Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: dMnmTkFOnybZmsZY9LKnoSNogonTkypp7kgl2DliBno=
Subject key identifier: FF:60:88:79:0A:96:A3:88:17:6F:16:38:80:23:E5:4F:E6:41:D3:4C
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 019D6650C7D859921AC5544DDF8DB5AE8D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 098C
Signing time: Tue 07 Apr 2026 05:01:03 +0000
Manifest this update: Tue 07 Apr 2026 05:01:03 +0000
Manifest next update: Wed 08 Apr 2026 05:01:03 +0000
Files and hashes: 1: JYQFKO-FunI32nUSHCVmHj-U72s.roa (hash: t8vcZJVMC1m+PZSUssB6U2g3nAq5K3T4+GIKxNDbOGE=)
2: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: 7G+huF+OJOQqbRlcA8MJM+2uYVeTIxCkYVhAC4vXd/0=)
3: _WfVRuscLnYYCEteyctZE_mRNGA.roa (hash: OwIxeyz2i/PN3Q/yKcsy594HSMnZiCVH224Ea6c2hAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:50:c7:d8:59:92:1a:c5:54:4d:df:8d:b5:ae:8d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: Apr 7 05:01:03 2026 GMT
Not After : Apr 8 05:01:03 2026 GMT
Subject: CN=ff6088790a96a388176f16388023e54fe641d34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:22:76:fc:28:14:ea:61:fa:43:ee:81:c2:
c0:54:23:1c:ea:12:51:db:0f:8d:62:3e:38:53:c9:
77:e8:1a:4b:9b:29:c9:9f:b5:3e:03:59:ba:e7:71:
aa:3d:c5:1c:48:89:ec:e8:f2:23:3b:2a:90:e2:ba:
89:66:8e:ae:c9:53:a7:f6:3c:95:45:5e:47:63:66:
af:95:e7:91:5c:fe:25:5c:4b:d6:d9:ed:74:47:62:
20:b9:61:51:61:07:1e:02:37:0e:34:0d:6d:77:7a:
6e:6c:f6:e5:54:2b:e3:76:3e:f5:9b:94:f1:c2:9b:
fd:fb:68:6f:86:b0:f7:dd:24:24:23:0b:fd:cc:0b:
28:aa:6b:87:47:24:23:1b:cd:17:db:40:02:2b:f3:
27:91:b1:89:f7:53:e3:19:0d:e5:be:83:4b:a5:3e:
50:78:c8:de:af:40:58:f4:02:13:5d:dc:48:6a:eb:
1e:fd:23:aa:60:46:6e:75:f3:4e:42:b3:41:e4:9e:
29:7d:02:e0:63:a2:88:73:2f:f5:5c:e5:aa:06:4c:
c9:5e:53:4e:be:98:7d:d5:27:db:da:06:94:eb:23:
5c:2b:6d:af:64:03:43:7d:6b:02:a6:fb:44:97:ff:
76:42:c2:26:b7:98:2e:6d:77:e8:b6:1c:31:99:58:
04:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:60:88:79:0A:96:A3:88:17:6F:16:38:80:23:E5:4F:E6:41:D3:4C
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5e:4c:cf:f1:48:a1:e8:37:80:63:15:59:dd:71:3b:20:26:
ee:4f:5d:cb:76:01:24:3c:62:c5:38:a6:42:94:63:79:11:a2:
8f:d7:d3:21:dd:86:b9:33:f8:55:c4:51:93:54:13:6b:09:e7:
3d:99:8f:de:6d:e3:3b:fc:98:f2:b4:e8:14:ff:b0:70:1e:8f:
e7:de:2f:af:49:ec:a4:35:a7:48:a1:06:e7:35:24:e4:4e:7e:
2f:fe:6b:23:6f:01:31:fb:74:35:b4:8c:88:25:61:87:61:e4:
ef:f5:c1:3a:ab:29:38:65:cb:0c:16:b8:6d:7b:60:d4:36:fe:
10:1e:51:99:7f:5f:c3:43:ce:68:dd:15:0c:9f:00:9f:94:08:
b0:25:cd:45:b1:de:1f:7e:50:b6:8c:d6:c5:4f:82:ba:79:d3:
54:24:65:b8:d7:f8:7d:e0:3b:2d:64:a5:f0:04:85:9b:06:54:
ea:8c:66:35:00:d4:1b:c5:29:b3:58:29:12:5d:f5:05:c2:05:
b7:22:3f:b7:ec:c1:eb:85:48:4d:b6:55:80:dc:57:2c:f8:85:
de:02:5d:bc:bc:d4:cf:85:82:28:15:91:b0:73:82:cd:3d:c7:
99:e0:3a:a6:8d:06:90:f4:b4:e5:0e:14:4f:c3:5c:5c:d8:80:
b6:d4:8e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:32:34 2026 by rpki-client