Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
File: K3bhVwytdzn9C_9gYy4FvAb2QuM.mft (raw, json)
Hash identifier: c02HF25gAZNHGgDLkPkuFHV2WguFMwzOgMf8CyQBbjU=
Subject key identifier: 9D:FB:0D:F5:86:FE:A2:DB:DC:7C:0A:D9:F8:91:DA:DD:94:1E:9A:6D
Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Certificate serial: 019F11C086BF488EDD68BADCEB27596D29F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
Manifest number: 0378
Signing time: Mon 29 Jun 2026 05:00:57 +0000
Manifest this update: Mon 29 Jun 2026 05:00:57 +0000
Manifest next update: Tue 30 Jun 2026 05:00:57 +0000
Files and hashes: 1: K3bhVwytdzn9C_9gYy4FvAb2QuM.crl (hash: 7FsXSoI9HRsK2g3cwxneTj0y2mQAWDbzK1NMtAeRz/k=)
2: Z92yiTrhR0fQeo1Gpcv8VY0ix_Q.roa (hash: X+YVIvMsha8DVgM98Sir2A7a/vrAXaN9NbnUzgvjneo=)
3: ZVEt9mXu1eJe81PrexDO4FphB_M.asa (hash: DhqFzLrsMjhd/GYHnppx/kLawShg14X54LUCOOfhDY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:c0:86:bf:48:8e:dd:68:ba:dc:eb:27:59:6d:29:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Validity
Not Before: Jun 29 05:00:57 2026 GMT
Not After : Jun 30 05:00:57 2026 GMT
Subject: CN=9dfb0df586fea2dbdc7c0ad9f891dadd941e9a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:b7:26:d1:e6:39:bd:dd:ac:77:6d:74:ec:
fd:89:69:36:ab:46:2e:27:a2:59:d7:00:fc:f8:d9:
ce:98:5b:b6:5e:53:20:22:ad:76:7a:7b:53:29:75:
39:03:54:6b:6f:92:18:f2:63:7d:41:d3:48:50:c9:
d8:9c:a9:a5:72:77:03:52:5f:9e:32:21:11:ed:1d:
35:7e:b9:df:9c:34:4a:03:47:ec:58:b7:6d:2a:45:
b7:97:44:a7:f8:f3:86:ee:77:44:c9:0f:e7:d7:10:
f7:90:e9:dc:55:32:72:20:fc:f5:99:61:68:b2:f7:
61:a4:07:5c:3c:4e:e3:dd:55:dc:42:9d:83:e1:be:
35:1d:75:f4:cc:2a:3e:ae:68:66:74:5c:68:50:63:
49:4e:a9:8a:67:81:7d:fd:c6:69:76:18:59:82:53:
2e:ff:81:d5:dd:bd:27:8d:e9:c5:3f:76:49:59:bd:
e7:4f:b2:96:70:fd:60:95:45:3d:54:36:05:18:69:
fd:ba:24:2c:c9:3a:78:1c:e5:50:27:16:cb:b5:9c:
e0:8c:ec:68:df:46:22:fa:ea:1f:e2:57:b9:89:51:
da:cf:cf:32:39:98:2e:34:b2:92:f0:05:ae:30:a6:
d2:2d:06:d0:30:61:ad:a0:a2:fa:07:04:ba:24:aa:
9b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FB:0D:F5:86:FE:A2:DB:DC:7C:0A:D9:F8:91:DA:DD:94:1E:9A:6D
X509v3 Authority Key Identifier:
keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6f:5a:d2:83:16:6b:ff:37:1d:7f:a3:70:b4:8f:ee:90:ac:
97:e6:7d:2d:5d:3c:e5:7c:5d:f4:30:5b:d6:6d:f6:2e:5a:a9:
88:05:97:a0:82:ae:78:db:c2:8a:52:0f:a5:16:5d:fc:80:72:
51:69:fd:37:33:41:a2:6f:b8:bf:bd:45:75:d7:34:27:2e:10:
7d:21:cd:f5:b4:16:ab:4f:8a:18:38:5d:31:f3:59:e4:7d:8d:
68:1e:20:79:81:cd:1d:71:c5:3f:63:23:3a:e5:a4:b6:fc:66:
67:14:5c:23:47:e1:b4:3f:e1:cb:8f:5d:8c:e7:7b:6f:02:b2:
a5:3d:51:ac:fa:f7:4b:55:ed:43:10:92:05:63:eb:63:86:24:
9e:e4:53:62:51:89:e0:e0:c0:71:fd:a5:20:b0:83:de:02:e0:
48:39:38:4c:fc:f7:0f:8a:77:f6:a4:21:1a:6d:67:34:81:e3:
a0:9a:75:02:a7:40:1c:a5:bb:6d:ea:a7:d8:93:ed:ed:50:e8:
c4:61:84:45:bf:4a:b0:cf:df:01:b0:e3:6f:64:bf:7f:f6:5a:
d6:bf:d0:fb:5a:6c:2b:c6:ad:d9:be:49:4e:c7:b7:c1:2b:1e:
70:4d:2b:84:f7:86:7c:0e:04:7f:2d:58:88:38:74:e9:20:dc:
dc:ed:2f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:09 2026 by rpki-client