Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
File: K3bhVwytdzn9C_9gYy4FvAb2QuM.mft (raw, json)
Hash identifier: hCS94kvYfWyZVABHHXfCZ8nU4lNq9rIrBS51LlYDUq4=
Subject key identifier: 1D:0B:45:14:83:9F:E0:6B:F6:68:0F:E6:B1:CD:3C:19:15:36:AB:9B
Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Certificate serial: 019D39AF1C65572105A830A8A253B42E6FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
Manifest number: 0281
Signing time: Sun 29 Mar 2026 13:01:10 +0000
Manifest this update: Sun 29 Mar 2026 13:01:10 +0000
Manifest next update: Mon 30 Mar 2026 13:01:10 +0000
Files and hashes: 1: B65rjwLsAKNHyDmSqKvHUJ8cNBc.roa (hash: 5NrfUPDXXXmhJ+JmLFvf/QPQMfrwfuMZfIVQvRGPZHc=)
2: K3bhVwytdzn9C_9gYy4FvAb2QuM.crl (hash: 3eSaD+RhDPS5elMugeWXGrdUBIh0VeDNtbWmQkoMTqI=)
3: ZVEt9mXu1eJe81PrexDO4FphB_M.asa (hash: DhqFzLrsMjhd/GYHnppx/kLawShg14X54LUCOOfhDY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:1c:65:57:21:05:a8:30:a8:a2:53:b4:2e:6f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Validity
Not Before: Mar 29 13:01:10 2026 GMT
Not After : Mar 30 13:01:10 2026 GMT
Subject: CN=1d0b4514839fe06bf6680fe6b1cd3c191536ab9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:81:f5:c1:6c:cd:d9:4d:5b:c4:47:25:e7:bd:
2c:8f:d3:99:21:3d:bf:40:ec:dc:d4:e5:f1:34:1f:
ab:8f:36:ad:fc:6a:df:8e:f1:60:0a:02:5d:ab:fc:
12:5f:ad:09:c3:39:3c:3d:b3:6d:91:33:23:32:02:
f8:ba:78:ee:d9:07:0d:65:d0:10:04:7b:ff:89:89:
56:95:dc:af:ef:e6:dd:38:93:90:45:5c:dc:fc:0a:
68:bb:ed:50:6c:fa:84:84:b1:ed:d8:8e:43:f8:61:
ff:00:4a:a7:f7:98:85:23:92:78:b6:cb:41:d4:51:
10:db:5a:cb:62:cb:0c:fa:db:60:bb:a7:b0:2f:c0:
46:bb:c2:1f:c7:06:74:25:f9:1e:50:61:41:a9:98:
86:48:50:23:af:24:03:e8:59:99:97:46:3d:af:02:
35:25:ff:01:8d:c4:f1:78:db:83:69:86:c3:f7:7f:
ca:46:7d:08:af:c1:60:42:9c:27:47:e3:97:09:25:
7e:08:07:b7:62:d2:63:3a:7d:ab:f2:0b:79:37:97:
30:fd:ef:d5:94:f0:e7:fb:b7:71:b6:da:42:c8:bb:
7a:b8:65:3a:68:e5:40:bb:4e:4d:d6:8f:e0:31:52:
05:d3:43:09:e6:59:b4:13:a8:57:06:3c:8b:af:0b:
0c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0B:45:14:83:9F:E0:6B:F6:68:0F:E6:B1:CD:3C:19:15:36:AB:9B
X509v3 Authority Key Identifier:
keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:17:1c:63:31:29:5e:e6:71:2d:a3:e3:27:24:3f:27:75:e0:
