Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: f3KAlLTm1Gw+DmbIIiLV2fvqMJGPmB5251xd3DPdl4w=
Subject key identifier: 85:07:26:80:8D:F9:23:CB:E0:4F:1F:5F:A1:41:CE:64:80:71:D6:C6
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 019D269641511B5D25DD08D0F05BE2448339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 096B
Signing time: Wed 25 Mar 2026 20:01:14 +0000
Manifest this update: Wed 25 Mar 2026 20:01:14 +0000
Manifest next update: Thu 26 Mar 2026 20:01:14 +0000
Files and hashes: 1: JYQFKO-FunI32nUSHCVmHj-U72s.roa (hash: t8vcZJVMC1m+PZSUssB6U2g3nAq5K3T4+GIKxNDbOGE=)
2: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: U/OTcgsMaWmwPIMLFPxL8G7Ury2gjqdqh/B1/ssovzg=)
3: _WfVRuscLnYYCEteyctZE_mRNGA.roa (hash: OwIxeyz2i/PN3Q/yKcsy594HSMnZiCVH224Ea6c2hAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:41:51:1b:5d:25:dd:08:d0:f0:5b:e2:44:83:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: Mar 25 20:01:14 2026 GMT
Not After : Mar 26 20:01:14 2026 GMT
Subject: CN=850726808df923cbe04f1f5fa141ce648071d6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:78:03:4c:6b:58:cb:df:48:d1:15:16:d5:
ca:d1:a2:3c:8f:e0:ba:57:b8:18:7e:c2:de:06:59:
3f:74:3b:1e:94:f3:77:11:82:1a:29:30:e6:0a:5e:
8b:fd:66:0a:9d:85:46:c8:2c:ba:33:5d:8e:c1:09:
38:23:8a:3b:62:b8:2d:31:f7:1e:25:51:f9:ef:f8:
44:82:83:7a:d5:a3:0e:1e:80:e5:db:d1:ea:c9:79:
4a:28:31:cb:f6:30:4c:35:d1:25:8d:2e:4c:53:24:
48:25:8d:4f:26:42:44:23:2c:5e:9b:98:45:d3:22:
17:d5:63:3c:3f:0f:0c:12:4e:dd:8f:62:6a:3a:0d:
7e:5a:99:76:7a:9c:70:03:c5:6e:6a:ec:b3:4a:7c:
54:75:67:dd:e0:4d:1d:36:6b:40:4e:74:1b:26:7b:
e3:7c:e3:99:8e:2c:33:59:49:3e:9b:14:14:43:2a:
8d:28:5b:87:32:1b:45:0d:ab:46:81:02:fa:34:7c:
a7:21:6c:d4:e5:c0:6c:57:e5:c6:05:e5:4d:af:8c:
64:3d:e9:7f:78:3d:e0:5a:f2:a0:64:c0:a4:d6:ad:
04:25:ca:9e:31:ad:b9:9b:3d:9f:7d:58:f4:64:73:
57:52:54:96:54:b8:9e:6f:27:8b:5a:8d:e2:03:99:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:07:26:80:8D:F9:23:CB:E0:4F:1F:5F:A1:41:CE:64:80:71:D6:C6
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2a:ea:79:f7:a3:4d:92:95:6d:e9:11:d7:85:38:92:fa:81:
f5:40:fd:2c:b3:41:1c:75:f8:b3:37:c2:5e:57:ec:e3:aa:6c:
9e:12:03:4d:e4:02:46:4a:13:67:2a:c7:31:b8:81:7d:b1:0c:
82:31:bb:7d:b0:5a:f3:6d:32:9b:2a:c6:01:3b:30:fb:7b:75:
3a:6d:0e:36:57:35:f9:3f:a9:df:42:47:35:2a:ef:56:51:c2:
90:e1:30:0f:31:d3:94:a7:26:74:8d:ee:1b:55:34:bb:0a:81:
78:81:d5:0b:d7:55:00:26:e2:ae:5f:13:12:0a:9b:e7:42:02:
2b:87:62:9a:94:1a:b0:66:b3:ff:b9:b6:84:dc:71:fc:7b:7b:
59:91:78:f5:67:76:0b:b8:fc:ac:67:d4:43:1f:83:42:9c:4f:
7c:fc:0d:0b:f2:43:d3:a5:05:b8:50:8b:72:07:01:f6:23:9d:
a8:31:3a:47:8d:19:9d:b1:16:6d:52:91:d4:df:58:1c:10:dc:
46:57:15:44:f4:22:e4:ec:6c:7f:70:34:26:c6:d9:e8:94:18:
81:f7:b2:cc:b2:62:28:2b:91:30:b3:8b:6c:3e:d6:bd:5a:88:
6a:07:01:f8:2d:bb:1b:ee:fe:2f:23:0a:b5:ac:5e:33:9d:0b:
d7:bd:e1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:51 2026 by rpki-client