Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
File: K76x-Fza0UW9L5et3QlB0y11jec.mft (raw, json)
Hash identifier: rSrQMWGdqqW8sZ56gkjjp4o1dx//aHPrsN9zOu5e2sk=
Subject key identifier: 29:7E:0F:3F:98:51:34:1B:05:42:9C:60:8F:AC:6B:92:0C:6A:28:40
Authority key identifier: 2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
Certificate issuer: /CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Certificate serial: 01A08CB1C77D570B3D7A4F18BCCE615EE3B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
Manifest number: 07AF
Signing time: Thu 10 Sep 2026 19:00:56 +0000
Manifest this update: Thu 10 Sep 2026 19:00:56 +0000
Manifest next update: Fri 11 Sep 2026 19:00:56 +0000
Files and hashes: 1: K76x-Fza0UW9L5et3QlB0y11jec.crl (hash: HD7KZJEjFnQ4B0vKY0ceYG9T5XAVtU+Puf0pZLBlr0M=)
2: iOwYO4Lxb7-lX1XZvdtMWr_SxeI.roa (hash: X1eh/qobiG09DJ7YvAOhgY6UujJecU+Lh8+lJTDAajg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:c7:7d:57:0b:3d:7a:4f:18:bc:ce:61:5e:e3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbeb1f85cdad145bd2f97addd0941d32d758de7
Validity
Not Before: Sep 10 19:00:56 2026 GMT
Not After : Sep 11 19:00:56 2026 GMT
Subject: CN=297e0f3f9851341b05429c608fac6b920c6a2840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:f5:be:5e:7c:97:6e:d3:82:e6:eb:2f:98:
df:84:07:9c:a4:a6:64:2e:37:45:a2:63:03:84:f1:
e5:f0:dc:3d:ab:90:d9:f6:67:a4:3a:36:15:c1:74:
f1:35:30:fe:a6:a3:e4:46:5a:6a:e1:50:78:a9:98:
31:c0:24:7a:03:5b:11:33:f0:07:73:c3:5b:58:0e:
e2:08:1a:78:d4:38:6f:4b:f8:f4:ad:d0:91:df:2a:
9c:cb:15:a4:88:57:0b:39:bf:56:95:dd:4b:97:5e:
43:00:23:0d:88:b5:da:d3:5e:e1:9f:e1:9c:d7:80:
82:41:b1:60:05:12:b0:fa:26:9b:8f:96:26:35:32:
7c:11:54:7a:1e:f6:92:b4:ea:ed:98:a2:19:8b:59:
e6:57:d3:f5:43:11:fa:6a:5c:1c:6c:c7:71:21:e9:
e2:57:1b:9b:9c:d1:1b:45:6f:da:08:47:39:8e:84:
e8:42:64:1e:fd:2d:59:c6:43:74:b8:c5:14:a3:9b:
6b:9b:37:98:8e:a6:7a:5e:6c:e9:cc:8d:b4:1d:8e:
64:31:f1:86:ec:13:e2:74:80:17:31:71:ab:01:d7:
3a:cb:08:3f:a5:21:15:26:4f:85:d3:d9:09:51:f6:
73:2e:42:ec:73:b1:99:9d:51:9b:6a:06:36:92:f4:
af:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7E:0F:3F:98:51:34:1B:05:42:9C:60:8F:AC:6B:92:0C:6A:28:40
X509v3 Authority Key Identifier:
keyid:2B:BE:B1:F8:5C:DA:D1:45:BD:2F:97:AD:DD:09:41:D3:2D:75:8D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K76x-Fza0UW9L5et3QlB0y11jec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a5f2ba-326d-4845-b7a3-02fd8e99bfe1/1/K76x-Fza0UW9L5et3QlB0y11jec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:be:f7:5c:9b:bc:c4:9c:d6:85:c8:e9:a4:07:eb:57:48:9d:
