Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
File: K3BccjJSLxtRhLGpI61d9azKgpY.mft (raw, json)
Hash identifier: NIj0tSUvMDB3PJjixGLmwf/uOJYL74zpx8ZdYqtBTPw=
Subject key identifier: 6C:F6:6E:A4:24:F5:98:22:B0:A3:68:CE:52:42:4B:0A:1F:61:8F:BD
Authority key identifier: 2B:70:5C:72:32:52:2F:1B:51:84:B1:A9:23:AD:5D:F5:AC:CA:82:96
Certificate issuer: /CN=2b705c7232522f1b5184b1a923ad5df5acca8296
Certificate serial: 019FA3059071FF3F88FF68B3FFF37622BA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
Manifest number: 0C
Signing time: Mon 27 Jul 2026 10:01:18 +0000
Manifest this update: Mon 27 Jul 2026 10:01:18 +0000
Manifest next update: Tue 28 Jul 2026 10:01:18 +0000
Files and hashes: 1: 5R-Ml5tqIm_FJpJXkUdDiSStRjY.roa (hash: s0w7EnEzaL3hvd2P1WfGCyS4/IjBnkkqTOFQOK9O+hc=)
2: K3BccjJSLxtRhLGpI61d9azKgpY.crl (hash: q5cWOf67MjuH+N1JP5kr2mlQ75h1Cm8NugZFNXn0RjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:90:71:ff:3f:88:ff:68:b3:ff:f3:76:22:ba:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b705c7232522f1b5184b1a923ad5df5acca8296
Validity
Not Before: Jul 27 10:01:18 2026 GMT
Not After : Jul 28 10:01:18 2026 GMT
Subject: CN=6cf66ea424f59822b0a368ce52424b0a1f618fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2f:98:09:44:fb:81:22:c4:2c:35:7f:01:7c:
da:6d:c8:2c:6b:44:c7:0b:6a:e1:0e:9b:6f:1c:7d:
51:63:99:e6:93:77:55:8b:65:db:3f:eb:2f:e6:fc:
40:0e:49:da:a1:e4:92:37:1e:1a:9c:34:9a:0f:9c:
4f:c4:08:7d:5c:6f:f2:ba:be:92:49:56:43:fd:e7:
b7:7d:e1:31:7c:73:39:46:5e:72:88:fa:b4:d8:b5:
88:31:86:d8:2f:e7:5f:bb:76:1c:20:96:ca:32:d8:
e3:6f:11:86:87:f6:42:c1:0a:26:85:d5:17:e1:ce:
35:bd:34:aa:6e:28:d2:68:f5:e4:6c:4f:5b:3f:50:
43:6c:54:c6:f4:02:65:ba:d0:db:89:0d:23:24:b8:
de:79:64:4a:c2:69:1b:c9:e1:c3:34:bd:c8:ea:f6:
65:1f:70:c3:9a:11:4b:ae:11:a6:1d:4f:bd:ec:4e:
60:83:69:c7:18:34:0c:e0:d5:cd:b1:2c:25:b0:50:
90:9d:8f:5d:fb:5f:66:5a:ab:24:ef:a6:3f:cb:8c:
c3:bc:ea:33:2c:0b:bb:57:82:c8:66:51:84:77:52:
bc:23:3f:94:c2:7f:51:6a:38:02:35:7f:65:d6:55:
eb:19:d8:f4:7d:0f:7d:df:ac:fb:71:0e:ee:de:20:
08:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F6:6E:A4:24:F5:98:22:B0:A3:68:CE:52:42:4B:0A:1F:61:8F:BD
X509v3 Authority Key Identifier:
keyid:2B:70:5C:72:32:52:2F:1B:51:84:B1:A9:23:AD:5D:F5:AC:CA:82:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3BccjJSLxtRhLGpI61d9azKgpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/aa1c91-35df-42f0-8877-516e058e8784/1/K3BccjJSLxtRhLGpI61d9azKgpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bf:9a:9d:ef:49:07:da:63:ed:ce:73:c2:aa:dc:48:71:af:
e0:c7:0e:bc:16:22:9b:d0:65:df:ae:b9:0c:6e:8a:c5:7e:08:
7f:53:4b:05:76:23:65:bb:49:81:c7:fa:66:2c:0a:c3:b9:ff:
20:fc:1a:06:21:3e:90:1d:6e:80:a4:18:ed:e9:49:e3:6f:a2:
76:2b:bc:d2:36:ba:b3:66:67:75:6e:e6:dc:48:b0:f8:2b:33:
0a:bb:5f:dd:5b:53:34:2f:e7:63:ac:74:3c:ef:2b:f5:14:4e:
99:54:f6:80:af:6c:07:62:32:22:32:a5:9e:12:b1:2a:7a:3d:
4c:a0:2b:29:a2:88:b5:d6:44:17:1d:38:3a:61:e1:eb:10:fc:
03:55:7f:39:f6:f9:1b:63:5e:bc:02:ff:88:1c:0b:1d:a7:01:
3f:cc:2b:bf:f9:8a:ab:07:4c:ce:b2:a3:05:75:57:87:2e:6a:
9b:4c:e5:fd:7f:4e:76:12:1a:42:fc:e5:c6:e4:42:5c:ed:31:
3c:e2:67:ed:54:d6:cc:f8:b8:16:ce:2e:76:f5:7b:03:29:f3:
18:31:b4:17:ab:a3:ce:ba:ea:c5:f3:3b:2e:f2:d0:a5:44:72:
4c:b7:5b:2e:12:f4:57:29:8d:98:c1:2e:db:eb:9a:ff:38:e0:
e4:6d:9a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:09:04 2026 by rpki-client