Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json)
Hash identifier: AA9VfAULKK9t2uRIf4hBZigwAhFYPtStDn8c4mFjDEY=
Subject key identifier: 62:1A:C0:26:A4:CA:92:78:CD:0A:24:3F:07:F7:DB:03:4C:18:E3:10
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 01A13410E8CDF9794AE6F41AC55056FCA6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
Manifest number: 0713
Signing time: Tue 13 Oct 2026 07:01:25 +0000
Manifest this update: Tue 13 Oct 2026 07:01:25 +0000
Manifest next update: Wed 14 Oct 2026 07:01:25 +0000
Files and hashes: 1: 8ZRiGncNcjHqslAWDZvpmqheFTw.roa (hash: s4IpAyjn7GGORIQCaMdBiHmT+ZC8BZOYe6/UFm0+qIQ=)
2: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: kSXvV4uoAlPpgb3sfT3jO8lFia8ZWMzbWM3cj16BbRc=)
3: xuAYQ_RbxMlOd7sg9WuwdiWoNMw.roa (hash: OOFC/fIFntRjtiwOvRnVDd3OHlkJQ4IL39/qKuDEzVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:10:e8:cd:f9:79:4a:e6:f4:1a:c5:50:56:fc:a6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Oct 13 07:01:25 2026 GMT
Not After : Oct 14 07:01:25 2026 GMT
Subject: CN=621ac026a4ca9278cd0a243f07f7db034c18e310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:55:ef:80:66:73:63:35:c5:2a:ff:4c:2c:
82:1d:7b:bd:15:56:c2:dc:ff:83:a9:73:b2:ea:eb:
50:ac:2e:da:90:fb:3b:64:d5:9e:b1:d4:d8:92:55:
97:41:51:3c:79:5b:65:83:69:34:0d:80:85:4f:ef:
98:d5:c0:b0:84:7e:e3:a0:20:ce:e6:f8:27:46:76:
d1:c3:dc:50:9c:53:fa:59:6a:6a:70:b6:5c:63:72:
3d:5e:64:9f:55:d8:1e:de:44:91:c0:cf:19:2c:10:
f4:a6:9e:99:07:51:36:a8:db:b2:f1:61:81:c8:86:
85:73:9a:4d:90:51:cd:76:d8:33:83:e6:e5:07:27:
a4:bb:cb:12:d2:38:c0:3e:dd:5f:10:39:b9:ff:da:
f6:d6:93:b3:0b:b2:dc:af:7a:1c:44:d1:e7:bb:56:
b4:c4:58:8e:8b:99:b5:2b:20:71:12:79:19:5e:74:
79:fe:d2:a7:4b:57:1a:60:c4:48:f1:40:25:3c:5b:
19:4c:14:de:3e:dc:c7:17:8c:78:3f:ea:ed:da:56:
d0:61:cc:14:62:65:1e:23:dd:22:ce:1f:52:2e:37:
0e:0e:5a:be:67:21:0d:26:39:1f:9d:df:07:9f:1e:
eb:1f:11:fc:bc:63:5d:f3:f0:b8:60:53:b9:41:e3:
8f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1A:C0:26:A4:CA:92:78:CD:0A:24:3F:07:F7:DB:03:4C:18:E3:10
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e5:74:fb:57:f4:c7:0f:f5:47:5c:3e:d3:97:d5:92:e6:bf:
19:8d:57:11:13:2f:e6:27:bb:5a:18:d8:7c:d7:eb:3e:71:41:
81:32:ab:9f:11:7a:c4:7d:15:e6:99:e7:e7:10:23:68:68:d4:
62:6c:70:6b:1a:7b:2e:9e:9e:93:da:eb:af:b5:d6:b8:35:90:
8b:45:f3:30:4c:ce:1d:a6:74:b2:6e:e5:63:2a:69:92:3e:3d:
44:59:fd:a6:63:70:ec:81:2e:3a:6b:56:56:2d:4a:19:7a:4b:
6c:86:52:05:65:d7:8d:d7:27:b1:b9:0f:29:44:b8:f4:59:bc:
7f:8d:d9:e3:33:80:e5:6a:a0:ea:7b:1c:63:16:ed:4b:ef:7d:
e3:05:16:02:16:06:ee:a2:f1:75:83:77:67:92:8e:db:e2:48:
5d:c2:3e:0f:f6:13:82:08:78:77:27:9a:65:b1:a5:6e:3e:7b:
8f:4f:37:ec:a3:f7:e3:6a:e7:b8:76:6e:79:35:c0:69:7e:da:
a7:52:47:e6:13:f6:3c:74:82:2b:b6:54:63:61:79:f3:d4:7b:
5b:d2:da:f6:a2:41:6b:b9:bf:72:57:d1:b8:c7:7b:ec:45:f7:
ca:cb:23:4e:07:2f:de:39:ea:32:d5:f2:4a:bd:a9:46:57:86:
81:00:88:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:25:59 2026 by rpki-client