Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json)
Hash identifier: w+/ovsLML1rPrviJblT4uUlmmDgiV7TUiXWWRMzi+xI=
Subject key identifier: 79:AD:12:E6:7F:D6:11:AC:0F:FC:90:E1:B7:39:8D:18:B3:C6:AF:07
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 019D37F766549AAF19144D0163AFC4629811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
Manifest number: 0500
Signing time: Sun 29 Mar 2026 05:00:53 +0000
Manifest this update: Sun 29 Mar 2026 05:00:53 +0000
Manifest next update: Mon 30 Mar 2026 05:00:53 +0000
Files and hashes: 1: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: yrFNGp1PLnLPQmb25J4/6UzxvbtoaF4i0r5O/Iu4sPE=)
2: ujXjrHSBskkRtzQpgabT3c58RZQ.roa (hash: hcJwU6ySjyVPwOkpMUkEEZB++4hAYjO13djZi7l/+iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:66:54:9a:af:19:14:4d:01:63:af:c4:62:98:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Mar 29 05:00:53 2026 GMT
Not After : Mar 30 05:00:53 2026 GMT
Subject: CN=79ad12e67fd611ac0ffc90e1b7398d18b3c6af07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:e9:4a:e1:f8:04:8c:9e:72:09:73:8d:6e:
dc:1d:78:fc:a4:77:43:75:55:77:03:02:f3:82:9d:
1a:ce:b7:93:20:b1:3a:80:70:f1:71:87:d4:d5:9b:
74:56:d3:b4:a0:74:86:8f:5a:d4:51:d0:e7:e2:e7:
69:24:c2:a6:82:6e:40:89:02:18:05:05:a1:18:18:
6d:30:7d:97:8d:3a:0c:c6:01:17:06:4e:43:b0:b9:
f1:7e:fc:bb:00:43:bb:5b:3f:43:95:6e:67:4e:fb:
08:06:30:e7:e3:9a:3d:35:01:61:94:c3:81:1a:ad:
22:33:94:98:31:94:97:a2:d6:8f:46:cf:b7:d1:f0:
0c:e2:a9:1d:c0:c6:b1:d5:38:e5:24:a2:e2:02:a2:
04:6e:07:8a:19:dc:31:6a:60:89:a7:cd:ec:48:27:
e7:1b:bc:83:fe:9b:84:39:6c:b0:16:d9:cc:93:9a:
6c:4d:67:56:08:45:2a:8f:a0:45:77:59:ba:95:b7:
6f:30:fe:e8:38:f0:14:9b:03:a5:45:8d:03:b9:91:
2a:5f:79:20:fd:03:a8:08:6b:fa:06:bd:c8:12:94:
c0:7d:15:30:f8:42:86:ca:a3:7e:37:b6:7a:e3:86:
45:56:2f:52:9d:5a:18:7f:76:b0:51:26:b6:69:cc:
36:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AD:12:E6:7F:D6:11:AC:0F:FC:90:E1:B7:39:8D:18:B3:C6:AF:07
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f1:07:da:d3:9a:3c:7c:0a:71:98:f5:a3:e2:00:25:b6:a6:
ab:28:b4:17:10:16:2d:0c:d1:b0:82:d5:51:51:b4:4f:f8:49:
6a:35:38:c0:4c:b5:80:38:be:22:39:4b:e4:19:e1:7c:59:00:
a5:36:f3:9e:91:66:ee:99:d7:dd:43:3c:08:af:ea:31:d9:17:
a8:dc:cd:15:67:4b:17:fa:ad:fb:19:69:2e:4b:34:22:7a:69:
01:f0:de:d4:79:f8:31:41:83:f0:03:ff:72:96:5c:14:a1:5d:
1a:99:f6:ee:f7:ea:97:93:64:80:3b:61:5c:01:7f:47:16:c0:
c9:58:07:ef:ab:aa:19:fc:74:72:e8:d9:04:32:16:46:96:01:
ef:47:34:6d:a4:bf:78:90:7d:57:51:ed:8a:b5:6a:e5:2a:61:
08:a2:47:3a:25:83:91:3b:aa:70:8e:43:d3:16:88:de:d3:e3:
3f:57:8f:11:fd:34:53:55:7f:cd:c4:25:22:44:25:53:f7:68:
6e:11:6e:d8:1a:a7:85:78:5c:4d:61:54:84:f9:f0:0c:d7:a0:
38:3c:3f:12:9b:ea:79:e7:df:ec:76:03:b5:54:09:a3:60:01:
1d:a2:0d:41:e2:10:27:cc:fb:03:7f:43:5d:a8:42:3a:ce:5b:
9f:24:ae:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:18 2026 by rpki-client