Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json)
Hash identifier: DCbTZB1PlO6WdhZGCH4Hk3XIXWwhlQu5Bv0prE6mKpQ=
Subject key identifier: 7E:A1:3F:F5:C8:6F:9A:C0:4F:1A:D5:64:5A:37:77:87:C8:73:82:7B
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 019CABA1CF68F15935659B775413721596AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
Manifest number: 073C
Signing time: Sun 01 Mar 2026 23:00:34 +0000
Manifest this update: Sun 01 Mar 2026 23:00:34 +0000
Manifest next update: Mon 02 Mar 2026 23:00:34 +0000
Files and hashes: 1: CfZQ5f2U-PTexk4plOrVmUR8SVo.roa (hash: S+1++wq6+OUaKhTshD4b393Lz17gGEyD5GzsQU3qNMc=)
2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: JM9srjU99cyKP5mlxHijLJiPSqFCYX1d35WendUQQVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:cf:68:f1:59:35:65:9b:77:54:13:72:15:96:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Mar 1 23:00:34 2026 GMT
Not After : Mar 2 23:00:34 2026 GMT
Subject: CN=7ea13ff5c86f9ac04f1ad5645a377787c873827b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:c3:66:28:87:0a:ea:e9:b9:01:87:a3:db:
49:01:fa:87:2a:c5:38:5e:16:c5:4f:3e:f7:1b:5b:
fd:ac:d2:2d:99:b9:b9:a4:6a:54:46:79:ca:95:51:
8c:94:46:21:4c:df:d0:03:9d:2a:01:e1:64:bc:0c:
3b:8b:cb:c0:10:73:08:ce:54:0c:05:c2:00:bf:66:
53:33:87:24:05:9f:97:2c:02:ea:50:44:be:e3:c5:
d5:59:f1:45:69:cf:cb:d7:5e:3b:cf:36:2d:91:f0:
7c:08:1f:d3:3b:95:57:9c:1e:06:88:43:6c:3d:3a:
0e:62:2e:46:78:79:d2:fd:ab:2f:e6:ed:e9:b7:76:
e1:9b:90:c5:41:c1:ba:56:92:99:7d:2d:bc:4f:7d:
0b:f7:5b:26:73:87:49:09:37:bf:e2:a3:28:99:d6:
3c:1c:67:35:02:00:5d:e1:63:cc:90:2f:27:ba:a0:
89:fb:50:a9:b6:f2:5e:cc:24:11:5c:a3:1c:8e:1a:
ef:12:11:48:c9:93:e7:b0:3b:a0:ac:8e:8b:3b:04:
7c:84:9f:19:cb:26:34:07:dd:0a:82:6b:34:1e:3b:
68:e0:a0:7c:9f:4c:24:6c:bb:9e:99:e9:69:dd:48:
56:66:f5:47:ae:bd:94:b2:f8:18:02:87:7d:27:e0:
42:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A1:3F:F5:C8:6F:9A:C0:4F:1A:D5:64:5A:37:77:87:C8:73:82:7B
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f2:08:87:77:01:8e:97:95:fe:4a:4d:68:c4:3b:6a:d1:2b:
2e:1c:98:a9:cc:ed:da:dd:02:a9:cb:8e:4e:19:0f:4a:32:f6:
68:6c:80:c8:2c:14:3e:7f:cc:9e:dd:19:0d:5b:e7:8f:06:2b:
2b:48:e9:34:3d:b1:8a:d4:44:c9:c9:47:eb:ea:15:fc:3b:5f:
46:71:85:3f:ac:ce:49:ea:21:df:3c:e4:6e:8e:3c:9e:3d:e7:
6b:c6:c8:03:d1:cc:36:e8:4c:25:be:36:19:c9:f6:ed:07:c9:
f8:8f:9e:d3:2b:5b:31:f5:27:27:21:cf:9b:cc:e1:2f:34:54:
45:b8:99:9f:84:8d:3d:33:43:91:03:11:20:31:c4:21:53:28:
1f:a3:55:42:78:aa:cd:20:94:24:c5:f9:4e:95:eb:a0:01:42:
4f:7d:10:7d:47:c3:73:27:c2:4b:28:ea:fd:a3:61:fc:a2:f2:
59:dc:0b:1f:e4:d0:c7:be:45:3f:4c:46:0b:2e:88:82:19:0e:
a7:06:4b:10:9a:ed:f5:b1:d3:19:b0:27:55:09:6e:fe:44:d5:
5c:6b:d0:e0:34:54:e5:e6:ff:ce:49:f7:11:3f:f2:d5:9e:d0:
a1:cb:e7:e6:b4:a8:e2:17:be:3f:ac:b8:f2:b3:47:6d:55:d9:
99:bb:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:00 2026 by rpki-client