Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
File: rKbwaDzHS63SOoFAw4XxyBziTfc.mft (raw, json)
Hash identifier: lY85QbjHXxAaN49LSOufLonloR2purVjsHnNJYveBzI=
Subject key identifier: 00:D9:15:B9:7F:DC:4A:86:61:22:36:6B:27:46:3B:F7:57:75:B1:39
Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Certificate serial: 01A13410A1333EBAED95F5B41F3E8B3C2496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
Manifest number: 1148
Signing time: Tue 13 Oct 2026 07:01:07 +0000
Manifest this update: Tue 13 Oct 2026 07:01:07 +0000
Manifest next update: Wed 14 Oct 2026 07:01:07 +0000
Files and hashes: 1: Hl-oGjMEXSHh22tv7GvQWauR6Ls.roa (hash: k0kjDMHyxNG6XHvsH8YWl0QTbYb+WeHWx5ruPE+qWhs=)
2: rKbwaDzHS63SOoFAw4XxyBziTfc.crl (hash: XrgEWWRSEYGplAxxKdIEWEcqjFkpyi51Bgb7G8atF1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:10:a1:33:3e:ba:ed:95:f5:b4:1f:3e:8b:3c:24:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Validity
Not Before: Oct 13 07:01:07 2026 GMT
Not After : Oct 14 07:01:07 2026 GMT
Subject: CN=00d915b97fdc4a866122366b27463bf75775b139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:7e:b0:03:0c:6b:17:cc:34:ac:44:6f:15:
ac:05:d3:bd:6a:8b:0c:5b:e5:d4:b9:fc:de:0a:bf:
9d:a7:a1:d5:48:a6:be:15:74:f5:7e:68:1e:5d:c1:
36:4c:f0:f1:6a:be:be:0a:d1:45:5b:b0:97:25:b0:
d0:99:05:ee:69:b8:e3:dd:c4:db:03:b6:9a:40:9d:
92:74:8e:72:01:a4:6a:52:d8:2e:30:23:22:e6:90:
08:cc:a6:a8:b4:aa:4a:70:8d:bf:27:3d:2f:d3:14:
73:49:e9:78:0a:71:1a:45:e5:40:38:b6:cc:99:26:
97:f8:f3:25:81:96:98:7b:ff:8b:31:c3:b2:7f:5c:
5e:d2:95:d7:54:13:8c:3c:7d:7c:8a:2e:43:0e:c6:
da:87:ea:71:79:51:4c:5c:92:d1:b2:ae:07:cb:6e:
4e:2b:54:cf:44:7b:96:12:52:ba:20:51:56:27:f9:
23:e1:f3:61:a5:a7:64:1c:20:01:93:a7:4b:6e:68:
1e:4c:f8:0a:ac:42:3a:31:09:01:9e:2d:2b:57:a4:
b5:f5:79:c9:7f:33:53:2f:b7:d1:e7:15:8b:36:9f:
07:66:3d:b4:81:07:8e:7c:2e:b9:9e:3e:c0:50:38:
2f:a8:43:39:02:67:22:b5:e2:9d:42:21:2e:37:1a:
1b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D9:15:B9:7F:DC:4A:86:61:22:36:6B:27:46:3B:F7:57:75:B1:39
X509v3 Authority Key Identifier:
keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fa:fe:23:c5:52:96:5d:18:96:4c:2c:5a:5e:34:64:c8:29:
d7:0a:85:8e:56:dc:9f:57:5a:cc:3e:94:ec:51:64:77:b0:aa:
19:a2:bb:1c:ee:59:39:21:99:65:e8:de:41:64:1c:36:6a:27:
4b:a0:17:de:42:00:6d:68:7e:38:1c:91:a2:e8:3b:5e:0c:c5:
49:69:4b:d3:70:2d:09:ef:bd:e5:43:b0:89:90:f3:37:c2:67:
00:85:1e:ac:34:c7:df:dc:45:60:ba:cb:28:e4:87:a2:42:e2:
10:09:a6:dc:45:45:80:36:b4:85:f8:48:eb:ba:5c:99:44:1f:
70:43:ab:31:4d:29:a1:d9:e4:a6:98:d1:a6:cf:60:a4:70:5b:
5f:99:da:3a:e9:48:95:24:2f:7d:a4:a5:90:1e:91:88:c2:17:
23:7d:c6:96:75:a9:a4:e2:64:71:9e:7d:61:ec:b3:51:59:b8:
f1:2e:45:f1:dd:02:1c:67:c4:8f:b8:26:9a:08:81:de:b4:b7:
60:5b:df:f0:b0:05:6b:7f:ce:71:b6:1c:9b:8e:bf:af:e6:ce:
dd:b9:ef:83:ee:21:4a:05:0d:4d:f5:82:50:c8:af:21:c9:3d:
9b:33:ff:5b:a5:d7:18:9a:3b:38:4b:87:1f:dc:d8:63:f1:eb:
ac:bc:6b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:25:08 2026 by rpki-client