Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
File: K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json)
Hash identifier: y+c/yG+YisiIfg+ION0LgRFuSrBLe9ESnaZ+HBg/99o=
Subject key identifier: 3D:57:57:35:1D:11:85:90:54:04:A3:A8:53:A6:EC:64:8D:35:E6:08
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial: 019D3AF88CA83AF5204354460AB5F2686FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
Manifest number: 05F7
Signing time: Sun 29 Mar 2026 19:01:00 +0000
Manifest this update: Sun 29 Mar 2026 19:01:00 +0000
Manifest next update: Mon 30 Mar 2026 19:01:00 +0000
Files and hashes: 1: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: jTj0QCBcL/gopX2I0NilZ3Ni4BVyNOubnmlsJfPshoU=)
2: iOwYO4Lxb7-lX1XZvdtMWr_SxeI.roa (hash: X1eh/qobiG09DJ7YvAOhgY6UujJecU+Lh8+lJTDAajg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:8c:a8:3a:f5:20:43:54:46:0a:b5:f2:68:6f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Validity
Not Before: Mar 29 19:01:00 2026 GMT
Not After : Mar 30 19:01:00 2026 GMT
Subject: CN=3d5757351d1185905404a3a853a6ec648d35e608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0c:df:d5:4d:d4:a7:bb:17:5c:41:e7:58:80:
30:8f:f1:0f:65:04:c1:79:db:9a:96:25:f8:4c:24:
06:8f:b6:75:7d:85:c9:e0:92:2a:24:c1:1c:9d:06:
c3:3b:8c:a3:35:2b:ac:1a:1d:45:78:48:82:d2:ba:
bd:e9:61:f7:5d:90:0b:ab:58:5c:fe:43:7b:59:b4:
9e:b8:ee:9d:a8:3c:cf:81:1c:7a:7e:0e:06:06:96:
42:10:a4:20:89:62:e1:1e:fd:17:1c:b3:89:f7:5d:
aa:d4:61:7b:2a:31:91:a2:a6:88:eb:54:27:46:5c:
1f:cb:a7:73:8d:e2:34:70:6c:35:b6:9b:e8:cd:bc:
ea:42:f7:c2:0d:23:f4:ef:52:1d:bd:28:a9:69:f3:
2a:ab:f6:6c:a9:db:3a:c0:71:ee:88:d3:f0:1b:43:
32:ce:3f:bf:cd:31:fb:53:50:0a:2b:70:c0:9f:a9:
26:44:15:0a:59:1d:0b:f2:dd:9b:cb:7c:77:8f:90:
6e:ea:c2:ae:15:d5:7a:59:73:86:9f:ef:90:8d:cd:
cd:ae:4d:89:a1:2a:48:f1:cd:74:b6:07:a4:5f:fb:
3c:1e:2e:0c:0b:db:86:ef:db:9f:0e:ee:e0:76:36:
ff:9a:a4:4e:ad:db:80:12:18:f9:d9:f9:97:ef:08:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:57:57:35:1D:11:85:90:54:04:A3:A8:53:A6:EC:64:8D:35:E6:08
X509v3 Authority Key Identifier:
keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:31:ee:75:3e:1b:55:da:f8:e7:48:ec:56:11:ea:05:6a:6a:
00:16:01:7b:eb:57:65:a4:bc:a8:d9:e2:41:dc:89:f2:ee:fd:
a4:ff:97:a3:50:eb:e0:c7:47:05:02:ce:67:fd:1b:3e:24:69:
fb:bf:99:30:dd:e9:72:0f:13:40:39:56:e8:d9:e8:53:60:af:
84:53:9f:92:85:23:50:ae:61:fd:bf:cf:4d:a4:cd:73:de:eb:
ac:68:d0:06:78:14:49:e6:3b:2d:15:8c:fb:9d:35:7c:3c:43:
b8:a7:84:7e:80:d7:64:2a:b9:96:4e:9a:cf:d3:5c:7b:05:8f:
4e:a0:83:7a:27:a3:f2:6f:88:1f:81:c2:50:fe:ba:c1:c8:3e:
d9:6b:b3:53:28:3e:cc:03:1b:f9:56:34:6c:26:d2:ee:14:30:
8c:01:1e:a5:7b:68:32:15:59:fb:55:88:37:dd:1c:16:86:23:
6b:1c:a0:69:81:58:a7:58:5e:e9:a9:a8:ff:40:74:e1:95:a4:
5b:06:f0:46:8e:56:c8:8b:c1:c5:12:8f:40:12:75:01:59:df:
c3:0b:0e:b7:16:1d:79:c2:03:c4:3e:ac:47:47:79:20:c9:c8:
ae:01:db:17:fc:1e:67:40:8c:9b:ad:49:c3:cc:dc:3e:b7:4e:
78:6c:81:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:22:38 2026 by rpki-client