Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
File: K3bhVwytdzn9C_9gYy4FvAb2QuM.mft (raw, json)
Hash identifier: uV875zEEiQtcwRqFH/AvmizHa0OIcksBN2mA8eqONYs=
Subject key identifier: 20:80:3E:C0:64:31:94:26:7D:4D:0C:71:A2:D5:ED:67:6B:5E:8C:AC
Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Certificate serial: 01A0C58E327968A684C2DE8D9839C2C84B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
Manifest number: 045A
Signing time: Mon 21 Sep 2026 20:00:25 +0000
Manifest this update: Mon 21 Sep 2026 20:00:25 +0000
Manifest next update: Tue 22 Sep 2026 20:00:25 +0000
Files and hashes: 1: HV1KmD-rZRC54waUcFWtUdN1nZI.asa (hash: CM7WmKkuGJam1zdNd7N3h3RWaCzkeUgNB55NaAhm7io=)
2: K3bhVwytdzn9C_9gYy4FvAb2QuM.crl (hash: 5IT63en3n+Hul36kCk0KCYMAAoqBcuTvw5L35co9GRA=)
3: Z92yiTrhR0fQeo1Gpcv8VY0ix_Q.roa (hash: X+YVIvMsha8DVgM98Sir2A7a/vrAXaN9NbnUzgvjneo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:32:79:68:a6:84:c2:de:8d:98:39:c2:c8:4b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3
Validity
Not Before: Sep 21 20:00:25 2026 GMT
Not After : Sep 22 20:00:25 2026 GMT
Subject: CN=20803ec0643194267d4d0c71a2d5ed676b5e8cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d9:f1:b6:08:02:0e:5b:0b:dd:9b:12:81:a3:
91:5e:dd:3c:83:16:77:d9:f3:36:fa:c1:84:1c:95:
49:3f:50:13:a4:b4:9d:05:b2:7e:00:2c:93:3f:4d:
67:27:b4:8c:07:21:90:76:6b:ed:a2:fd:1f:81:de:
b5:a2:00:d4:9a:8b:00:a6:db:f9:1c:13:79:ef:6f:
84:46:ee:04:53:81:04:12:b7:1c:20:45:65:f5:f0:
41:d1:c4:b8:fe:a2:da:81:ad:db:f1:db:2c:de:a1:
39:f8:0a:e7:96:b2:c5:96:51:e7:49:6a:c2:c8:0e:
4f:b4:11:44:6a:e1:ca:1b:20:ae:85:b9:db:a4:72:
34:14:af:86:46:f1:4e:e1:d6:29:30:c6:74:b1:87:
d0:f2:16:d4:e3:99:96:37:fc:3c:3e:ad:ac:95:cb:
4f:40:14:19:eb:32:95:5a:72:cd:10:8b:73:02:ec:
6e:f1:c6:7c:53:15:2f:58:56:dc:1f:09:99:2f:6d:
c7:13:d1:fc:43:9c:0c:a7:fe:d4:04:c1:21:a0:18:
31:d3:69:92:c9:18:41:eb:9a:1b:8f:47:d7:f0:87:
cd:83:e7:f7:2b:06:d8:b9:ca:65:ce:18:0a:ba:14:
e1:7c:42:f5:54:7e:f5:84:f3:06:01:5a:68:5e:0d:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:80:3E:C0:64:31:94:26:7D:4D:0C:71:A2:D5:ED:67:6B:5E:8C:AC
X509v3 Authority Key Identifier:
keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:42:01:a4:e9:74:f0:ee:6f:f5:45:17:45:03:15:c8:c6:ab:
13:ab:31:6c:5a:0d:34:cd:b4:fe:6f:bd:b4:35:0d:f5:35:de:
8c:f0:f3:c7:4c:3b:ee:69:58:23:f5:99:9b:d0:fd:34:ed:40:
6b:85:32:19:5c:fa:75:19:ef:13:75:b2:62:32:a7:4d:fa:f0:
ae:16:e7:b8:7c:dc:57:a6:a0:57:f5:02:6e:df:cc:50:96:9a:
24:00:96:8f:95:fe:2c:53:03:86:de:53:5c:35:cf:a2:cb:67:
01:76:27:35:9e:22:32:d7:25:d8:b1:67:48:f6:15:d9:5e:8f:
2a:e1:59:4d:cc:d2:09:60:79:54:47:61:d1:41:c1:9b:3e:79:
5a:52:1e:b6:a8:02:aa:bd:9c:9e:db:88:08:18:8c:d7:1e:c3:
a7:6b:00:6b:36:27:69:0a:17:3c:83:a7:89:64:9f:f9:6a:26:
82:fb:8e:7e:27:7d:b6:a7:91:4f:8f:de:fa:54:81:25:36:32:
0d:ff:fb:e8:5d:1e:5a:2a:78:7b:a7:05:8c:52:db:5a:06:14:
86:2f:ac:5f:c8:18:00:87:68:c7:46:8e:df:9c:4d:80:a5:8c:
81:89:d2:6c:68:34:fd:55:5e:9a:2d:aa:2e:ea:45:81:77:e8:
09:e8:6f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:35:30 2026 by rpki-client