Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
File: rKbwaDzHS63SOoFAw4XxyBziTfc.mft (raw, json)
Hash identifier: fsFyiFRcylyVpuCJIz3eFedLWVjvK7JkimUd/VMAlNs=
Subject key identifier: 18:44:22:77:F5:04:A3:B5:F2:C0:EB:9B:CC:26:DB:A6:63:93:CC:AF
Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Certificate serial: 019FADF72C33D37F298520311B04B8A9AEE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
Manifest number: 107E
Signing time: Wed 29 Jul 2026 13:01:24 +0000
Manifest this update: Wed 29 Jul 2026 13:01:24 +0000
Manifest next update: Thu 30 Jul 2026 13:01:24 +0000
Files and hashes: 1: Hl-oGjMEXSHh22tv7GvQWauR6Ls.roa (hash: k0kjDMHyxNG6XHvsH8YWl0QTbYb+WeHWx5ruPE+qWhs=)
2: rKbwaDzHS63SOoFAw4XxyBziTfc.crl (hash: a4du3rC718G2GylHA5beDvdZ932zrBmuyhVdrpea0ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:f7:2c:33:d3:7f:29:85:20:31:1b:04:b8:a9:ae:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Validity
Not Before: Jul 29 13:01:24 2026 GMT
Not After : Jul 30 13:01:24 2026 GMT
Subject: CN=18442277f504a3b5f2c0eb9bcc26dba66393ccaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:77:1c:83:1c:db:68:d8:94:23:e8:cc:f5:
6b:4b:4c:f9:33:26:f5:f1:bc:e3:66:f7:5f:f3:0f:
41:ad:a5:33:f8:c4:6b:28:7b:8d:93:12:8c:e2:3c:
cb:11:a7:71:8f:f8:45:93:1f:88:3d:b9:e9:c0:e3:
a1:0c:f9:9b:32:91:be:73:06:1f:f5:14:2a:0f:1c:
4d:0f:80:c8:a2:24:f6:38:67:56:c6:2a:9c:67:ff:
c9:d2:e1:52:4d:0f:4b:d7:dd:2e:7d:fb:9c:60:6a:
94:42:69:9a:33:51:f1:49:6c:16:8f:19:7e:63:32:
66:21:c6:e4:7c:00:30:5f:5b:bf:fd:14:46:a7:2b:
68:2f:34:ad:67:9a:a9:cc:7e:19:d9:63:f7:a4:2b:
0d:e4:f0:ad:96:fb:47:c5:3f:7d:7a:d3:c5:a5:d2:
02:0a:f8:9e:06:6a:d4:14:92:bb:48:ce:54:91:11:
58:74:81:61:eb:9e:ee:12:30:6b:4c:b7:17:12:de:
fb:a7:3f:c4:de:c3:13:7e:92:9a:ca:bc:bd:d5:a4:
4e:20:67:df:a6:01:d8:d1:8a:fa:70:d4:26:c3:c6:
bb:c3:b5:f6:00:9a:40:b3:3b:29:2a:cf:8f:b5:18:
40:43:44:0d:7b:a2:08:c1:be:38:c8:61:31:1e:6d:
af:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:44:22:77:F5:04:A3:B5:F2:C0:EB:9B:CC:26:DB:A6:63:93:CC:AF
X509v3 Authority Key Identifier:
keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:04:14:36:f5:ff:e4:77:58:ac:ac:8c:19:d4:17:2d:6f:9f:
7f:a3:7c:a9:5b:43:71:39:ac:8e:06:d7:dd:65:cc:44:f4:20:
b6:0a:1d:45:6f:2f:0e:cc:66:1e:b0:04:21:e1:c5:d8:61:72:
fc:94:a4:25:c9:02:08:17:b2:bb:af:bd:d8:17:47:f5:63:72:
df:4a:e8:89:ff:5c:3b:42:24:8f:79:43:0f:bc:63:b1:80:a4:
d2:ae:8d:c3:99:60:2b:8f:e6:7c:91:ad:ba:8d:07:d2:64:6e:
c6:eb:36:df:81:bc:ce:da:5e:cf:63:78:38:a2:84:4d:c4:52:
aa:22:6f:aa:9f:e7:48:82:da:d7:09:dc:cf:0a:39:40:7c:33:
2e:09:50:24:50:d4:29:7d:7d:ae:ae:27:de:72:ce:05:d7:61:
ed:08:27:8e:a4:a5:f6:05:8f:a3:48:52:ed:0c:61:42:6c:97:
bb:84:a5:ef:6a:22:7e:e8:61:d4:ab:e3:5b:0a:78:32:fc:94:
c7:7a:a2:e6:e0:f8:ce:53:55:95:49:ec:17:b5:3c:ea:94:d8:
8c:36:d4:dc:7a:81:71:05:73:41:fd:bd:fe:32:a7:cd:1c:8b:
5e:8d:1c:a6:09:2e:6b:8e:ff:d2:e1:4c:14:c7:53:e5:ba:bb:
1b:22:37:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:04:34 2026 by rpki-client