Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
File: K3bhVwytdzn9C_9gYy4FvAb2QuM.mft (raw, json)
Hash identifier: gUoCXTEZIvz0hd5pn+h/yp06Ok24Re0tmf4QdB0Duog=
Subject key identifier: 82:32:DB:11:68:16:7E:1E:7C:04:9E:7C:EC:A7:CA:BA:A8:05:2E:FE
Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Certificate serial: 019DA5D46ADDB1DACBCBEB068979EBCBE75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
Manifest number: 02B9
Signing time: Sun 19 Apr 2026 13:00:54 +0000
Manifest this update: Sun 19 Apr 2026 13:00:54 +0000
Manifest next update: Mon 20 Apr 2026 13:00:54 +0000
Files and hashes: 1: B65rjwLsAKNHyDmSqKvHUJ8cNBc.roa (hash: 5NrfUPDXXXmhJ+JmLFvf/QPQMfrwfuMZfIVQvRGPZHc=)
2: K3bhVwytdzn9C_9gYy4FvAb2QuM.crl (hash: HUmDITdOF0Vzu92/m57d1XS175pqwUU+OsSLL2brrCE=)
3: ZVEt9mXu1eJe81PrexDO4FphB_M.asa (hash: DhqFzLrsMjhd/GYHnppx/kLawShg14X54LUCOOfhDY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:d4:6a:dd:b1:da:cb:cb:eb:06:89:79:eb:cb:e7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Validity
Not Before: Apr 19 13:00:54 2026 GMT
Not After : Apr 20 13:00:54 2026 GMT
Subject: CN=8232db1168167e1e7c049e7ceca7cabaa8052efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:05:e6:6e:2c:b5:74:cd:29:b8:17:3d:eb:
20:c5:53:8c:4e:a5:1c:d6:85:91:21:fd:66:47:ab:
4f:9a:5d:e8:e1:ad:ea:70:7a:c5:f2:6f:ce:a4:aa:
1f:0d:4e:68:13:df:9e:52:fb:f6:fb:87:cf:41:a5:
c8:b1:81:77:9e:64:3a:c4:a3:93:04:94:30:ac:c6:
f8:26:11:67:ff:61:ab:47:ef:1c:3c:a6:0b:21:1c:
09:b0:09:1c:05:33:ed:05:02:6c:5d:a1:f3:2c:c7:
a1:ff:21:b3:30:ce:e0:f2:88:69:12:0a:f3:56:78:
4e:7a:73:18:2b:71:fc:66:4e:b6:1c:15:73:f0:5b:
64:88:30:62:cb:5e:c0:6b:6e:71:02:26:33:ed:f3:
26:59:fe:ab:8e:2c:bb:94:8e:77:1e:98:c4:4a:12:
62:5d:cb:5d:31:60:6d:65:a9:cc:f4:ae:cb:22:3d:
92:07:68:9c:b8:8b:58:4c:a4:78:2f:29:64:10:e3:
e3:94:a0:d8:36:e1:80:b6:b5:24:ad:4b:5e:89:0c:
6f:be:9a:9d:07:fd:e2:de:18:7a:74:a6:7e:be:c7:
19:b8:31:c5:7a:58:c3:be:6c:d4:e8:ab:0d:cb:9d:
e2:b5:78:d1:7e:92:2f:10:ef:d0:65:b2:bb:b2:25:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:32:DB:11:68:16:7E:1E:7C:04:9E:7C:EC:A7:CA:BA:A8:05:2E:FE
X509v3 Authority Key Identifier:
keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:13:b6:d3:cc:37:90:e5:d8:3a:71:33:34:cb:6c:c8:1d:4f:
f7:b8:6a:89:0f:a5:c7:21:0c:c7:ad:1e:96:12:f9:63:30:07:
b3:84:a6:0b:ea:67:a9:2c:35:75:49:5d:be:a8:0c:ec:1b:2e:
21:20:49:4e:60:b4:47:34:95:86:80:39:11:87:7a:04:05:e9:
20:2a:b1:49:4f:04:07:e9:81:60:16:d0:81:ae:b1:4d:19:4d:
64:60:ae:00:86:ea:70:a4:3e:3f:df:4f:b6:6b:09:94:45:8d:
c4:ad:29:a5:1a:67:25:74:4c:c4:d2:af:aa:00:e1:0c:6a:0f:
8d:68:14:53:e8:11:0a:dd:3e:72:d1:0c:a7:34:d3:19:01:14:
7b:42:ae:f3:72:57:96:a0:92:94:b7:93:b9:3b:42:ff:68:8d:
4d:63:e0:88:2d:46:be:b5:95:9f:0f:75:52:be:76:4b:11:85:
13:4c:0e:1f:7f:fd:c7:fb:2f:94:ca:98:85:21:e0:e9:70:48:
e2:76:30:26:18:12:c7:07:6d:c2:dc:44:05:8e:df:ad:1d:bd:
89:c9:9e:81:db:91:a1:07:c4:a1:96:35:fa:93:70:be:53:fb:
73:a4:08:cc:19:06:1a:71:8c:f8:ad:2f:01:8e:0b:7d:b4:32:
d8:23:88:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2l1GrdsdrLy+sGiXnry+dcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNzZlMTU3MGNhZDc3MzlmZDBiZmY2MDYzMmUwNWJjMDZm
NjQyZTMwHhcNMjYwNDE5MTMwMDU0WhcNMjYwNDIwMTMwMDU0WjAzMTEwLwYDVQQD
Eyg4MjMyZGIxMTY4MTY3ZTFlN2MwNDllN2NlY2E3Y2FiYWE4MDUyZWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvksF5m4stXTNKbgXPesgxVOMTqUc
1oWRIf1mR6tPml3o4a3qcHrF8m/OpKofDU5oE9+eUvv2+4fPQaXIsYF3nmQ6xKOT
BJQwrMb4JhFn/2GrR+8cPKYLIRwJsAkcBTPtBQJsXaHzLMeh/yGzMM7g8ohpEgrz
VnhOenMYK3H8Zk62HBVz8FtkiDBiy17Aa25xAiYz7fMmWf6rjiy7lI53HpjEShJi
XctdMWBtZanM9K7LIj2SB2icuItYTKR4LylkEOPjlKDYNuGAtrUkrUteiQxvvpqd
B/3i3hh6dKZ+vscZuDHFeljDvmzU6KsNy53itXjRfpIvEO/QZbK7siVu9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIy2xFoFn4efASefOynyrqoBS7+MB8GA1UdIwQY
MBaAFCt24VcMrXc5/Qv/YGMuBbwG9kLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mMGY5NDUtZGMzYi00NjcyLTk0MmQt
N2Y2ZWU3YTc2NTY1LzEvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mMGY5NDUtZGMzYi00NjcyLTk0MmQtN2Y2ZWU3YTc2NTY1
LzEvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORO208w3
kOXYOnEzNMtsyB1P97hqiQ+lxyEMx60elhL5YzAHs4SmC+pnqSw1dUldvqgM7Bsu
ISBJTmC0RzSVhoA5EYd6BAXpICqxSU8EB+mBYBbQga6xTRlNZGCuAIbqcKQ+P99P
tmsJlEWNxK0ppRpnJXRMxNKvqgDhDGoPjWgUU+gRCt0+ctEMpzTTGQEUe0Ku83JX
lqCSlLeTuTtC/2iNTWPgiC1GvrWVnw91Ur52SxGFE0wOH3/9x/svlMqYhSHg6XBI
4nYwJhgSxwdtwtxEBY7frR29icmegduRoQfEoZY1+pNwvlP7c6QIzBkGGnGM+K0v
AY4LfbQy2COIUg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 16:11:57 2026 by rpki-client