Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
File: K3BccjJSLxtRhLGpI61d9azKgpY.mft (raw, json)
Hash identifier: l+TBGscsqWA7QS234trTO9IVWsFLMtJDOfAa6Wjxv58=
Subject key identifier: 4D:C3:15:E5:8B:29:D4:02:84:E7:C9:99:87:59:32:A7:1B:AE:4B:0D
Authority key identifier: 2B:70:5C:72:32:52:2F:1B:51:84:B1:A9:23:AD:5D:F5:AC:CA:82:96
Certificate issuer: /CN=2b705c7232522f1b5184b1a923ad5df5acca8296
Certificate serial: 01A0D83C390976A51112217C77EF78035AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
Manifest number: AD
Signing time: Fri 25 Sep 2026 11:03:40 +0000
Manifest this update: Fri 25 Sep 2026 11:03:40 +0000
Manifest next update: Sat 26 Sep 2026 11:03:40 +0000
Files and hashes: 1: K3BccjJSLxtRhLGpI61d9azKgpY.crl (hash: SctlSsy1ZYxYq6FC0iGrFBKxYAcsINmkDYTCmIcNZNM=)
2: XquIVervRfTQRR9R6ml_cTOLMcg.roa (hash: qQ4JO3bWVJS7ohyWrxDX4KanJPdshnnjvLQMGawFNLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 11:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:39:09:76:a5:11:12:21:7c:77:ef:78:03:5a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b705c7232522f1b5184b1a923ad5df5acca8296
Validity
Not Before: Sep 25 11:03:40 2026 GMT
Not After : Sep 26 11:03:40 2026 GMT
Subject: CN=4dc315e58b29d40284e7c999875932a71bae4b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4b:d2:7c:85:05:b0:33:fe:08:83:c1:86:75:
37:ff:a3:7d:05:e8:43:2a:c4:4e:3b:b9:0f:d7:1c:
ce:4c:b5:a3:40:e6:95:33:63:b7:e4:68:69:fe:6a:
26:79:f1:17:26:5f:ae:c6:bf:0b:7c:0b:40:da:c3:
0d:b0:44:27:70:7d:38:81:27:13:94:ed:28:2e:65:
49:e5:44:0e:cb:9b:cf:0e:27:07:fd:a7:53:96:e3:
61:7f:05:b8:5d:5d:1d:fb:cc:9b:a3:a8:bd:f6:90:
6b:9e:e5:bf:9f:a4:e3:53:e2:c0:de:94:e4:c7:90:
90:f8:21:7b:57:e7:af:6f:b8:31:b9:33:b7:4e:61:
f5:40:e1:77:14:f4:0a:12:4f:40:cb:13:e2:07:24:
b1:a8:c2:d8:41:fa:f7:b5:82:8a:14:8c:9f:1d:10:
e9:f0:76:58:19:0c:26:7b:e0:4b:42:66:b3:9d:ed:
3a:90:74:52:96:ac:75:ee:37:77:7c:3a:28:ea:7d:
02:4d:91:dc:db:ab:b7:f5:08:83:a6:73:47:f3:06:
1a:ac:e8:eb:6e:ce:b9:c2:bf:d2:62:56:c4:5e:ea:
cb:32:1d:b1:8b:6d:5b:7c:f3:46:19:cc:ad:a9:2e:
af:46:3d:2a:ba:21:ff:e8:37:0b:77:aa:f0:30:75:
64:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C3:15:E5:8B:29:D4:02:84:E7:C9:99:87:59:32:A7:1B:AE:4B:0D
X509v3 Authority Key Identifier:
keyid:2B:70:5C:72:32:52:2F:1B:51:84:B1:A9:23:AD:5D:F5:AC:CA:82:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0c:2d:40:7b:c4:3c:39:ce:e2:81:76:c7:05:e4:fb:58:21:
