Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
File: K03fo7vxW8Hbhdg3maAbmGmtXOc.mft (raw, json)
Hash identifier: wHh3v7ZEUxFR/RttlJselKvJ/EcyjvT25PVUfbQufi4=
Subject key identifier: 8E:81:7C:9C:1E:22:B3:76:93:05:D8:A3:20:B7:D7:54:07:C3:1D:22
Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Certificate serial: 019D0A42D70BEEC677D69AC6C84E225F6348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
Manifest number: 076D
Signing time: Fri 20 Mar 2026 08:00:45 +0000
Manifest this update: Fri 20 Mar 2026 08:00:45 +0000
Manifest next update: Sat 21 Mar 2026 08:00:45 +0000
Files and hashes: 1: CfZQ5f2U-PTexk4plOrVmUR8SVo.roa (hash: S+1++wq6+OUaKhTshD4b393Lz17gGEyD5GzsQU3qNMc=)
2: K03fo7vxW8Hbhdg3maAbmGmtXOc.crl (hash: kqxOAUW3/f4wtouykn//jXZ+zoprQlC3ud7Gj2i93A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:42:d7:0b:ee:c6:77:d6:9a:c6:c8:4e:22:5f:63:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7
Validity
Not Before: Mar 20 08:00:45 2026 GMT
Not After : Mar 21 08:00:45 2026 GMT
Subject: CN=8e817c9c1e22b3769305d8a320b7d75407c31d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:65:a0:aa:e2:aa:70:15:ab:1c:16:db:17:
94:47:02:9b:cf:e9:df:2e:20:59:70:6e:a6:5d:4e:
5c:89:b7:23:7f:63:21:1f:36:01:4a:cc:ab:ac:aa:
2b:c3:19:9c:fb:11:f8:8f:e0:8a:cc:f3:01:b6:3a:
bf:fd:9d:f3:2a:72:d6:b5:5f:3a:2a:1c:36:5e:ad:
91:c7:da:f9:47:03:8c:2d:2e:88:a7:b3:27:df:d4:
1b:a9:be:c9:d3:99:bc:62:37:de:29:92:b8:d5:ea:
9a:37:36:8a:ca:51:ec:77:84:41:ee:8e:0c:10:34:
68:43:18:70:d9:40:3e:19:98:8b:a2:62:1f:cd:9a:
3c:91:67:75:7e:20:24:2c:94:7f:7e:f9:d0:68:31:
df:e1:ec:ee:f5:69:7d:37:67:b1:10:0e:aa:e0:7e:
6a:23:62:17:d8:c7:fd:a9:6c:77:69:42:20:d2:d9:
7e:4a:0b:83:45:6b:db:d2:05:ff:8f:a8:c8:8e:ac:
f7:21:d8:46:af:ce:8a:ca:1a:f4:0a:81:1b:7f:da:
0a:76:64:e1:44:da:62:af:80:a6:a1:f3:4a:8c:35:
cd:80:0e:a0:09:49:51:56:1f:80:27:08:1e:c6:f8:
b6:ed:34:21:00:46:b1:07:7c:ff:18:6c:46:95:29:
07:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:81:7C:9C:1E:22:B3:76:93:05:D8:A3:20:B7:D7:54:07:C3:1D:22
X509v3 Authority Key Identifier:
keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7c:1b:2b:40:93:77:88:ff:b4:7b:4d:ea:49:e9:44:8c:38:
94:fd:3e:9d:9e:74:d4:18:19:8d:e3:00:57:f1:99:16:f7:2f:
e3:af:97:b2:22:58:39:a4:48:6b:62:f8:04:43:24:ff:88:54:
62:ef:c3:dd:06:37:6f:92:1b:52:7d:5e:d4:f1:52:ed:02:f1:
af:79:f6:15:6c:41:7a:7c:60:02:8a:7a:06:dc:4b:d4:c7:6a:
ae:75:6b:e0:09:e5:ae:fb:12:05:7f:9c:83:ef:d4:09:11:4e:
1e:b3:d1:34:00:7a:73:5a:80:91:4b:0b:f4:05:24:97:b5:04:
b9:31:0d:11:de:1e:07:2a:86:1c:d2:bf:c6:55:25:9c:c8:7c:
3e:bf:08:c0:e8:d2:6e:a1:c1:cf:12:e3:29:47:ac:58:25:40:
53:cd:2f:b3:c3:f5:fe:fc:87:3b:ec:03:33:5c:4f:42:a6:8a:
10:3b:6e:96:39:c4:b3:66:5b:c9:c8:b0:94:08:67:bf:c4:47:
15:e8:bf:eb:8c:c6:0a:d4:ab:7f:ee:bf:8f:31:00:eb:ee:7c:
e1:05:ff:1a:e8:d2:0e:cc:60:a3:88:0b:79:bd:94:e8:e6:e1:
bc:25:31:ce:07:ee:1d:6c:98:e5:a8:90:f8:88:01:30:12:58:
cc:1e:7e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 18:00:32 2026 by rpki-client