Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
File: K3BccjJSLxtRhLGpI61d9azKgpY.mft (raw, json)
Hash identifier: 8vRy9P9aW8CgkqbLRHGHvlSyfFbPJw3ZleWr/3to0Fc=
Subject key identifier: 2C:44:8D:80:C9:58:1E:67:05:BF:77:9A:F8:C0:94:B9:1C:6E:E1:6A
Authority key identifier: 2B:70:5C:72:32:52:2F:1B:51:84:B1:A9:23:AD:5D:F5:AC:CA:82:96
Certificate issuer: /CN=2b705c7232522f1b5184b1a923ad5df5acca8296
Certificate serial: 01A08CB208A9D0DDCD86BD6C46156016DFD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
Manifest number: 85
Signing time: Thu 10 Sep 2026 19:01:12 +0000
Manifest this update: Thu 10 Sep 2026 19:01:12 +0000
Manifest next update: Fri 11 Sep 2026 19:01:12 +0000
Files and hashes: 1: 5R-Ml5tqIm_FJpJXkUdDiSStRjY.roa (hash: s0w7EnEzaL3hvd2P1WfGCyS4/IjBnkkqTOFQOK9O+hc=)
2: K3BccjJSLxtRhLGpI61d9azKgpY.crl (hash: mnsvEgp/Au8HgF85/oyyi+YiGFoJCwCoUZ0tNr+hzP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b2:08:a9:d0:dd:cd:86:bd:6c:46:15:60:16:df:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b705c7232522f1b5184b1a923ad5df5acca8296
Validity
Not Before: Sep 10 19:01:12 2026 GMT
Not After : Sep 11 19:01:12 2026 GMT
Subject: CN=2c448d80c9581e6705bf779af8c094b91c6ee16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:02:83:4f:18:8d:93:51:e5:c4:ae:4a:9b:
a6:62:ef:f0:0a:ee:d0:9c:2d:46:f5:ad:c6:c9:00:
6c:4a:e8:53:ff:32:22:22:c2:bf:ad:e4:f2:e6:92:
f7:ee:8f:65:66:a5:13:b4:59:19:a5:6d:57:ea:4a:
a2:82:17:94:7e:3b:24:c2:c4:51:8f:26:da:e1:1c:
dc:d7:99:07:ad:34:7b:4a:5b:2c:74:e9:89:e2:a5:
74:bd:5c:b3:90:36:1f:92:c8:22:b2:dd:74:eb:c0:
b7:7d:9f:6c:cc:34:68:5c:c5:99:c0:34:3c:b9:6a:
55:06:99:c6:82:b7:61:d0:73:bc:09:72:13:e0:fe:
b6:03:69:82:61:4b:a6:a4:e5:2b:17:d3:1b:22:06:
fc:42:ef:3c:47:3c:bf:ba:1f:a0:bf:01:66:11:52:
5d:d1:89:23:c9:bd:5b:10:14:5d:f7:27:46:54:85:
50:56:32:d9:d8:83:4a:10:be:c1:d6:04:23:f9:97:
36:66:c5:6b:30:84:8c:ed:da:32:4d:98:82:30:59:
b2:57:57:b8:c5:0a:e4:41:7a:b4:45:6b:90:b5:1c:
57:c4:8f:8a:c2:21:1e:bb:39:40:6d:34:be:3c:2b:
e2:54:c1:85:ee:9c:25:4e:df:2d:b6:39:33:c3:f2:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:44:8D:80:C9:58:1E:67:05:BF:77:9A:F8:C0:94:B9:1C:6E:E1:6A
X509v3 Authority Key Identifier:
keyid:2B:70:5C:72:32:52:2F:1B:51:84:B1:A9:23:AD:5D:F5:AC:CA:82:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3b:28:40:d1:7e:41:0d:8d:3f:b2:5f:68:52:ef:27:56:99:
30:9c:bd:a3:7f:86:83:16:a1:2b:0c:4b:f9:ed:10:29:fa:b2:
74:76:72:68:8d:2c:5d:66:92:01:0f:59:92:1c:82:12:89:bc:
a9:a8:10:33:b2:4e:c0:6a:ed:d6:69:16:44:f5:eb:47:2d:ed:
b0:2d:dd:a3:8f:fb:bd:d5:8d:e6:5c:7a:e8:23:86:a4:92:b5:
45:57:28:44:21:f6:ce:22:72:74:16:83:8d:47:ac:5f:b7:62:
0d:c9:72:65:e6:a4:3c:5a:4e:b5:cf:1e:a9:dd:e1:77:bf:6d:
9d:bb:f8:20:49:74:28:d5:d8:e5:5e:06:cc:ce:25:38:86:21:
76:21:ac:d7:8a:f0:f8:e3:bf:25:c3:f0:33:9d:46:81:fb:19:
b1:a8:2b:88:3b:a7:9c:45:5d:22:b5:f6:84:50:60:81:ac:8e:
cb:0d:66:71:3f:2d:0c:e0:3b:28:85:00:95:cb:a4:75:8f:d6:
b7:4a:e7:4d:2e:c5:d0:31:48:87:c7:a7:08:f4:3b:58:97:69:
1e:cd:1b:69:65:12:9e:e4:84:8b:3b:05:6f:25:92:c8:87:70:
6a:98:a1:12:05:24:bf:30:15:f8:af:bf:07:ce:7d:31:c3:36:
be:57:fd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:06:34 2026 by rpki-client