Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
File: K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft (raw, json)
Hash identifier: Mi4TcawPb5BW88/I7XflNte3x08Iw9ix9D8ApGLdDM0=
Subject key identifier: D8:36:7E:75:2A:0C:3B:A7:42:FF:FE:70:DD:45:34:89:DC:93:36:A0
Authority key identifier: 2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
Certificate issuer: /CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Certificate serial: 019F9F282FB20B17012E0FFF199E1C222CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
Manifest number: 1131
Signing time: Sun 26 Jul 2026 16:00:38 +0000
Manifest this update: Sun 26 Jul 2026 16:00:38 +0000
Manifest next update: Mon 27 Jul 2026 16:00:38 +0000
Files and hashes: 1: K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl (hash: BTvfiw++YxcsWTf8p89pWVSlFo07A74woowTIJmhu6I=)
2: bu3GjlAHqZGZd-3BPhXHMjgIpEs.roa (hash: 6kJDyG+HOxoCKQIkV5vpdJcFhE6os3v3cOBxJZ2yDRI=)
3: hYEso1alRAveho9xe8ga8KVCU7E.roa (hash: NfJ5zC2Kf/3D636WaM5Hi/SF4cTaBCiFLyyFhjSq5co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:2f:b2:0b:17:01:2e:0f:ff:19:9e:1c:22:2c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Validity
Not Before: Jul 26 16:00:38 2026 GMT
Not After : Jul 27 16:00:38 2026 GMT
Subject: CN=d8367e752a0c3ba742fffe70dd453489dc9336a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:68:47:e8:a3:ff:9e:1b:ff:38:54:8d:0b:
a1:52:23:fc:e5:a3:c3:08:d8:ee:16:f3:92:5f:89:
d7:d5:cc:38:7f:39:fe:d5:e3:49:ac:bc:5d:10:a1:
56:a4:82:0d:eb:75:37:2c:b7:00:a1:7b:44:dd:68:
91:ca:02:ff:51:f7:8f:92:59:d0:f1:f8:5c:04:e3:
54:6a:72:e7:4f:ef:4d:64:fc:6f:19:ba:d9:65:ec:
f8:0d:a9:e8:0d:a8:06:76:de:33:fa:2e:7e:a8:a0:
7e:3a:3b:36:6c:b6:68:e2:92:16:a2:dc:a6:41:00:
89:a1:1d:00:c6:91:76:b3:d1:e4:30:18:2a:ac:f7:
81:78:ab:f3:86:36:7b:29:65:0c:54:b5:90:21:04:
5f:1c:e4:8a:00:92:f1:ae:ef:6a:bf:26:a7:79:c8:
89:1c:cd:ed:2e:23:0c:06:bb:25:28:fc:5f:83:dd:
e2:80:60:7c:83:f6:7d:75:8b:58:ab:06:eb:90:3a:
ba:76:a3:2f:f0:63:72:29:9a:bd:a0:70:d6:5c:26:
24:d6:6f:1a:a7:92:e4:79:4d:e9:3d:ac:0a:2d:00:
07:bf:de:ae:1f:10:ad:37:53:ec:ca:10:05:6b:23:
51:b4:e6:d3:b3:d0:af:2c:e1:01:f2:94:84:fd:07:
41:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:36:7E:75:2A:0C:3B:A7:42:FF:FE:70:DD:45:34:89:DC:93:36:A0
X509v3 Authority Key Identifier:
keyid:2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:40:7e:b4:6b:ba:84:65:1b:c3:1b:dd:ca:73:de:fd:16:74:
bc:56:67:43:cb:34:2d:32:17:aa:ef:a7:93:fb:a6:f1:95:7e:
09:ed:20:ae:d2:79:53:7a:67:7f:4a:46:2d:99:f2:aa:e5:12:
b6:70:f7:8f:51:ef:a6:eb:68:1c:d5:7f:5d:c7:d6:c4:8b:e7:
df:9c:40:4b:f8:d3:8e:d2:64:26:78:22:90:1a:1f:84:50:b9:
8a:f0:00:4e:bd:50:19:13:34:3a:c7:4f:95:00:f1:1f:f2:43:
44:5e:c7:37:f4:cf:a7:a1:50:89:3d:b2:5f:98:fe:28:31:03:
72:81:35:8f:bb:11:eb:61:d0:6e:d1:af:33:d8:dc:7a:64:39:
b8:6e:13:9c:fb:c4:ee:a5:cc:e0:45:91:b1:be:78:79:0a:72:
90:b5:91:2a:91:ce:92:23:70:bc:cc:ea:3a:d6:f6:69:b8:5e:
0b:fc:73:ea:6b:d1:aa:86:75:71:4d:29:63:e2:f6:6e:92:3e:
8a:fc:9f:aa:a0:37:a7:23:5c:f1:cb:d9:82:07:49:79:1a:e0:
ff:85:3c:82:f5:7f:a9:04:e3:08:88:ba:7e:b9:96:ee:82:0b:
28:21:a4:3d:45:08:93:9c:b4:43:c2:92:94:2f:e0:33:34:1a:
4d:bd:4f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 22:25:09 2026 by rpki-client