Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
File: K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json)
Hash identifier: B/ZdNn8/HcO+zBxTJCxXfsloZ7OoauZR4BQzSInz7iY=
Subject key identifier: 77:7C:C3:78:10:0A:2C:60:94:5C:6F:F4:52:A6:83:FC:D3:A8:8F:EF
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Certificate issuer: /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial: 019F39AA4A7F1864FE0E2E51755E1B6F588A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
Manifest number: 060B
Signing time: Mon 06 Jul 2026 23:01:29 +0000
Manifest this update: Mon 06 Jul 2026 23:01:29 +0000
Manifest next update: Tue 07 Jul 2026 23:01:29 +0000
Files and hashes: 1: 8ZRiGncNcjHqslAWDZvpmqheFTw.roa (hash: s4IpAyjn7GGORIQCaMdBiHmT+ZC8BZOYe6/UFm0+qIQ=)
2: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: ha9m4WKw0HaogmcFcXQJ1E+ThSKh+XBWEdASTqQuJKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 20:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:aa:4a:7f:18:64:fe:0e:2e:51:75:5e:1b:6f:58:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Validity
Not Before: Jul 6 23:01:29 2026 GMT
Not After : Jul 7 23:01:29 2026 GMT
Subject: CN=777cc378100a2c60945c6ff452a683fcd3a88fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:a8:07:d6:d5:f4:88:f6:4c:73:93:13:41:
bc:17:b2:1e:f6:2d:b3:9c:9f:ec:fe:83:d0:41:6a:
2f:92:2e:8b:4d:01:db:2b:10:5f:87:89:65:de:69:
f9:06:9c:14:cf:19:82:fc:16:28:db:48:43:8a:0c:
58:b2:7d:b8:af:a1:fc:4d:41:11:c5:1d:6d:4d:f4:
8c:53:4f:c6:89:c0:83:b6:82:01:5b:3e:23:e4:05:
e0:00:0c:70:bc:e8:84:08:58:71:f9:a6:b4:58:22:
52:d8:ef:f1:34:fa:9b:06:65:3d:31:4f:32:74:7d:
4f:52:a5:e2:b0:c2:60:ff:c2:0f:79:0f:53:4f:27:
d0:fe:6a:05:93:2b:56:fb:68:2f:d3:cb:88:0f:26:
61:54:2f:da:a1:e8:78:ba:41:2b:5f:47:20:67:8c:
a3:45:ec:9a:94:2c:1e:2a:94:d1:5c:4c:9d:77:7c:
dd:8d:0e:53:c6:22:b0:8d:85:a1:49:29:db:5a:f3:
e9:7a:f0:ee:0e:c0:f7:6c:6d:42:ac:ba:4f:91:8c:
93:2d:08:29:08:61:e5:03:1b:8c:24:06:5a:4e:34:
bc:72:c1:cb:56:0f:05:17:2d:10:db:c9:57:e6:9f:
6b:6a:21:b4:20:5f:7b:6c:99:5f:4d:09:ba:7f:c3:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7C:C3:78:10:0A:2C:60:94:5C:6F:F4:52:A6:83:FC:D3:A8:8F:EF
X509v3 Authority Key Identifier:
keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d4:17:e9:11:ea:59:72:f4:0a:fe:85:88:c2:02:4c:9b:93:
11:ef:03:c9:50:12:d0:94:95:90:c5:dd:4a:28:cc:d3:e1:c5:
8e:53:fa:4c:84:e6:4f:7a:70:69:63:26:7a:ba:0b:26:c7:94:
19:42:c6:36:cb:26:12:9d:4a:06:17:2c:b3:bf:e2:49:42:a7:
c5:f7:54:78:f0:d5:e5:bf:3d:4d:6c:35:f7:93:4a:ec:98:0b:
26:49:4b:8b:a5:5f:60:c2:86:35:1d:7b:2d:0c:41:b6:48:66:
27:a2:aa:f0:27:fc:cc:2e:00:93:4c:27:15:47:2b:fe:00:88:
14:45:82:b4:40:ee:87:dd:91:78:d5:0a:f5:60:f3:01:86:04:
a2:79:99:be:e2:83:c0:25:5d:f4:c6:54:ed:93:d5:77:bc:8d:
8a:fb:16:0b:f1:a5:bf:e1:d3:50:61:ba:bd:33:e0:c0:2a:1e:
cc:ce:02:d5:9b:3e:74:df:9b:ef:21:68:4e:c8:a5:0f:76:ff:
c7:02:34:fc:bc:3b:3f:48:9c:0f:ea:03:23:88:ba:56:8e:67:
6b:cb:73:7b:d9:cb:4f:a5:a9:0d:1a:ae:79:33:62:d6:f9:33:
c6:98:28:79:29:3d:b6:42:a5:a5:2e:f3:8c:f9:bd:e8:c1:2b:
62:bd:b4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 03:29:15 2026 by rpki-client