Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
File: K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json)
Hash identifier: XyOLHhW5yMhwWCedcBmKIhocTxuW1IeCgoR0yVXW5U0=
Subject key identifier: 8A:01:E8:84:69:6A:0D:B0:C5:0E:9A:6C:D8:CB:4D:CC:4E:7A:D2:A2
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial: 019D99991952A793458F6BC3B69E4BD3FD64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
Manifest number: 0628
Signing time: Fri 17 Apr 2026 04:00:40 +0000
Manifest this update: Fri 17 Apr 2026 04:00:40 +0000
Manifest next update: Sat 18 Apr 2026 04:00:40 +0000
Files and hashes: 1: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: 6xowlJKcQTvGWhfBISgStrB+U61ZTj/vUGaCN28ngWc=)
2: iOwYO4Lxb7-lX1XZvdtMWr_SxeI.roa (hash: X1eh/qobiG09DJ7YvAOhgY6UujJecU+Lh8+lJTDAajg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:19:52:a7:93:45:8f:6b:c3:b6:9e:4b:d3:fd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Validity
Not Before: Apr 17 04:00:40 2026 GMT
Not After : Apr 18 04:00:40 2026 GMT
Subject: CN=8a01e884696a0db0c50e9a6cd8cb4dcc4e7ad2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:47:e3:e6:dc:6d:87:ed:e1:93:f7:b5:33:
fa:eb:53:bd:50:a3:58:5a:6b:57:4c:30:6b:54:05:
b1:c9:b7:ff:ce:70:c8:c8:56:59:58:fe:1c:2c:bc:
fc:0c:fd:2c:d0:4e:b5:22:cb:f7:bb:06:1c:e4:49:
0e:5f:82:02:64:45:f4:74:08:c2:2f:e4:6b:b3:e6:
8d:4e:a4:83:be:3b:46:e0:f3:f7:9f:48:84:05:fe:
1d:79:2a:a6:e7:88:34:d8:19:7c:c7:7b:b9:81:ba:
3f:78:67:f4:62:1b:97:1f:2a:a7:a0:ae:a4:05:6f:
ff:3d:d1:70:a0:51:31:41:6d:29:f9:6b:7e:32:69:
de:61:c5:b3:ca:dc:c8:4a:5a:90:32:14:c1:f3:f2:
c1:fb:15:b3:fb:3b:db:4c:9e:b0:21:4f:04:42:6f:
5a:8d:a7:f4:9f:a6:0c:e9:58:a8:56:ba:7e:b1:c9:
10:d2:be:a9:d2:36:88:5d:1b:77:b5:aa:eb:b3:d7:
fa:c7:b1:1c:cf:68:50:46:1b:e8:f5:e3:5a:fc:38:
01:35:b4:53:ba:8b:8c:b9:09:25:53:81:88:ba:3e:
39:47:5b:c4:b3:1a:4c:7d:fe:ae:ca:32:bc:2b:45:
a2:7c:a4:0c:60:c0:22:01:d0:6b:c5:9c:c7:14:62:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:01:E8:84:69:6A:0D:B0:C5:0E:9A:6C:D8:CB:4D:CC:4E:7A:D2:A2
X509v3 Authority Key Identifier:
keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9b:47:a1:d4:b0:a5:57:91:90:e7:e4:2a:b5:04:17:6c:79:
ea:7a:80:64:50:b1:6c:32:0f:ad:f7:fe:47:b2:ec:c4:72:51:
0e:a1:d5:ac:2e:13:f6:30:dc:09:cc:73:1e:97:cc:91:e8:e0:
91:94:9d:23:63:23:32:4e:99:4f:4f:e0:fb:fd:dd:6e:1b:2f:
6d:07:43:4c:86:46:6e:73:ae:e0:72:fa:4e:0c:e9:8a:f2:46:
5b:49:23:6e:08:58:a3:1f:2f:40:43:d3:0b:00:85:e6:f6:30:
00:ab:fd:42:b8:3d:a2:92:cb:43:90:91:94:78:e5:3b:a8:42:
5e:9b:03:45:e7:64:87:af:80:a7:5f:03:f7:8b:e0:76:45:33:
f6:68:89:95:b2:48:75:64:ad:98:c4:c7:1b:12:87:e7:64:6f:
6a:36:df:3e:c8:6e:b2:26:c1:8d:be:23:54:8d:38:38:d4:61:
8e:a2:fb:b7:56:8f:e5:1c:a3:a5:6e:61:51:f8:87:8a:0c:b6:
4f:d1:87:26:07:88:1c:b5:9c:d1:ec:c4:11:3d:a8:bf:37:87:
f8:60:c8:04:d0:3f:80:ba:12:15:04:9d:03:3c:21:42:af:40:
cc:2a:78:1b:dc:2e:ac:8d:10:82:a3:aa:9d:6d:d8:91:46:9f:
af:3f:5f:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmRlSp5NFj2vDtp5L0/1kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYmViMWY4NWNkYWQxNDViZDJmOTdhZGRkMDk0MWQzMmQ3
NThkZTcwHhcNMjYwNDE3MDQwMDQwWhcNMjYwNDE4MDQwMDQwWjAzMTEwLwYDVQQD
Eyg4YTAxZTg4NDY5NmEwZGIwYzUwZTlhNmNkOGNiNGRjYzRlN2FkMmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu05H4+bcbYft4ZP3tTP661O9UKNY
WmtXTDBrVAWxybf/znDIyFZZWP4cLLz8DP0s0E61Isv3uwYc5EkOX4ICZEX0dAjC
L+Rrs+aNTqSDvjtG4PP3n0iEBf4deSqm54g02Bl8x3u5gbo/eGf0YhuXHyqnoK6k
BW//PdFwoFExQW0p+Wt+MmneYcWzytzISlqQMhTB8/LB+xWz+zvbTJ6wIU8EQm9a
jaf0n6YM6VioVrp+sckQ0r6p0jaIXRt3tarrs9f6x7Ecz2hQRhvo9eNa/DgBNbRT
uouMuQklU4GIuj45R1vEsxpMff6uyjK8K0WifKQMYMAiAdBrxZzHFGLzyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoB6IRpag2wxQ6abNjLTcxOetKiMB8GA1UdIwQY
MBaAFCu+sfhc2tFFvS+Xrd0JQdMtdY3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMt
MDJmZDhlOTliZmUxLzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMtMDJmZDhlOTliZmUx
LzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATptHodSw
pVeRkOfkKrUEF2x56nqAZFCxbDIPrff+R7LsxHJRDqHVrC4T9jDcCcxzHpfMkejg
kZSdI2MjMk6ZT0/g+/3dbhsvbQdDTIZGbnOu4HL6TgzpivJGW0kjbghYox8vQEPT
CwCF5vYwAKv9Qrg9opLLQ5CRlHjlO6hCXpsDRedkh6+Ap18D94vgdkUz9miJlbJI
dWStmMTHGxKH52RvajbfPshusibBjb4jVI04ONRhjqL7t1aP5RyjpW5hUfiHigy2
T9GHJgeIHLWc0ezEET2ovzeH+GDIBNA/gLoSFQSdAzwhQq9AzCp4G9wurI0QgqOq
nW3YkUafrz9few==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:37 2026 by rpki-client