Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: imps9MLFGx7OVd2FAGq8ZiZgKVgQ5QcCmOMGUxrOEfQ=
Subject key identifier: 01:96:7A:E3:C0:CC:F5:4E:D9:34:A9:63:98:E4:28:8F:57:D8:95:9C
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 019CAB34656F8A469B51AB4FBF5D5E8E956F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 18AC
Signing time: Sun 01 Mar 2026 21:01:03 +0000
Manifest this update: Sun 01 Mar 2026 21:01:03 +0000
Manifest next update: Mon 02 Mar 2026 21:01:03 +0000
Files and hashes: 1: FwbsSA-LLYDwJveOiIwWRQL8O4A.roa (hash: LZ4xTrrdN0a7so3riKKQBkOHl1SW+eGzBvkpE5DQJok=)
2: K0LCintwvktT2xr3WU0PC5bkRX8.roa (hash: N3UQClUm1/+BJT1T8LUFkxs0KYW64GDD7sJYC/KMkyc=)
3: MMRGLoAC4Sfnmbb2pyyxVC21vMI.roa (hash: xHNn6q9PYRqeQK2NR9l8QrkTBmZNq1GFHSPhCABTUdQ=)
4: MkX0Qs5QdljMhK1aflh5MTKXzO4.roa (hash: KSTQpt87uhzYNiHFxrY5cqxrzanTSAkQM+v7akSgplw=)
5: SPPQs6sj1ChGjioRgdt4m0EK_DI.roa (hash: dA7acJP1FFj2uYgRIKSdY63Jcht0mQAVqYE4S/QoGHQ=)
6: XLDNxA63G2vAo5DcVFJP_8qH_lU.roa (hash: PlNCj7O474dXPu6RR7pikSE0sWydtv8HttNpi49XYc0=)
7: Z9v03Glll_6U7rPnPHeeMtOaRwo.roa (hash: MIONyPy9xxM9PP/Mww4JUQcmmXncwxAen4eKUZkPg6g=)
8: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: 2AwYWj10O/2RZjOkm+9R3FK6g8ze12gJHV0N86Dm8tE=)
9: wgk7tbWmPW1ceRhgjBnAVe2XcSo.roa (hash: ArVzv6tRuWJhm3qMA99cKCCM7Y2OnnqGto+xwi0HB+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:65:6f:8a:46:9b:51:ab:4f:bf:5d:5e:8e:95:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Mar 1 21:01:03 2026 GMT
Not After : Mar 2 21:01:03 2026 GMT
Subject: CN=01967ae3c0ccf54ed934a96398e4288f57d8959c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ad:f1:03:9e:d0:35:be:60:bf:c4:af:bc:6a:
cf:4a:34:ef:b3:2b:be:ff:6f:49:45:f7:54:a3:03:
05:29:b3:73:be:c8:8c:59:64:06:cb:a8:76:94:d4:
5b:14:9b:61:20:13:b9:db:c2:76:20:a5:7b:47:6c:
7f:37:fe:60:7e:9a:70:83:84:31:21:63:51:64:c6:
c3:f7:71:4d:17:b3:0d:c6:35:78:68:af:9c:f6:70:
83:ce:46:b1:d8:c2:de:45:86:fd:cc:94:ca:d2:0d:
8e:11:2b:f1:f4:3f:2e:ef:e2:b2:d0:ec:ed:dc:65:
d9:47:5a:1e:48:61:3a:e6:22:45:5d:f4:c3:01:ec:
d2:09:a4:1d:08:af:39:1a:16:4f:32:f4:ec:d0:cb:
b3:76:8d:e3:da:eb:1f:da:b9:ef:5a:ef:e6:12:8f:
8c:5b:53:68:b4:d5:95:fa:ff:67:ad:2d:58:d7:2e:
50:19:43:ff:ae:73:0e:6d:82:59:29:b3:40:32:87:
09:ed:a0:c9:01:67:0e:70:d2:d4:c4:ce:21:6c:78:
fa:34:1e:7d:bf:d7:f8:1e:57:d0:08:e8:b3:77:ab:
f5:41:fb:35:c9:11:48:f8:97:8a:b9:46:ff:4d:c2:
7f:9e:2c:97:15:3a:d5:4f:a2:b6:3a:c0:10:f8:f2:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:96:7A:E3:C0:CC:F5:4E:D9:34:A9:63:98:E4:28:8F:57:D8:95:9C
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:eb:7f:34:b0:6f:6a:d4:a6:b1:87:fb:b2:f2:1b:d0:46:01:
6e:be:e7:63:54:9e:56:a3:9a:55:ba:c3:ca:e7:72:13:5e:63:
24:0b:85:70:28:72:e4:5d:59:ae:7e:c2:2b:6a:1e:c5:29:00:
26:45:89:15:62:55:9e:f6:4b:70:04:16:8e:62:65:3c:30:70:
eb:70:3e:f1:e5:5d:61:35:18:f8:fc:98:2b:ba:55:5c:70:17:
11:5e:fe:00:f8:60:08:0f:0b:39:d5:7d:43:0a:30:88:c6:06:
5a:65:03:6b:b9:ec:8c:09:f1:92:ca:90:27:f3:7e:c0:33:93:
28:00:08:76:88:d1:5c:65:b7:da:08:d5:cb:41:9c:06:66:56:
bc:75:09:c8:e5:73:23:b4:37:e0:f2:f7:00:44:75:33:42:20:
08:fe:30:28:7b:6b:e6:a3:80:19:aa:ef:5c:4f:c2:9e:2c:f2:
e2:5c:ac:ae:40:35:13:10:e8:50:87:30:7a:ee:64:da:fd:9b:
b2:2c:f6:2b:02:e0:38:7f:ea:92:2e:7c:ef:52:f5:df:82:0a:
e5:44:11:27:fa:f4:6c:d5:75:70:9d:83:a8:20:e8:88:38:29:
76:f6:1d:b8:b0:91:ff:ec:92:ec:bc:6b:e1:7c:6a:41:73:70:
33:de:d0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:39 2026 by rpki-client