53:95:19:f4:6a:74:ba:55:a9:60:40:65:cb:16:b3:f5:36:ba:
96:77:b0:28:fb:6a:16:0d:35:51:03:68:7f:25:49:5f:10:e4:
62:32:56:20:40:aa:42:37:32:c9:50:ae:54:d8:f0:90:52:db:
0b:ee:b3:0b:8f:06:ce:7d:b0:73:21:4a:fd:cb:d0:05:6a:2e:
a4:53:09:9d:9d:cf:3a:39:09:57:30:d6:51:45:d4:be:39:99:
9a:74:9d:d7:0b:0a:5c:81:f0:b4:a4:e5:78:b1:0b:93:24:80:
bc:9a:da:b2:5d:24:08:53:d9:2d:ed:7f:12:d4:40:69:0c:f2:
98:db:5c:18:5d:06:db:1f:c3:a5:5a:cd:47:89:31:0f:67:6d:
6a:74:0f:69:f1:bf:eb:db:c7:59:1c:6a:07:0e:36:09:32:c2:
bd:75:3c:09:bc:b2:b0:af:64:f1:43:42:76:7d:3e:89:25:45:
cc:fd:89:37:87:66:f7:f7:b9:14:f2:6c:e2:41:2d:a0:36:89:
d1:5f:3b:f2:8f:ce:83:e6:12:2f:9e:2d:b2:bc:59:dc:2a:42:
0b:9e:7c:78:f5:5b:90:4d:d3:75:5a:9d:69:8f:5b:b6:05:06:
dd:e2:84:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMscd9Vws9ek8YvM5hXuOxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYmViMWY4NWNkYWQxNDViZDJmOTdhZGRkMDk0MWQzMmQ3
NThkZTcwHhcNMjYwOTEwMTkwMDU2WhcNMjYwOTExMTkwMDU2WjAzMTEwLwYDVQQD
EygyOTdlMGYzZjk4NTEzNDFiMDU0MjljNjA4ZmFjNmI5MjBjNmEyODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8j1vl58l27TgubrL5jfhAecpKZk
LjdFomMDhPHl8Nw9q5DZ9mekOjYVwXTxNTD+pqPkRlpq4VB4qZgxwCR6A1sRM/AH
c8NbWA7iCBp41DhvS/j0rdCR3yqcyxWkiFcLOb9Wld1Ll15DACMNiLXa017hn+Gc
14CCQbFgBRKw+iabj5YmNTJ8EVR6HvaStOrtmKIZi1nmV9P1QxH6alwcbMdxIeni
VxubnNEbRW/aCEc5joToQmQe/S1ZxkN0uMUUo5trmzeYjqZ6XmzpzI20HY5kMfGG
7BPidIAXMXGrAdc6ywg/pSEVJk+F09kJUfZzLkLsc7GZnVGbagY2kvSv2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCl+Dz+YUTQbBUKcYI+sa5IMaihAMB8GA1UdIwQY
MBaAFCu+sfhc2tFFvS+Xrd0JQdMtdY3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMt
MDJmZDhlOTliZmUxLzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9hNWYyYmEtMzI2ZC00ODQ1LWI3YTMtMDJmZDhlOTliZmUx
LzEvSzc2eC1GemEwVVc5TDVldDNRbEIweTExamVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWb73XJu8
xJzWhcjppAfrV0idU5UZ9Gp0ulWpYEBlyxaz9Ta6lnewKPtqFg01UQNofyVJXxDk
YjJWIECqQjcyyVCuVNjwkFLbC+6zC48Gzn2wcyFK/cvQBWoupFMJnZ3POjkJVzDW
UUXUvjmZmnSd1wsKXIHwtKTleLELkySAvJrasl0kCFPZLe1/EtRAaQzymNtcGF0G
2x/DpVrNR4kxD2dtanQPafG/69vHWRxqBw42CTLCvXU8CbyysK9k8UNCdn0+iSVF
zP2JN4dm9/e5FPJs4kEtoDaJ0V878o/Og+YSL54tsrxZ3CpCC558ePVbkE3TdVqd
aY9btgUG3eKE6w==
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:07:43 2026 by rpki-client