Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
File: rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft (raw, json)
Hash identifier: fYKfI7gF6QY/Mzk/+O9cO+ydD6ttgVifmpB0OjLbMGo=
Subject key identifier: 5C:14:7C:2E:D8:E6:F0:DC:5E:26:CC:4E:CD:EC:AD:67:FE:F8:11:AD
Authority key identifier: AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
Certificate issuer: /CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Certificate serial: 019CABA1EF13CCC0609215366BB97C6DE56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
Manifest number: 0E86
Signing time: Sun 01 Mar 2026 23:00:42 +0000
Manifest this update: Sun 01 Mar 2026 23:00:42 +0000
Manifest next update: Mon 02 Mar 2026 23:00:42 +0000
Files and hashes: 1: e-FqLsmWRfG7hL5RbexGQG93a0U.roa (hash: 1pwDbwKlXgh7FVQpfpD5GQV1e5qWwIn7TQRZ0S2m00o=)
2: rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl (hash: K9dF8Oa9YqtYf7BgF6+SQ8+TiE+nn3zmBUHU6s7PgPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ef:13:cc:c0:60:92:15:36:6b:b9:7c:6d:e5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Validity
Not Before: Mar 1 23:00:42 2026 GMT
Not After : Mar 2 23:00:42 2026 GMT
Subject: CN=5c147c2ed8e6f0dc5e26cc4ecdecad67fef811ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b8:f9:84:76:f6:e1:10:f9:7d:7b:6d:0d:c6:
3b:f9:b1:b4:64:44:47:a8:0b:2c:00:47:55:16:31:
8b:6b:08:10:45:89:2a:d2:22:ac:29:7c:86:91:9d:
0d:fb:58:ed:f0:6c:2a:69:64:35:98:02:3b:c9:02:
e8:f6:28:4b:5d:81:ff:d4:2b:ac:8a:f2:a2:73:30:
5f:a4:af:01:05:96:c5:25:ee:2c:f7:16:2c:ee:51:
3f:5b:db:8a:9a:1c:29:cc:e7:db:c5:e5:b2:a6:cb:
45:ab:d0:9c:01:30:39:62:a3:ce:b5:8d:b0:6d:20:
e8:dd:50:7f:6d:46:7f:5d:7e:b8:7d:0f:38:ed:36:
64:0b:57:31:eb:ca:c1:cd:3a:20:c9:8a:76:78:7e:
24:27:5a:1c:a1:07:99:f6:0b:6f:2c:0b:74:2a:ac:
30:f5:4b:56:38:4f:1a:36:65:04:7d:f3:58:86:79:
93:b5:da:93:80:24:30:7b:92:3f:d9:32:88:db:8d:
2a:ac:d4:8a:d4:96:11:66:58:99:73:37:a6:d0:55:
bd:42:94:2e:55:20:3b:f2:87:90:18:6f:20:f4:35:
9d:bb:ab:1c:de:d3:3d:4c:87:d7:ab:e6:27:56:f0:
de:d2:26:47:da:b0:0a:02:8c:b3:ca:77:2f:da:43:
1c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:14:7C:2E:D8:E6:F0:DC:5E:26:CC:4E:CD:EC:AD:67:FE:F8:11:AD
X509v3 Authority Key Identifier:
keyid:AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e5:0f:7d:17:7d:22:53:e5:4d:7d:98:96:04:ad:78:03:ff:
da:30:86:f3:4a:6b:0c:d5:8e:ec:51:1b:7a:3e:23:90:8d:53:
36:1c:28:ce:88:25:81:7f:cf:b4:e6:8c:f4:3c:5a:da:6b:75:
d4:3a:f1:22:03:4f:94:14:10:c4:a1:a1:3a:22:d9:b0:d7:c2:
df:e6:0d:b6:69:4b:b0:a4:54:8f:ef:6a:fa:24:42:63:06:a3:
79:7f:3c:ad:d4:08:83:b1:e7:03:f0:1e:a9:23:89:a9:a5:ab:
39:cb:21:55:85:e5:12:c8:a0:f0:48:36:ab:b4:be:68:0c:5f:
11:74:f2:9d:a8:07:e9:14:9f:65:10:6e:2c:eb:0e:0d:1a:90:
a8:d7:2e:b3:52:e1:1c:8b:c1:bf:5f:b7:55:51:19:d5:a3:70:
78:d6:86:23:48:ce:34:62:c0:e9:27:3d:21:0c:71:32:e6:a4:
ac:5b:7f:5a:02:5e:34:a1:5d:5b:26:75:c6:23:49:05:20:59:
70:fa:7a:7f:2c:c5:c2:74:ad:89:e3:d9:95:d4:c6:f1:1f:8e:
81:b7:a0:07:df:3f:d1:2c:a4:bb:46:74:3f:d5:c9:fd:c0:80:
67:eb:b0:cd:8f:dd:1a:9a:b4:f7:7e:43:96:cd:9d:92:f2:54:
4c:1e:1e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:24:08 2026 by rpki-client