Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
File: rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft (raw, json)
Hash identifier: qMBRpECdMcD7lf49vlzBxwV5y0ANIbwAhWzr52P1oNc=
Subject key identifier: 18:A2:87:02:D5:AE:F9:56:3A:66:A2:A7:05:40:9F:FB:4A:DE:47:D4
Authority key identifier: AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
Certificate issuer: /CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Certificate serial: 019DA4C1EBE3613DD197F246D561361821D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
Manifest number: 0F07
Signing time: Sun 19 Apr 2026 08:01:05 +0000
Manifest this update: Sun 19 Apr 2026 08:01:05 +0000
Manifest next update: Mon 20 Apr 2026 08:01:05 +0000
Files and hashes: 1: e-FqLsmWRfG7hL5RbexGQG93a0U.roa (hash: 1pwDbwKlXgh7FVQpfpD5GQV1e5qWwIn7TQRZ0S2m00o=)
2: rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl (hash: zoRipJ/1XPCvY5zg7mm1bm2W54DJqep1AweNhGgtMPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:eb:e3:61:3d:d1:97:f2:46:d5:61:36:18:21:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Validity
Not Before: Apr 19 08:01:05 2026 GMT
Not After : Apr 20 08:01:05 2026 GMT
Subject: CN=18a28702d5aef9563a66a2a705409ffb4ade47d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:15:57:67:45:fb:8a:f1:a4:45:8f:dd:28:
a1:be:af:19:36:89:22:56:60:9c:8e:d5:48:10:20:
09:78:66:7e:d0:a2:11:d0:08:34:b8:a5:c0:46:91:
b7:5e:99:71:b8:5c:15:7e:90:16:f3:b3:80:16:0e:
c5:10:d3:3d:64:bd:9b:79:4c:48:7a:39:9a:e9:ca:
9f:64:ec:1c:87:b4:6d:0d:c6:7f:5d:7a:1e:d3:94:
c0:77:75:32:2f:0e:c9:57:eb:60:9a:e6:95:ab:84:
36:fc:06:57:30:f7:63:b2:4c:c0:5e:39:aa:32:5c:
5f:dd:e0:df:fa:7a:41:f8:03:ae:ba:28:29:42:30:
bf:f3:01:a4:95:5b:36:b2:3a:4e:c3:f8:b0:40:3d:
dc:66:f9:11:64:cd:4c:41:81:2c:a1:2e:f3:fd:c0:
8b:99:3c:06:71:72:5b:50:9a:5c:e8:74:18:16:68:
8a:d3:9d:d9:42:23:5e:4b:13:e8:99:e4:b8:11:f2:
4a:ee:d5:84:86:7f:8f:55:a2:9d:d6:95:20:da:29:
13:88:72:53:b8:97:99:70:b6:9b:5b:e3:1d:a5:14:
e3:d7:b2:4e:46:6e:cd:4b:44:33:98:32:a6:5e:90:
cd:1b:c5:44:51:d2:ef:10:67:aa:fd:0f:9a:8f:99:
82:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A2:87:02:D5:AE:F9:56:3A:66:A2:A7:05:40:9F:FB:4A:DE:47:D4
X509v3 Authority Key Identifier:
keyid:AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5e:75:5d:83:03:e8:60:96:30:0a:e7:9b:c4:4f:76:bf:34:
7b:4e:41:93:01:70:a4:8d:84:2a:b3:3f:ee:70:d5:e7:9d:29:
ff:b2:e9:a0:18:41:89:f1:5c:22:20:e5:9b:b6:d3:13:77:df:
5d:12:d2:17:d9:43:0c:f1:91:95:a6:f7:6b:74:53:de:e7:3a:
8a:f7:6d:cf:6f:54:d8:b4:25:5f:32:5e:b1:b7:c4:d1:44:0a:
c9:ad:ba:63:4d:ff:50:b6:3f:37:c9:1a:f1:7c:2b:b8:44:ca:
61:2c:bd:d7:5a:09:7e:26:80:d3:4b:9d:3b:46:73:10:59:17:
40:23:41:09:b2:ca:cc:94:a1:c5:9c:da:d5:90:84:24:2b:1a:
5f:81:dc:ea:5e:38:97:c2:86:e5:81:0c:ea:fc:21:2e:6b:1d:
69:c4:fb:d2:dd:e9:6c:23:90:f7:6a:35:a0:6d:88:fd:7a:37:
ff:df:90:e1:9d:d6:f2:06:79:9c:29:17:ee:51:7b:96:0b:53:
2a:af:fa:e6:0e:e7:38:25:b9:29:12:9b:2f:e6:18:5d:f9:77:
36:07:85:24:a0:65:d4:b7:eb:b7:fd:79:fe:30:52:b6:ac:7e:
58:b0:70:b9:28:76:25:0f:bb:99:23:3b:23:5f:fe:cb:2d:50:
f2:83:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:56:12 2026 by rpki-client