Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
File: K3bhVwytdzn9C_9gYy4FvAb2QuM.mft (raw, json)
Hash identifier: cfHOdbxBvbLJNOonO+RxvTRUtsWfLDITBHyTHJbbdnI=
Subject key identifier: E8:BB:6A:D6:BE:70:72:33:C0:EC:91:FE:25:CE:EA:61:2F:85:70:AF
Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Certificate serial: 019CAAC6EA6E9625D3F796DD760966472534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
Manifest number: 0237
Signing time: Sun 01 Mar 2026 19:01:28 +0000
Manifest this update: Sun 01 Mar 2026 19:01:28 +0000
Manifest next update: Mon 02 Mar 2026 19:01:28 +0000
Files and hashes: 1: B65rjwLsAKNHyDmSqKvHUJ8cNBc.roa (hash: 5NrfUPDXXXmhJ+JmLFvf/QPQMfrwfuMZfIVQvRGPZHc=)
2: K3bhVwytdzn9C_9gYy4FvAb2QuM.crl (hash: gKpuDv9DgfoVEIGi29F7PnnOivb5g+vuUuiceIHHnYM=)
3: ZVEt9mXu1eJe81PrexDO4FphB_M.asa (hash: DhqFzLrsMjhd/GYHnppx/kLawShg14X54LUCOOfhDY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ea:6e:96:25:d3:f7:96:dd:76:09:66:47:25:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Validity
Not Before: Mar 1 19:01:28 2026 GMT
Not After : Mar 2 19:01:28 2026 GMT
Subject: CN=e8bb6ad6be707233c0ec91fe25ceea612f8570af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:f1:5c:9c:cc:66:9a:d5:4b:7f:ea:1a:f4:
90:d1:7a:29:87:34:02:a2:cc:83:d4:10:7a:0c:e4:
67:3b:81:ab:59:78:a6:08:5e:a4:32:da:da:b5:c7:
4c:36:c8:e5:9b:7f:2d:59:bf:a0:f1:5a:e1:15:d5:
e5:01:09:5e:93:3b:69:46:07:9b:00:6b:5a:14:00:
a5:da:9c:d0:36:b1:c1:ea:40:1d:ab:df:3b:3a:82:
f0:61:fe:dd:7c:23:1b:c5:2a:ed:7f:62:a9:5c:75:
76:28:7a:fb:39:b3:6f:26:0b:a8:e5:ba:00:77:fb:
3e:0b:67:1e:af:43:92:8e:46:52:04:99:ac:33:5c:
a8:b8:15:2f:5b:44:07:31:2d:8d:b5:b0:ad:41:ca:
6e:c7:03:0b:c8:7f:a0:ea:cb:2e:6f:7a:82:50:41:
85:fe:29:77:7c:c5:c5:57:49:9b:69:09:55:65:a4:
9a:72:c2:e5:68:8e:dc:80:cf:43:63:63:aa:99:91:
b0:f2:44:2f:2b:45:b3:1c:a6:8c:90:86:49:2d:2c:
91:5f:7a:00:51:4e:85:ac:02:6a:22:65:fa:46:2b:
6f:38:45:fc:79:3f:01:09:92:ad:0f:48:25:a7:34:
81:61:9c:8d:64:fa:4b:f4:b1:d5:a9:a8:cb:f9:e8:
0c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BB:6A:D6:BE:70:72:33:C0:EC:91:FE:25:CE:EA:61:2F:85:70:AF
X509v3 Authority Key Identifier:
keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:58:f1:15:3c:24:50:aa:3e:1f:1d:ae:b1:d0:b4:45:bb:94:
5c:ed:e4:30:b2:05:99:38:a6:d4:df:75:45:04:af:ba:15:8b:
38:5e:88:51:f0:15:e7:1b:e0:68:b4:59:45:af:4c:5d:4d:b0:
78:12:d9:8d:57:f0:25:38:21:ce:71:97:e8:8b:34:ba:6a:17:
3a:bb:c7:3e:da:05:f5:2b:c8:ec:e2:8a:71:98:f3:03:4f:cf:
5c:4b:c7:a7:69:6a:4b:a8:46:a7:0c:30:bf:ac:24:75:f1:2c:
68:96:00:1e:d8:0d:70:65:9c:ce:b5:ad:04:1c:69:b8:42:b6:
33:ee:cb:93:55:e6:94:a7:14:e9:0e:5f:4e:18:bd:6c:f3:20:
5b:8a:91:06:93:7b:96:79:ad:b9:57:e8:94:46:53:c9:00:ef:
63:cd:92:24:c8:fe:b7:0e:18:37:75:5f:20:64:55:53:ba:dc:
27:fc:ed:95:4c:9e:d7:d2:8b:0b:a3:b3:4e:c3:bd:a5:c2:66:
86:3b:f4:ef:39:59:d5:9e:0a:a8:8a:bb:45:c8:91:94:a0:c1:
ce:ab:ee:7a:cb:9d:87:02:e8:26:1f:e6:8f:fe:2b:12:a9:79:
4c:08:59:34:02:36:57:b9:13:58:e0:84:de:f4:e8:ae:18:fe:
38:91:c4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:44:03 2026 by rpki-client