Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
File: K3bhVwytdzn9C_9gYy4FvAb2QuM.mft (raw, json)
Hash identifier: +i8rtXPf0S5T83AX45n9vIqh+GD8v3e7jY6iY8nHCBg=
Subject key identifier: 8F:61:32:C0:A7:46:D6:36:61:37:B5:86:E6:10:70:81:CE:9A:44:02
Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Certificate serial: 019EC0A3D94A11915FEBCF58772B00777F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
Manifest number: 034E
Signing time: Sat 13 Jun 2026 11:00:23 +0000
Manifest this update: Sat 13 Jun 2026 11:00:23 +0000
Manifest next update: Sun 14 Jun 2026 11:00:23 +0000
Files and hashes: 1: K3bhVwytdzn9C_9gYy4FvAb2QuM.crl (hash: SWdccpRkev6ShSgnKZjz78CgHt/ADbzrcARwuOdev74=)
2: Z92yiTrhR0fQeo1Gpcv8VY0ix_Q.roa (hash: X+YVIvMsha8DVgM98Sir2A7a/vrAXaN9NbnUzgvjneo=)
3: ZVEt9mXu1eJe81PrexDO4FphB_M.asa (hash: DhqFzLrsMjhd/GYHnppx/kLawShg14X54LUCOOfhDY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:d9:4a:11:91:5f:eb:cf:58:77:2b:00:77:7f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Validity
Not Before: Jun 13 11:00:23 2026 GMT
Not After : Jun 14 11:00:23 2026 GMT
Subject: CN=8f6132c0a746d6366137b586e6107081ce9a4402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:72:bc:d6:51:58:ce:1e:cc:60:bf:1a:f4:
ea:fe:4a:3b:7d:96:08:d2:16:9b:e3:e3:ed:86:ae:
81:0a:45:fc:d6:17:37:e7:ba:6b:ac:cf:e3:c5:3f:
3f:d3:f2:d7:c0:af:a1:2d:6b:eb:c2:7f:6d:ae:d2:
13:3e:79:e5:f6:53:6a:5b:5f:66:09:0c:b3:b2:35:
6a:a7:b1:a2:51:24:0f:5f:23:c9:87:ee:53:9f:50:
86:f7:16:2a:8e:87:f8:d1:33:d1:6f:24:fc:e4:2c:
23:8d:62:0b:b4:6d:60:a2:8d:98:e0:8b:50:25:83:
e9:69:88:91:76:aa:28:98:85:bc:8f:77:80:1c:4b:
0b:81:38:c5:ba:33:0c:40:9c:d0:be:ee:7a:fd:3e:
40:43:df:26:47:8e:dc:a7:10:8d:cd:e1:86:7b:ba:
b9:b7:87:11:8a:07:3c:8f:f4:7d:27:ad:91:45:55:
d3:d1:d5:73:e7:cb:22:d5:ed:ac:27:59:e7:8e:70:
52:ef:9d:4c:53:b9:ff:4b:c3:5c:c7:28:90:97:2a:
16:a3:e8:57:3a:6c:1c:28:9b:6b:ba:47:d3:cc:40:
fa:6b:24:13:dc:68:de:ed:0c:3e:dc:bb:55:cf:83:
e0:bd:e9:67:01:eb:0b:9a:a8:8f:69:ed:b0:a6:84:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:61:32:C0:A7:46:D6:36:61:37:B5:86:E6:10:70:81:CE:9A:44:02
X509v3 Authority Key Identifier:
keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d5:ee:27:75:22:d2:e8:3b:42:39:85:2a:68:7e:8c:8d:01:
7a:c9:8c:76:ed:07:67:8c:31:46:30:86:2f:1f:16:c9:23:63:
86:23:82:ee:39:01:cb:90:c8:92:61:9f:a4:8f:19:6a:30:8f:
9a:b4:91:f5:08:2b:ec:86:67:4e:61:fa:53:82:45:a5:13:e1:
a4:2d:f3:f2:02:a1:07:b2:45:4b:14:f4:a7:40:c3:09:6a:ec:
aa:b0:a3:96:86:4e:eb:db:a8:d7:54:d6:46:b6:8f:d4:7f:67:
10:fe:6a:1b:f7:fe:8c:0d:49:1a:bc:d1:2a:8f:2a:67:17:5a:
91:9f:f0:3c:cf:88:e3:34:fc:6f:16:1c:ba:b5:8c:bd:cd:8e:
1a:05:4c:4d:1e:4a:1d:a7:7e:f4:28:14:d9:8d:3e:e1:ff:bf:
a9:50:65:36:09:95:84:00:c8:ac:87:50:7d:8a:b0:0e:cd:3b:
5c:9a:1a:8f:f1:8b:5c:3b:1f:05:5b:f1:92:86:6c:64:03:a6:
a3:64:c2:16:44:e3:64:a8:25:41:44:80:ca:43:d5:3a:57:4c:
65:0d:22:52:b5:6d:fa:fd:06:76:3c:bf:95:e0:d6:34:2a:f4:
0b:89:26:2b:fa:40:10:ba:6d:ee:56:cb:48:32:26:e9:a9:d6:
66:30:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:58:13 2026 by rpki-client