Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
File: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft (raw, json)
Hash identifier: L2HsKS0FbjH8aRr1Xg938wS1S5w5kjfaaBfu+Vh/jdk=
Subject key identifier: 6B:1C:AE:1D:F9:C5:23:9A:8D:55:D5:C2:27:52:A1:EE:AF:D2:57:24
Authority key identifier: 2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
Certificate issuer: /CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Certificate serial: 019D337674CF2DD61F4A91561E258B0220C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
Manifest number: 0656
Signing time: Sat 28 Mar 2026 08:01:34 +0000
Manifest this update: Sat 28 Mar 2026 08:01:34 +0000
Manifest next update: Sun 29 Mar 2026 08:01:34 +0000
Files and hashes: 1: HNWOK-qSzLEKLOiT1RxncC81FBw.roa (hash: VsSGzqx4mMKPsvTq4Mnx3YPfOOngg/lj8h0zkR3wf/A=)
2: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl (hash: A4joQ83cdeyPkGBeMVY9XJpy0c0cwnP/XNIlFoLArys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:74:cf:2d:d6:1f:4a:91:56:1e:25:8b:02:20:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Validity
Not Before: Mar 28 08:01:34 2026 GMT
Not After : Mar 29 08:01:34 2026 GMT
Subject: CN=6b1cae1df9c5239a8d55d5c22752a1eeafd25724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:bc:b7:96:e0:32:6d:34:c3:db:4e:e8:27:
ad:1a:ed:e5:2e:b4:35:8a:4c:be:b4:d7:69:46:0f:
ce:8e:45:15:bf:e9:17:7b:2e:b9:e0:f8:de:99:c7:
74:9d:0e:37:84:dd:62:04:57:c2:d5:71:6e:5f:4a:
fa:fe:e1:0d:99:9e:b6:27:45:4c:ee:c2:a7:3f:8b:
42:1a:9a:9c:37:cb:a7:1f:1a:6c:81:30:42:78:7e:
7e:4a:7b:3e:2b:b8:39:56:71:c5:23:b3:01:ef:b6:
2c:6c:cf:5a:e4:73:eb:5a:14:f2:82:38:00:cb:ec:
a2:ee:d9:80:28:95:ee:e3:97:d2:2c:af:d2:2e:58:
27:93:cf:48:b0:4c:46:18:c2:6f:bc:74:92:48:f2:
ab:0f:d1:6a:5d:30:4d:17:ca:26:c4:6a:29:22:e0:
58:d9:3a:16:87:ef:15:eb:51:95:f5:82:7a:79:fd:
45:a4:c4:73:6c:9f:d4:e9:4d:55:33:b2:ab:8d:da:
07:f3:cd:2b:28:66:07:03:54:33:95:54:ad:10:4b:
f9:64:a1:65:d2:c0:88:70:cc:c3:74:88:b9:6b:01:
a7:a0:71:cb:be:37:9d:27:44:ab:81:6d:70:ad:70:
88:72:2a:d0:82:fa:96:7d:0d:d6:7d:00:1e:82:18:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1C:AE:1D:F9:C5:23:9A:8D:55:D5:C2:27:52:A1:EE:AF:D2:57:24
X509v3 Authority Key Identifier:
keyid:2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ea:d9:40:e3:3d:c6:18:76:be:1d:f7:60:da:04:a8:aa:b0:
fa:e6:84:2b:04:a7:83:5c:e4:a4:34:1d:0a:35:7a:2c:fb:30:
92:46:e5:2f:f6:ae:0a:4d:2d:f2:46:ad:bd:3b:e3:1c:51:03:
bb:40:f5:c7:2e:7a:25:95:86:21:f1:fd:5c:5d:43:46:93:a8:
63:fb:c1:a4:7b:ca:88:d1:1f:88:c4:8a:ee:45:1f:19:36:b9:
3c:ed:3e:2c:f3:09:04:e2:11:ae:25:e9:ea:fe:21:2c:22:11:
19:5e:95:ad:6a:9e:c5:19:a5:90:36:36:09:a3:a5:00:7c:96:
d5:cf:e8:fb:f5:72:2b:dc:df:73:c8:02:e7:75:f8:06:06:72:
38:f4:c5:8b:ac:70:28:2b:24:30:32:c9:11:fe:79:15:75:a3:
c6:86:e4:09:06:fc:72:30:c0:0e:d1:da:76:88:bf:92:ec:b7:
58:54:32:ab:19:cf:d1:2f:16:0d:5c:0d:07:f3:2f:89:be:53:
18:7a:43:5f:f4:2d:45:45:cc:bb:cf:11:6c:da:84:79:69:c3:
50:8d:be:7b:99:b5:73:8c:5e:67:df:50:d4:e6:9a:b2:26:53:
1e:a7:67:ff:f2:f0:aa:b6:27:db:36:da:02:3e:dd:0e:46:3a:
5a:36:20:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:57 2026 by rpki-client