50:b6:5f:c5:48:51:82:80:a2:27:53:63:96:66:12:4d:de:5a:
00:66:41:56:10:42:15:a3:61:a2:70:da:70:6a:d1:b9:d8:69:
f1:fe:a1:f1:0a:55:71:74:fe:c7:4b:7c:77:9a:0d:02:4a:46:
de:4b:d3:3a:27:96:cf:7b:b0:2c:8d:1b:74:6c:94:91:a8:5e:
5b:3d:cc:40:62:79:69:f1:b4:53:2d:85:84:7d:d3:0b:7e:48:
db:69:df:63:fd:10:d6:db:97:70:a8:a9:42:d4:16:dd:a6:0b:
ae:34:2f:4a:81:06:0e:08:7d:c7:b8:6a:68:cf:26:2e:8f:43:
5f:d9:d5:57:1c:4a:9d:93:5b:a3:48:c2:91:79:3b:d5:5e:54:
87:09:88:00:e1:21:fa:7a:b9:65:aa:2d:c8:b3:d0:3b:50:f8:
75:bf:a4:99:0a:16:93:bb:70:fd:40:50:17:4f:ed:30:05:af:
62:33:90:64:0e:d7:1d:20:2a:a2:74:cd:2e:d4:a0:d8:85:27:
9c:e2:76:2c:f4:73:92:d5:51:56:4c:83:0c:9b:bc:74:08:e3:
9d:78:39:d3:71:6e:6f:a6:3d:b9:d7:98:7a:0e:a1:f2:07:c7:
83:0b:ea:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYPDkJdqUREiF8d+94A1rIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNzA1YzcyMzI1MjJmMWI1MTg0YjFhOTIzYWQ1ZGY1YWNj
YTgyOTYwHhcNMjYwOTI1MTEwMzQwWhcNMjYwOTI2MTEwMzQwWjAzMTEwLwYDVQQD
Eyg0ZGMzMTVlNThiMjlkNDAyODRlN2M5OTk4NzU5MzJhNzFiYWU0YjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UvSfIUFsDP+CIPBhnU3/6N9BehD
KsROO7kP1xzOTLWjQOaVM2O35Ghp/momefEXJl+uxr8LfAtA2sMNsEQncH04gScT
lO0oLmVJ5UQOy5vPDicH/adTluNhfwW4XV0d+8ybo6i99pBrnuW/n6TjU+LA3pTk
x5CQ+CF7V+evb7gxuTO3TmH1QOF3FPQKEk9AyxPiBySxqMLYQfr3tYKKFIyfHRDp
8HZYGQwme+BLQmazne06kHRSlqx17jd3fDoo6n0CTZHc26u39QiDpnNH8wYarOjr
bs65wr/SYlbEXurLMh2xi21bfPNGGcytqS6vRj0quiH/6DcLd6rwMHVkNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3DFeWLKdQChOfJmYdZMqcbrksNMB8GA1UdIwQY
MBaAFCtwXHIyUi8bUYSxqSOtXfWsyoKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzNCY2NqSlNMeHRSaExHcEk2MWQ5YXpLZ3BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9hYTFjOTEtMzVkZi00MmYwLTg4Nzct
NTE2ZTA1OGU4Nzg0LzEvSzNCY2NqSlNMeHRSaExHcEk2MWQ5YXpLZ3BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9hYTFjOTEtMzVkZi00MmYwLTg4NzctNTE2ZTA1OGU4Nzg0
LzEvSzNCY2NqSlNMeHRSaExHcEk2MWQ5YXpLZ3BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawwtQHvE
PDnO4oF2xwXk+1ghULZfxUhRgoCiJ1NjlmYSTd5aAGZBVhBCFaNhonDacGrRudhp
8f6h8QpVcXT+x0t8d5oNAkpG3kvTOieWz3uwLI0bdGyUkaheWz3MQGJ5afG0Uy2F
hH3TC35I22nfY/0Q1tuXcKipQtQW3aYLrjQvSoEGDgh9x7hqaM8mLo9DX9nVVxxK
nZNbo0jCkXk71V5UhwmIAOEh+nq5ZaotyLPQO1D4db+kmQoWk7tw/UBQF0/tMAWv
YjOQZA7XHSAqonTNLtSg2IUnnOJ2LPRzktVRVkyDDJu8dAjjnXg503Fub6Y9udeY
eg6h8gfHgwvqZA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:42:20 2026 by rpki-client