Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
File: K67n6kgtYqZxBj6sg3ia8585C3Q.mft (raw, json)
Hash identifier: eTkHZ2DPXzdGwH9Wgr+A7eZjv6sgyCKQbekBH7kmq5I=
Subject key identifier: E7:40:C2:4E:A1:BD:E2:AC:7E:E0:C4:24:E5:A1:5B:6F:FA:4C:DC:F7
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Certificate issuer: /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial: 019D386626F5081166F04C99704A91CCC22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
Manifest number: 0A4D
Signing time: Sun 29 Mar 2026 07:01:51 +0000
Manifest this update: Sun 29 Mar 2026 07:01:51 +0000
Manifest next update: Mon 30 Mar 2026 07:01:51 +0000
Files and hashes: 1: 57OxBTF4X7lyr00PQWTLC_7l0LM.roa (hash: Qu9Cp0fGN2f6UG2Bu1+rVSKBmfLjLGmUIUXyj9DRqEM=)
2: K67n6kgtYqZxBj6sg3ia8585C3Q.crl (hash: nRM/RsU+HLoRyNe9ax2Ifv2oLQ3Bz0u+MWtH0Vhz8og=)
3: wLKTHNAi_SKjDTW74BcesnX-WQQ.asa (hash: j48nzI6JGxErzvih/a7iFeEhyD9lYuYhcQYuQ7FCZgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:26:f5:08:11:66:f0:4c:99:70:4a:91:cc:c2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
Validity
Not Before: Mar 29 07:01:51 2026 GMT
Not After : Mar 30 07:01:51 2026 GMT
Subject: CN=e740c24ea1bde2ac7ee0c424e5a15b6ffa4cdcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:85:65:44:89:33:28:72:81:fd:1a:1e:17:
02:9d:a0:91:50:12:68:b8:d8:35:c5:78:6c:ed:9b:
84:d3:b4:ff:4e:71:90:3d:c4:5e:b8:21:1f:94:4e:
29:f3:b6:dd:1f:d4:23:3f:52:1d:8f:49:ee:f3:8d:
d0:bf:5f:61:54:29:f1:b7:0b:7c:7a:a6:14:d7:08:
d5:ea:07:36:e2:00:92:72:22:34:36:06:66:5d:6e:
89:9a:ae:4d:a3:ba:c2:5a:5d:3f:ef:87:93:0b:c2:
8b:0b:bb:73:de:65:ee:24:93:6f:86:71:7d:37:f2:
5e:74:30:b0:e3:d5:70:d7:0d:e6:42:d9:15:73:7f:
78:23:ad:6f:f3:63:d0:a5:57:a0:dd:71:ba:f5:10:
e4:f8:c2:ae:0a:7a:56:ba:64:19:8a:1f:31:da:33:
cf:93:72:04:e9:8a:10:32:e7:38:bb:54:a8:42:89:
73:ba:ec:87:38:73:8a:94:be:2b:8d:5a:f0:31:1f:
9e:5d:8a:02:13:fb:6d:d9:31:6a:4a:ed:b2:29:ad:
3a:3e:82:d0:f6:3f:00:2e:9d:aa:61:1d:49:7e:3b:
f9:09:15:a1:1c:24:97:09:46:a5:02:70:d4:bd:7a:
13:3b:ac:e6:be:5a:0a:59:b5:d9:8e:2e:78:97:ad:
c8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:40:C2:4E:A1:BD:E2:AC:7E:E0:C4:24:E5:A1:5B:6F:FA:4C:DC:F7
X509v3 Authority Key Identifier:
keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:41:d0:e7:a5:80:52:00:f4:6e:f6:f7:27:4d:b8:fb:a4:25:
34:46:d7:2b:52:3b:44:98:7a:ca:1a:d7:cc:71:5a:c0:a9:ed:
02:f7:74:1c:0e:c2:c7:37:5b:c1:67:9a:64:73:9d:e1:36:da:
e3:a3:ea:f9:0f:06:d0:fb:0b:23:38:16:29:d5:5e:ba:a0:fb:
7d:06:ac:98:04:50:21:b6:90:33:c2:c8:ea:e8:a8:d2:4b:ba:
81:99:3c:9d:1a:2f:a5:a9:8f:f4:97:e3:35:ce:dd:68:fc:e3:
56:91:5f:16:a6:e9:9b:20:d8:23:5b:9e:5e:a4:b6:05:53:0b:
5f:04:7e:51:96:a9:31:f5:f3:94:24:22:03:39:52:fd:6e:b5:
40:eb:38:b2:0a:14:58:73:24:11:40:cf:6c:11:8c:bb:fe:f3:
5d:cc:a9:1f:0a:ea:82:55:ab:74:69:af:38:01:40:40:b4:cd:
7c:76:be:21:0b:d7:92:dd:0d:04:40:83:d5:47:d2:c9:3d:cd:
1b:e1:db:1c:f6:48:e9:2d:7c:54:b8:71:42:d3:1c:17:44:0c:
6a:98:95:ad:a9:fb:fe:21:d8:17:05:10:1c:4d:03:c3:15:eb:
03:a9:8f:3f:c8:51:09:20:2b:08:f2:9d:2f:02:6c:88:1a:db:
d2:c0:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:55:06 2026 by rpki-client