Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: ZI2sGv+4OBTj9o/G8VjD/uKkJIVZCwXSR06ckNtdQsg=
Subject key identifier: FD:65:5A:A1:8D:00:E9:D0:17:1A:D4:C8:8D:09:F8:48:27:01:4A:A1
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019FA9E310F2A6CC717F9CD91C6DE0F8E7EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 1A6F
Signing time: Tue 28 Jul 2026 18:00:58 +0000
Manifest this update: Tue 28 Jul 2026 18:00:58 +0000
Manifest next update: Wed 29 Jul 2026 18:00:58 +0000
Files and hashes: 1: BZbjJl33wtC5Kx6I29mOqiiRHZA.roa (hash: UwvFEfahmlGM3+zeVy05GqUYOrXQjKRZoc15GwQat18=)
2: E6q6eSrLi268w1uPKMft6UdzObk.roa (hash: S1oys4ak/3DgjByILcVQEYtOAEhLnSHTS9hR+3ZaKKA=)
3: FwbsSA-LLYDwJveOiIwWRQL8O4A.roa (hash: LZ4xTrrdN0a7so3riKKQBkOHl1SW+eGzBvkpE5DQJok=)
4: MLJTDLF6ov2d8CfzpAjbs1bI62A.roa (hash: +MihOq2rYGVN7ggNp0KRd6/6WeF44oBwxXDejz3+p68=)
5: Z9v03Glll_6U7rPnPHeeMtOaRwo.roa (hash: MIONyPy9xxM9PP/Mww4JUQcmmXncwxAen4eKUZkPg6g=)
6: cXLvsHvbg46dXys6tsFGlStaivg.roa (hash: xZAflEOGoHPXdRw1KqKL76cGPns+HOuukJvybKU+IFM=)
7: n3_jn42nCvYDz7l4Bv4rOJQLSYA.roa (hash: FSpOuQ2nrISxfoUe3fSxdbkQG7z+i/gLxzEWx9TRdDM=)
8: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: NaQfwWGBO4p3BwUOlfnQUpIWB9IOuZh4LGXxVhk+XKk=)
9: whZDnVbA7DTq6XCQtpnwVv571yY.roa (hash: jaXDYTJdd7AC0EYJLuwjwpmbHTLmmIjlV4gnm9WnvPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:10:f2:a6:cc:71:7f:9c:d9:1c:6d:e0:f8:e7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Jul 28 18:00:58 2026 GMT
Not After : Jul 29 18:00:58 2026 GMT
Subject: CN=fd655aa18d00e9d0171ad4c88d09f84827014aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:85:1e:1d:df:60:65:e8:ad:ea:9c:c7:e0:30:
92:a0:26:46:50:68:f5:54:3e:9d:46:f6:b9:77:a2:
d7:3f:fc:40:82:9f:43:1e:37:1f:88:ef:cd:e5:4b:
b9:50:98:4f:02:1b:3d:fd:38:7c:a5:e9:db:d9:f6:
f0:3f:d5:92:f3:87:83:f4:99:ee:98:e0:4e:75:47:
a1:c8:44:6b:a7:5c:04:ec:67:94:50:ec:a4:10:37:
c3:40:7f:fa:b0:03:03:0a:2b:bc:ce:3b:d1:fc:93:
62:64:d5:82:98:c2:be:91:8b:4a:2d:8b:b8:12:fe:
48:a3:ec:ce:4d:f9:a4:ad:e9:9b:bf:64:a3:58:31:
d5:f1:dc:48:a0:63:c2:8f:06:00:26:ab:0f:d9:6c:
e5:da:f5:10:64:ba:b1:f5:fc:86:33:ae:a6:5d:90:
64:2e:b2:8a:00:c1:4a:42:9b:f4:97:8d:43:f5:ed:
02:0b:ef:bb:c2:5b:fe:5d:dc:83:15:37:b8:7a:ab:
a7:d6:cf:c0:87:4e:89:1f:57:85:6e:30:67:2e:78:
01:7b:7f:dc:fc:0a:5e:98:36:e3:27:67:fd:c1:ae:
5d:0c:54:15:a5:04:eb:06:11:27:47:45:ce:90:01:
96:fd:a3:4d:40:6d:02:bb:d4:c0:37:39:0c:9d:22:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:65:5A:A1:8D:00:E9:D0:17:1A:D4:C8:8D:09:F8:48:27:01:4A:A1
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0c:ed:61:28:eb:40:c3:58:60:ad:1c:1e:d7:56:f1:25:bc:
0c:5e:41:cc:59:dc:8a:60:1a:c4:1c:62:a5:b0:da:d5:cd:4a:
7d:bb:0e:c0:e4:2b:b0:58:c5:e5:88:84:3a:cd:38:e0:7c:7e:
56:71:03:d9:39:51:7e:30:c6:2d:4c:4b:2c:94:b7:eb:b0:0e:
61:40:fa:79:a1:85:b9:1f:15:1b:63:ff:59:d4:47:0c:5b:76:
2d:00:d4:8d:b2:32:ce:ec:71:54:09:cd:fe:a9:76:ee:37:2f:
65:10:b5:4c:95:e3:d1:73:8c:ba:ce:85:af:51:f5:d5:27:32:
bd:af:b6:87:1c:d8:79:e5:66:2d:bd:68:89:7b:30:94:0a:76:
1e:85:77:02:66:e5:b9:5b:85:c7:35:44:46:c7:98:81:77:5d:
9b:f0:e9:dc:ab:95:31:8a:56:af:b5:51:59:4c:3a:01:f2:93:
50:ec:1f:e8:55:20:3b:72:70:32:c3:b7:b2:27:69:e8:b4:56:
ba:2f:77:a1:d0:84:e3:3a:3b:78:87:4d:7f:35:b6:94:75:86:
3e:42:b1:83:0f:67:a3:c5:a4:46:d0:97:03:08:56:54:d6:58:
e2:6a:62:11:1d:af:e4:7b:67:28:5c:2c:ff:48:a5:a8:3a:d2:
50:20:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:23:00 2026 by rpki-client