2d:50:f2:ec:7a:25:b2:13:e0:78:f2:89:0f:c3:1b:b8:f3:96:
cf:e4:22:34:fa:6f:ed:68:50:5b:62:8b:60:ae:ab:11:66:7e:
20:44:64:ed:34:52:97:cd:a2:06:61:9f:68:e9:25:3d:6e:ab:
32:d4:74:1d:56:c4:23:f6:f1:a2:e7:82:3b:7e:d8:b1:16:2e:
d6:d9:60:e4:ce:f0:8d:a3:3b:06:5d:f0:e4:09:17:1d:b4:e0:
b1:ce:21:6d:05:93:5e:c9:6b:f5:54:05:57:14:e2:62:28:2d:
82:27:77:49:53:92:2f:86:63:f7:b0:21:6d:b2:3a:ed:67:d7:
a8:6f:1b:98:c8:10:cf:be:2a:74:77:c3:02:53:45:5e:65:52:
fe:87:c3:3f:7c:b2:45:28:a0:43:88:f9:72:b4:ba:5c:a5:88:
2f:ac:54:1b:2a:b1:71:0d:55:cf:70:af:6a:af:86:5c:66:ce:
34:7b:d0:f0:43:19:54:62:ce:e4:1b:b0:1c:05:d4:06:d8:51:
56:37:56:c8:f0:f7:aa:ea:bc:2d:e3:e0:e5:6a:97:d3:0a:6b:
dc:78:a1:30:b8:4f:c9:62:68:8a:fc:6c:7f:49:cc:3c:7c:06:
11:34:06:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rxxlVyEFqDCoolO0Lm/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNzZlMTU3MGNhZDc3MzlmZDBiZmY2MDYzMmUwNWJjMDZm
NjQyZTMwHhcNMjYwMzI5MTMwMTEwWhcNMjYwMzMwMTMwMTEwWjAzMTEwLwYDVQQD
EygxZDBiNDUxNDgzOWZlMDZiZjY2ODBmZTZiMWNkM2MxOTE1MzZhYjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YH1wWzN2U1bxEcl570sj9OZIT2/
QOzc1OXxNB+rjzat/GrfjvFgCgJdq/wSX60Jwzk8PbNtkTMjMgL4unju2QcNZdAQ
BHv/iYlWldyv7+bdOJOQRVzc/Apou+1QbPqEhLHt2I5D+GH/AEqn95iFI5J4tstB
1FEQ21rLYssM+ttgu6ewL8BGu8IfxwZ0JfkeUGFBqZiGSFAjryQD6FmZl0Y9rwI1
Jf8BjcTxeNuDaYbD93/KRn0Ir8FgQpwnR+OXCSV+CAe3YtJjOn2r8gt5N5cw/e/V
lPDn+7dxttpCyLt6uGU6aOVAu05N1o/gMVIF00MJ5lm0E6hXBjyLrwsMkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0LRRSDn+Br9mgP5rHNPBkVNqubMB8GA1UdIwQY
MBaAFCt24VcMrXc5/Qv/YGMuBbwG9kLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mMGY5NDUtZGMzYi00NjcyLTk0MmQt
N2Y2ZWU3YTc2NTY1LzEvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mMGY5NDUtZGMzYi00NjcyLTk0MmQtN2Y2ZWU3YTc2NTY1
LzEvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhccYzEp
XuZxLaPjJyQ/J3XgLVDy7HolshPgePKJD8MbuPOWz+QiNPpv7WhQW2KLYK6rEWZ+
IERk7TRSl82iBmGfaOklPW6rMtR0HVbEI/bxoueCO37YsRYu1tlg5M7wjaM7Bl3w
5AkXHbTgsc4hbQWTXslr9VQFVxTiYigtgid3SVOSL4Zj97AhbbI67WfXqG8bmMgQ
z74qdHfDAlNFXmVS/ofDP3yyRSigQ4j5crS6XKWIL6xUGyqxcQ1Vz3Cvaq+GXGbO
NHvQ8EMZVGLO5BuwHAXUBthRVjdWyPD3quq8LePg5WqX0wpr3HihMLhPyWJoivxs
f0nMPHwGETQGTw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:06 2026 by rpki-client