Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
File: K3bhVwytdzn9C_9gYy4FvAb2QuM.mft (raw, json)
Hash identifier: PWTYJevZoDahHJKF9tvfKeU/2aP/ygx2gBYmEpbyKdc=
Subject key identifier: F1:3D:18:48:CC:AD:86:72:2F:BE:FA:3C:BA:A6:06:E3:93:35:16:A3
Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Certificate serial: 019DA3E6A595E8C80065EFD6853B4ACBADB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
Manifest number: 02B8
Signing time: Sun 19 Apr 2026 04:01:34 +0000
Manifest this update: Sun 19 Apr 2026 04:01:34 +0000
Manifest next update: Mon 20 Apr 2026 04:01:34 +0000
Files and hashes: 1: B65rjwLsAKNHyDmSqKvHUJ8cNBc.roa (hash: 5NrfUPDXXXmhJ+JmLFvf/QPQMfrwfuMZfIVQvRGPZHc=)
2: K3bhVwytdzn9C_9gYy4FvAb2QuM.crl (hash: xa9HmznhA6j+cJo916ZgFqZbVzqaHrXH5IqjnJ9ePjA=)
3: ZVEt9mXu1eJe81PrexDO4FphB_M.asa (hash: DhqFzLrsMjhd/GYHnppx/kLawShg14X54LUCOOfhDY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:a5:95:e8:c8:00:65:ef:d6:85:3b:4a:cb:ad:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Validity
Not Before: Apr 19 04:01:34 2026 GMT
Not After : Apr 20 04:01:34 2026 GMT
Subject: CN=f13d1848ccad86722fbefa3cbaa606e3933516a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:f1:f2:04:e8:56:0c:95:e2:86:03:5f:0e:
09:6c:15:9b:ae:e6:f1:f5:f4:85:17:99:0e:17:9d:
08:91:a0:1f:a9:ad:ad:58:2e:24:bb:4a:a9:cb:95:
1c:c1:1e:06:03:23:25:ae:38:cd:9b:98:77:90:67:
1f:3c:7a:ca:3d:87:5c:c5:47:58:a0:2e:64:53:e3:
36:81:73:34:b0:06:17:bd:23:09:15:60:08:cf:76:
5c:59:da:5e:e3:a3:b0:52:f5:83:8c:c8:85:77:23:
ff:ab:fb:fe:ce:89:28:d5:e8:03:bc:cf:2c:91:78:
5a:12:9a:8c:e6:f6:b3:8e:70:3e:06:1a:d8:00:f7:
b2:2c:9c:b6:15:c8:5f:65:a2:5a:a0:96:32:5c:19:
9a:32:97:5a:7f:69:25:90:39:d4:0d:55:66:53:e9:
d1:ba:70:65:36:da:60:43:3a:5b:4c:c4:43:d9:1b:
43:6b:47:f7:a8:e0:31:95:1a:f7:3b:1e:db:e6:cb:
6c:f0:69:d6:f9:06:52:54:47:81:bc:49:ad:74:c6:
c2:17:0b:be:6f:59:68:f3:9e:6a:22:1e:0d:b6:11:
f8:18:81:8b:0a:aa:be:d1:76:e8:7e:5f:77:90:3a:
b7:e9:e8:56:31:e1:94:95:77:9c:51:53:ac:4b:a2:
4b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3D:18:48:CC:AD:86:72:2F:BE:FA:3C:BA:A6:06:E3:93:35:16:A3
X509v3 Authority Key Identifier:
keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5a:a8:82:d1:0c:27:75:0b:3f:01:fa:92:a9:ca:45:30:f2:
f2:96:d5:8c:3f:7e:69:f6:2e:3f:c1:25:61:ef:58:45:57:2f:
33:96:f7:21:21:8c:c8:69:85:57:14:67:47:d1:1d:b7:8b:94:
ae:4b:f8:0d:60:ad:cd:e7:b2:cc:53:a2:92:76:a4:9b:95:29:
f8:0c:77:3c:dc:79:6d:b7:4b:13:ba:cb:05:9f:24:6c:11:d2:
77:01:1d:c9:64:0b:b3:5d:b3:2c:04:0f:15:a0:34:a8:c0:1f:
29:22:a8:2c:aa:cc:32:b0:16:17:da:fd:54:f3:11:ae:66:28:
9d:23:49:87:42:d7:9f:87:5e:5a:74:fc:a5:59:59:95:a9:0b:
a1:68:83:d9:86:1a:82:27:34:d5:39:ff:4d:3e:fc:c8:c7:b4:
cc:36:37:37:57:01:fb:ed:07:55:fc:9d:c1:d6:a1:16:80:87:
89:57:ef:9b:da:b0:38:59:df:3e:3b:26:bf:66:41:29:0f:e6:
31:0a:38:a0:db:f0:f9:cf:6f:5c:21:04:a2:36:8a:10:c2:c6:
c6:5d:31:4b:f0:3f:bc:c2:d7:44:bf:c7:79:5f:6e:f6:ab:cb:
9b:25:86:43:47:7b:33:f4:6e:ba:33:a9:4e:1d:be:58:e3:71:
6e:b8:05:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:51:46 2026 by rpki-client