Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json)
Hash identifier: paPGTE9CEZXBSOY2JQr46YrZ2ynx6VScLNkrqLUYziA=
Subject key identifier: 3E:92:6E:75:9D:46:AE:CB:49:30:F7:20:4B:F8:DB:57:BA:A0:F7:92
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 019D273A95C63A57F0526DF552FC2E940939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
Manifest number: 077C
Signing time: Wed 25 Mar 2026 23:00:43 +0000
Manifest this update: Wed 25 Mar 2026 23:00:43 +0000
Manifest next update: Thu 26 Mar 2026 23:00:43 +0000
Files and hashes: 1: CfZQ5f2U-PTexk4plOrVmUR8SVo.roa (hash: S+1++wq6+OUaKhTshD4b393Lz17gGEyD5GzsQU3qNMc=)
2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: TJa/YUzUDfBqlXxieia32gBdlvffBkBZ3880ybSUPRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:95:c6:3a:57:f0:52:6d:f5:52:fc:2e:94:09:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Mar 25 23:00:43 2026 GMT
Not After : Mar 26 23:00:43 2026 GMT
Subject: CN=3e926e759d46aecb4930f7204bf8db57baa0f792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:ed:56:ee:e0:2e:f4:0b:12:88:63:ac:bd:
df:e6:ba:1e:61:ac:29:32:97:99:bf:5d:7d:48:e8:
87:8e:b0:55:2d:7b:8a:3a:01:73:54:bc:a7:bd:02:
9f:3b:bf:50:a7:c7:c5:1e:16:61:8f:17:76:d5:6b:
6c:ab:9c:6b:de:c4:92:b4:dc:d8:71:83:22:d7:31:
29:ee:ff:f8:da:90:16:f0:a4:f6:49:c0:e6:6c:02:
18:f0:93:47:2d:62:40:f0:68:13:f9:33:59:98:5a:
76:6c:12:00:61:10:3e:81:51:88:51:16:b1:40:7b:
45:3e:f1:b7:75:e3:28:72:20:de:94:f9:9e:df:9e:
73:a3:d0:fc:cf:3d:0f:46:4d:86:68:6a:3a:55:41:
3c:84:9d:20:78:55:d4:de:60:6a:5b:3f:aa:cd:9a:
be:80:05:b7:02:4d:10:d5:b2:0a:26:3b:ac:61:2a:
df:9a:16:ac:c9:40:e6:f8:d8:84:15:f1:81:b9:3c:
42:af:f9:7a:ef:37:56:9e:7c:01:aa:c5:b6:04:1f:
71:0d:93:1c:82:df:a0:99:ab:bb:82:7e:4a:f7:39:
00:e6:72:ca:7e:fc:1c:6c:18:4d:a4:26:14:9f:a5:
5a:56:c0:27:af:c5:ed:4a:63:d9:30:ec:d9:db:83:
b9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:92:6E:75:9D:46:AE:CB:49:30:F7:20:4B:F8:DB:57:BA:A0:F7:92
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6f:9d:67:03:66:22:41:06:63:90:ac:12:c7:c8:f0:22:8b:
6a:af:36:4f:d4:98:0c:ab:f1:fb:6a:f2:10:fa:e3:8e:99:74:
62:24:2e:83:ee:71:8b:03:fa:dc:37:00:2c:6d:cf:33:89:84:
2e:78:72:17:30:2c:d2:8a:7a:15:15:eb:9b:a9:ca:39:4e:65:
ac:d2:b5:44:4d:b0:30:3f:45:95:cb:2f:f9:b1:69:3b:08:01:
13:6e:34:98:5a:c9:02:61:62:33:93:9a:c2:80:8d:87:03:da:
b6:a3:a4:08:22:d7:05:e1:da:ae:e5:b3:00:7f:b1:d5:69:d2:
b3:62:1e:de:e6:87:88:af:00:45:1e:7e:07:85:60:72:bf:90:
ff:1f:1c:d4:a4:bb:89:52:bd:cd:27:bf:83:f2:f4:bd:7b:cc:
03:b1:37:02:4f:f3:97:86:a2:48:7a:df:d7:cb:6d:40:17:aa:
7b:65:75:95:e8:b7:13:88:bb:ed:e1:1e:75:b3:7d:e7:86:7d:
d4:71:38:c4:2f:4a:eb:43:76:29:17:e9:d0:ad:77:f9:23:98:
20:cc:a0:8f:0d:ae:4a:49:2e:24:09:b1:78:88:67:2b:25:20:
9f:03:c3:fa:55:10:eb:a2:1b:74:5d:15:3f:38:32:bc:83:02:
cd:b5:a3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:10 2026 by rpki-client