Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: esBgqFuoU2qUevVdAD49C/xf9MQ0734P8tGSVgyy3/4=
Subject key identifier: BF:D9:88:17:F3:CE:0F:5F:F6:BB:67:D5:D5:28:36:52:6A:1C:FA:76
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 019EC1EE4C03DFF151C68C0F500911401D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 0A40
Signing time: Sat 13 Jun 2026 17:01:20 +0000
Manifest this update: Sat 13 Jun 2026 17:01:20 +0000
Manifest next update: Sun 14 Jun 2026 17:01:20 +0000
Files and hashes: 1: JYQFKO-FunI32nUSHCVmHj-U72s.roa (hash: t8vcZJVMC1m+PZSUssB6U2g3nAq5K3T4+GIKxNDbOGE=)
2: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: awMIxQ/5QjRPDO4qFQETQ0XBB8JO7J1Ng+ktJDRyrp8=)
3: _WfVRuscLnYYCEteyctZE_mRNGA.roa (hash: OwIxeyz2i/PN3Q/yKcsy594HSMnZiCVH224Ea6c2hAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:4c:03:df:f1:51:c6:8c:0f:50:09:11:40:1d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: Jun 13 17:01:20 2026 GMT
Not After : Jun 14 17:01:20 2026 GMT
Subject: CN=bfd98817f3ce0f5ff6bb67d5d52836526a1cfa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:32:30:64:93:5c:8c:cc:89:7c:e7:8d:da:
46:5f:12:37:21:50:36:a1:1e:f1:aa:0e:e2:c1:4d:
69:9b:1e:e7:5c:f2:aa:e6:ee:ff:03:d6:39:bc:07:
39:52:54:48:57:77:fb:ab:7a:22:17:f1:a5:78:fa:
b7:0d:ea:83:ec:1d:d5:23:a4:c9:46:91:da:60:76:
21:c0:39:a4:8a:0b:51:0f:6c:ab:66:c9:8e:1c:03:
16:18:e5:33:e1:3e:00:5e:e5:2e:3a:d2:de:41:ce:
07:67:3f:70:50:6b:8e:c0:a8:25:25:36:10:cf:0b:
4a:88:89:f7:aa:9e:20:cc:e6:a0:89:fb:4d:d4:5a:
c2:c6:a9:f2:25:d2:ca:a5:3b:a4:86:97:b6:16:6e:
ad:e8:8f:14:0e:aa:b2:ec:18:ad:f8:f7:3d:80:c7:
e0:fe:4e:aa:bb:aa:89:05:1a:b0:d6:92:10:ba:a1:
e0:88:94:86:6c:1f:82:d5:f7:33:9d:96:8f:8b:aa:
b1:88:eb:38:d3:fa:aa:75:11:bb:e6:97:26:a7:08:
08:f1:42:a0:4b:4b:2c:19:b0:b6:5b:a2:04:49:02:
c0:ac:28:11:f4:e0:45:b6:8d:c7:54:ff:60:ed:d9:
bb:2a:6c:1f:d9:35:08:20:09:8b:3e:c8:07:10:68:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D9:88:17:F3:CE:0F:5F:F6:BB:67:D5:D5:28:36:52:6A:1C:FA:76
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1d:34:91:5e:5e:d1:dc:8c:da:a2:19:64:92:74:b8:43:48:
ac:18:50:56:d9:a6:b3:b5:6d:65:96:39:d3:cf:b0:e1:f6:0a:
dd:4d:7c:b3:ad:d2:e8:6a:7f:ce:7e:4b:6a:e1:e1:cb:e4:29:
bb:fa:c9:29:ac:cf:25:d0:5a:94:f0:dd:d1:96:dd:b6:fe:6a:
88:7f:51:cf:17:ca:25:c6:d0:0d:9d:21:18:14:f9:eb:9b:72:
2a:ab:a9:e7:bc:c8:09:89:2b:fe:99:ea:e3:be:8b:64:66:2f:
8d:82:fe:21:04:19:95:32:65:50:b2:14:81:2e:bd:ad:07:9d:
4b:ba:ee:ef:9c:72:8e:cb:75:37:9c:36:8f:e5:9c:a6:9e:97:
94:2d:b0:0b:5a:8d:e4:07:d1:51:d9:26:68:27:79:da:af:58:
b8:85:b3:b3:ff:2a:f3:ca:2f:bc:00:17:85:e1:d9:74:dc:53:
79:a2:05:a5:48:f0:3c:2e:af:8e:2f:cf:6d:16:f3:c8:57:58:
5f:91:2e:1d:d7:ad:e7:52:4a:3a:2a:f7:44:87:2e:b6:3a:c0:
7e:95:c6:db:03:3a:0b:19:1b:55:3e:05:88:b7:85:18:20:98:
6d:54:91:b5:29:d5:7d:50:fc:b3:29:b5:2d:48:4d:1f:83:86:
f7:ca:63:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:37:40 2026 by rpki-client