Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: Hd7uFrVOUX3j10d+UQCMLdeyxXek7ImiLnwvi28jPGk=
Subject key identifier: C4:53:C1:6B:73:73:0C:DE:95:BB:BE:76:EF:BE:8C:08:91:5E:BE:82
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 019CAED9B6A042E3457466BCB15CE4349B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 092D
Signing time: Mon 02 Mar 2026 14:00:29 +0000
Manifest this update: Mon 02 Mar 2026 14:00:29 +0000
Manifest next update: Tue 03 Mar 2026 14:00:29 +0000
Files and hashes: 1: JYQFKO-FunI32nUSHCVmHj-U72s.roa (hash: t8vcZJVMC1m+PZSUssB6U2g3nAq5K3T4+GIKxNDbOGE=)
2: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: 7hc/dVVQn1ABTNpHubNLwE9c4Gh47cxcVBwjbZpq2Fg=)
3: _WfVRuscLnYYCEteyctZE_mRNGA.roa (hash: OwIxeyz2i/PN3Q/yKcsy594HSMnZiCVH224Ea6c2hAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:b6:a0:42:e3:45:74:66:bc:b1:5c:e4:34:9b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: Mar 2 14:00:29 2026 GMT
Not After : Mar 3 14:00:29 2026 GMT
Subject: CN=c453c16b73730cde95bbbe76efbe8c08915ebe82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:2a:77:32:02:c3:ad:8f:7d:b9:7b:f5:a2:
58:30:eb:d9:45:53:03:5c:0a:72:4a:40:61:34:33:
80:c3:7f:50:e1:44:2e:06:e7:b9:53:0e:7b:72:6e:
6a:03:e9:a4:94:96:2d:ae:9f:b9:4d:02:f9:7c:58:
7e:e2:98:16:47:fb:7f:c4:65:a8:0e:26:c1:4b:a3:
06:bc:29:54:b7:9b:42:1f:ae:e7:9a:b6:f5:7e:2c:
4d:ae:b1:34:d7:33:85:9d:ce:3d:a0:8e:a9:5f:cb:
6b:6b:d7:5d:6a:40:d7:fe:ce:65:11:18:d6:bf:47:
0d:ea:f4:51:53:1a:4a:1f:f9:a8:ee:a4:89:2f:c2:
c5:7f:fa:33:e6:2b:d9:31:6f:21:5b:f7:14:e9:94:
22:b3:fd:d9:e5:ef:7e:5b:2f:c1:5e:d6:9f:2d:e1:
8b:c3:08:53:2d:d4:66:e5:18:27:03:1f:bd:0b:a5:
2c:44:47:c3:a0:32:64:d4:07:04:d9:b9:9c:6e:b9:
1c:9b:88:27:8c:84:10:04:f3:2a:30:89:8f:b6:35:
a0:ef:b0:b0:45:d9:a3:c0:73:8b:56:e4:39:85:59:
3b:b6:67:36:12:c1:8c:86:6f:c1:89:49:ed:b6:d2:
d0:8f:60:a5:0c:9d:3b:33:20:93:56:71:0d:a0:07:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:53:C1:6B:73:73:0C:DE:95:BB:BE:76:EF:BE:8C:08:91:5E:BE:82
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:13:3a:be:0f:3e:8e:c2:74:7e:f4:7c:1c:5e:47:5e:b2:95:
76:5d:c9:48:6b:e8:61:1e:f0:4e:f8:8b:32:8e:33:76:c2:de:
bc:bc:1f:15:bd:da:de:5f:f6:12:6e:92:6d:d9:28:52:eb:9f:
7e:af:a8:6d:0c:e6:81:1c:15:95:56:d9:9c:34:b9:6d:63:cf:
31:14:1b:60:30:74:a3:22:71:2b:42:04:83:e9:f5:7b:eb:73:
ca:c0:62:76:f5:ab:6b:4c:3b:69:48:e9:53:2d:a5:bc:11:f7:
d3:cd:64:1c:03:a9:7d:37:5b:20:02:81:32:de:f0:0a:32:81:
d0:32:fd:6e:63:34:48:19:64:a9:b4:e1:20:c5:70:a1:49:8a:
19:31:22:61:25:2c:41:2e:5a:53:ae:5b:ab:45:d2:4f:82:46:
39:f1:13:06:4d:08:a0:f5:fa:f1:8f:e4:95:3d:57:55:04:e9:
b8:dc:1c:50:a4:24:7e:37:f8:2a:3d:9f:bc:21:00:5c:42:03:
6c:8d:49:65:b0:06:38:b0:02:dc:03:72:e1:54:3b:d2:63:16:
03:b1:e8:56:8a:76:7f:3c:fa:9a:94:7d:e7:5e:d1:0f:bc:49:
9d:6e:da:05:f5:85:c3:fa:cb:dd:2d:e4:5d:80:30:a6:8c:f7:
27:a5:7c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:44:48 2026 by rpki-client