Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
File: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft (raw, json)
Hash identifier: 9Yiat4hbAcLt+eWpcP3k2jKTTmFQd6/dkwpXDBrBWjg=
Subject key identifier: F8:40:99:44:73:3D:7E:B6:D2:8D:98:C1:33:6B:9B:C3:B5:75:8F:80
Authority key identifier: 2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
Certificate issuer: /CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Certificate serial: 019D39410330DFC23366FC3455D06530B6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
Manifest number: 0659
Signing time: Sun 29 Mar 2026 11:00:54 +0000
Manifest this update: Sun 29 Mar 2026 11:00:54 +0000
Manifest next update: Mon 30 Mar 2026 11:00:54 +0000
Files and hashes: 1: HNWOK-qSzLEKLOiT1RxncC81FBw.roa (hash: VsSGzqx4mMKPsvTq4Mnx3YPfOOngg/lj8h0zkR3wf/A=)
2: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl (hash: tS7TG9t614kSgy4JDjlQz1IOXjl2w5d4abnKLtbSXQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:03:30:df:c2:33:66:fc:34:55:d0:65:30:b6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Validity
Not Before: Mar 29 11:00:54 2026 GMT
Not After : Mar 30 11:00:54 2026 GMT
Subject: CN=f8409944733d7eb6d28d98c1336b9bc3b5758f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:82:95:1a:af:bd:a9:00:cc:01:15:e2:4c:a0:
3d:de:f6:0c:dd:15:ed:32:7b:02:d3:2b:6d:b7:06:
94:63:4e:ae:c6:4c:6f:54:ad:b2:fa:2d:bc:e3:30:
19:df:ea:73:25:a7:c6:d4:90:f7:6a:28:f9:43:7d:
f7:0a:48:5a:07:bb:45:10:3b:dd:0f:22:4d:81:4b:
79:c8:ce:18:07:f2:a4:c0:e7:e7:62:3f:e2:7d:37:
26:39:32:1a:73:83:71:be:24:69:3b:e1:de:30:b8:
66:f3:b0:ae:42:5c:d0:42:8c:b8:5b:10:67:5b:59:
24:c8:7b:8c:4d:80:22:8d:13:b9:c6:78:fa:8e:48:
aa:2d:bf:8b:3d:92:fc:85:05:f6:b4:a2:bc:a7:db:
cf:ba:8a:84:89:5f:bc:d3:f9:73:f9:4c:1b:74:68:
28:5c:3c:ad:35:f0:5a:a0:28:e7:b5:0a:9f:4d:dc:
4e:87:53:3f:05:86:d5:e0:ca:b6:01:08:83:43:1f:
3d:a4:cb:fa:25:cb:19:16:1f:9c:ab:1b:c7:29:2e:
f7:e8:d5:76:e9:f3:de:68:31:e8:eb:64:c1:d0:15:
54:8c:38:8f:97:73:0e:0d:ed:59:c3:c1:6e:b8:3b:
52:60:05:24:51:91:3c:12:d8:c4:e0:4b:9a:9e:7b:
5d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:40:99:44:73:3D:7E:B6:D2:8D:98:C1:33:6B:9B:C3:B5:75:8F:80
X509v3 Authority Key Identifier:
keyid:2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:af:c7:ed:71:f3:52:6c:63:95:fb:ed:58:e2:7f:65:8e:5e:
cc:42:49:85:68:fa:f4:50:c0:3a:b6:b4:d3:50:2b:a3:77:ee:
07:77:4a:75:14:81:12:72:16:5e:34:7e:e4:76:f9:e9:b4:65:
4a:1e:61:e5:fa:03:60:ed:98:1f:a3:e7:39:bb:c4:0c:26:2e:
fc:ca:05:9d:2f:f8:24:58:10:8a:8f:b7:c2:11:24:f5:84:85:
e8:3c:68:e4:ba:33:cd:bf:ef:4d:2f:68:4a:0a:32:77:86:fb:
5e:16:8b:2d:43:0c:e4:78:d1:1c:42:5b:40:a6:b1:bd:cc:f4:
ab:78:ea:ab:33:fe:8b:b1:79:3f:23:1d:47:f2:3b:9e:6e:79:
77:a2:92:8e:95:0e:58:bc:e7:7e:b9:91:90:6a:51:1a:b4:ba:
38:d1:d2:1c:36:0e:39:86:e9:0b:b8:db:0f:ea:89:c0:34:04:
78:ea:f6:ce:7a:e1:97:ad:eb:8a:b0:44:92:1f:9f:27:86:34:
c9:66:68:d0:47:b3:6c:e2:b5:a1:18:f6:18:bf:b7:12:3c:8d:
9c:ee:e9:3f:5a:b2:e7:3e:83:9d:3e:18:b1:77:8b:bf:42:30:
09:71:72:13:86:7f:01:71:5a:67:b5:71:01:3c:e7:74:d7:dc:
79:3c:72:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:50:59 2026 by rpki-client