExHcEk2MWQ5YXpLZ3BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGabp1Xrj
QhGWJgySq2oaarzgvBOT2YSxQlWAkTX9r9EeXv9i4EzkoK/7wYdMV6LyXiR4zieT
LWOKv0sjj3lQVPLXNVyBCB+hPa4ZNB5iSrVZBAaNn0i3w8syWzWbGuaKKIE1PZTm
BapqzYWf4wQZhtOdGkoOWkqGU8IIMjPSXRJuXSbIA7Lc/sMbdXYvSXUtGXi7/8Qa
k1ccWu9OGY6VeE+zkFTG+x9812Heb/JDnW5GAgdS8nbiHu9beg+n/S0SkEdGpu7T
LPc/AW85rGyiWPr3PTAmPPtJaTWipC22l08Bg3lv7KLUtX22QYZqIL6W/9twjewC
aHnlaQMDO9DilA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:28 2026 by rpki-client