Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json)
Hash identifier: NU9rBOieNA+xS+6UAnI5sruhnSw+15KA+1H7szprq6k=
Subject key identifier: E7:D6:77:0B:AF:3A:41:4E:9D:8E:C5:F5:4B:73:60:71:35:26:B6:83
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 019D0C3135BC3913D55EE9D6A157DBB597BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
Manifest number: 076E
Signing time: Fri 20 Mar 2026 17:00:44 +0000
Manifest this update: Fri 20 Mar 2026 17:00:44 +0000
Manifest next update: Sat 21 Mar 2026 17:00:44 +0000
Files and hashes: 1: CfZQ5f2U-PTexk4plOrVmUR8SVo.roa (hash: S+1++wq6+OUaKhTshD4b393Lz17gGEyD5GzsQU3qNMc=)
2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: tgBJEtt6w67vZ7zlGfSKFHzE6qy4YOeNyHH5si9YWVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0c:31:35:bc:39:13:d5:5e:e9:d6:a1:57:db:b5:97:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Mar 20 17:00:44 2026 GMT
Not After : Mar 21 17:00:44 2026 GMT
Subject: CN=e7d6770baf3a414e9d8ec5f54b7360713526b683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:e7:97:c4:b7:c8:fe:b3:5f:16:b5:cc:98:
02:a9:7c:5c:d8:e2:cf:4c:4c:e1:f1:d5:ef:27:a6:
90:bb:c5:0b:fa:40:c8:60:94:45:bf:ad:52:97:b2:
16:8a:22:9e:07:bf:16:50:39:92:4a:52:a3:35:b7:
a1:6e:e5:ca:86:c1:0f:d3:78:fd:a2:06:d9:bb:14:
6e:28:0a:03:99:10:3d:e5:31:92:6c:7d:5c:cb:df:
cd:ff:72:da:08:39:8f:a0:ad:d6:ad:18:e8:36:8d:
ba:b9:b8:5f:aa:df:82:c4:2b:13:c2:5a:20:05:b1:
07:93:a9:f7:ef:a7:fe:6c:86:d9:39:3b:ec:bf:f3:
30:ba:cd:ec:cf:5b:ca:fd:71:b0:75:58:3f:64:21:
e0:30:99:b2:09:be:a8:74:11:b9:f0:e1:bf:f2:3e:
9b:a5:19:06:67:ee:92:53:4a:5b:b0:ee:d8:ce:1c:
82:90:1d:9b:7a:54:9a:b8:e3:ec:4d:05:fc:75:f3:
be:43:35:54:dc:c4:65:c5:e8:d4:76:b0:55:3c:ab:
44:b7:80:be:e4:fc:d9:7a:3a:01:58:31:8f:ff:79:
86:df:62:b1:36:c5:f0:34:2a:8e:3f:54:59:d0:b0:
11:16:f8:08:4c:a9:de:f5:3c:3f:13:d8:f9:dd:d7:
a6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D6:77:0B:AF:3A:41:4E:9D:8E:C5:F5:4B:73:60:71:35:26:B6:83
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1f:63:49:ac:e0:61:6b:38:fa:26:6a:a8:41:f7:85:33:5e:
ce:67:d0:a6:f8:60:2b:51:65:79:d4:66:25:36:74:85:a4:80:
ac:bd:fc:29:fc:b3:76:62:34:b7:35:95:6b:25:76:fb:71:bf:
5b:9f:77:13:34:f0:f6:36:52:95:a3:67:80:b6:13:bb:08:66:
5d:3a:12:a1:ff:60:a1:43:02:84:30:97:d4:cc:83:4c:7f:71:
72:3d:ae:d9:e9:92:97:71:4d:39:87:41:06:0c:9d:87:c5:18:
e8:64:f3:95:71:0f:5e:a0:19:6e:60:32:a4:b4:f8:a3:bd:98:
15:17:6b:d9:f4:0c:7e:d6:f2:02:61:f2:bf:14:f4:03:74:b7:
9b:0c:fa:35:6c:ee:d6:fd:ea:8a:2d:e7:42:82:1d:e2:ed:b3:
50:88:2d:5c:fd:65:b6:e6:15:93:54:a7:6a:58:c9:f0:3a:6d:
8d:81:7e:b4:a0:81:84:a4:5d:2b:60:c3:80:63:d4:09:ad:35:
b5:37:be:eb:56:27:b8:4b:a5:e8:79:12:e0:07:01:f5:ec:7a:
f0:5e:84:a7:84:d7:97:a0:44:7d:d3:c4:90:5a:9f:61:96:1c:
05:56:05:63:46:cd:d6:08:cb:e9:9b:33:4b:b2:5b:1f:6d:4f:
5e:60:dd:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0MMTW8ORPVXunWoVfbtZe/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNGRkZmEzYmJmMTViYzFkYjg1ZDgzNzk5YTAxYjk4Njlh
ZDVjZTcwHhcNMjYwMzIwMTcwMDQ0WhcNMjYwMzIxMTcwMDQ0WjAzMTEwLwYDVQQD
EyhlN2Q2NzcwYmFmM2E0MTRlOWQ4ZWM1ZjU0YjczNjA3MTM1MjZiNjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrTnl8S3yP6zXxa1zJgCqXxc2OLP
TEzh8dXvJ6aQu8UL+kDIYJRFv61Sl7IWiiKeB78WUDmSSlKjNbehbuXKhsEP03j9
ogbZuxRuKAoDmRA95TGSbH1cy9/N/3LaCDmPoK3WrRjoNo26ubhfqt+CxCsTwlog
BbEHk6n376f+bIbZOTvsv/Mwus3sz1vK/XGwdVg/ZCHgMJmyCb6odBG58OG/8j6b
pRkGZ+6SU0pbsO7YzhyCkB2belSauOPsTQX8dfO+QzVU3MRlxejUdrBVPKtEt4C+
5PzZejoBWDGP/3mG32KxNsXwNCqOP1RZ0LARFvgITKne9Tw/E9j53demBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfWdwuvOkFOnY7F9UtzYHE1JraDMB8GA1UdIwQY
MBaAFCtN36O78VvB24XYN5mgG5hprVznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUt
ZmU4YWVhNWQ0MGE3LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUtZmU4YWVhNWQ0MGE3
LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYB9jSazg
YWs4+iZqqEH3hTNezmfQpvhgK1FledRmJTZ0haSArL38KfyzdmI0tzWVayV2+3G/
W593EzTw9jZSlaNngLYTuwhmXToSof9goUMChDCX1MyDTH9xcj2u2emSl3FNOYdB
Bgydh8UY6GTzlXEPXqAZbmAypLT4o72YFRdr2fQMftbyAmHyvxT0A3S3mwz6NWzu
1v3qii3nQoId4u2zUIgtXP1ltuYVk1SnaljJ8DptjYF+tKCBhKRdK2DDgGPUCa01
tTe+61YnuEul6HkS4AcB9ex68F6Ep4TXl6BEfdPEkFqfYZYcBVYFY0bN1gjL6Zsz
S7JbH21PXmDd5Q==
-----END CERTIFICATE-----
Generated at Fri Mar 20 19:17:19 2026 by rpki-client