Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
File: RKqBMTnAax3PG_6DMrm4Aas-swI.mft (raw, json)
Hash identifier: IGnHCT9yx+dGsXAQ622spjVe9q2GQk6let7xxHxQvtA=
Subject key identifier: 67:E9:86:87:43:EF:0E:CD:38:23:BF:02:DD:56:7E:F6:FF:0C:F7:56
Authority key identifier: 44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
Certificate issuer: /CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
Certificate serial: 019CAAC651E6675C378EB484702A7DF1A32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
Manifest number: 085E
Signing time: Sun 01 Mar 2026 19:00:49 +0000
Manifest this update: Sun 01 Mar 2026 19:00:49 +0000
Manifest next update: Mon 02 Mar 2026 19:00:49 +0000
Files and hashes: 1: RKqBMTnAax3PG_6DMrm4Aas-swI.crl (hash: O4TntORqDXQXAhUnrDIKUBI0d/FcQS7GOT3Vse2Yi+E=)
2: ynuNLafz9LbBB3yzoCWMv9fdVAw.roa (hash: ggLRVHISQxu3PXeYplz4bZPnG+60dpFC8ZQ4LkB5T9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:51:e6:67:5c:37:8e:b4:84:70:2a:7d:f1:a3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
Validity
Not Before: Mar 1 19:00:49 2026 GMT
Not After : Mar 2 19:00:49 2026 GMT
Subject: CN=67e9868743ef0ecd3823bf02dd567ef6ff0cf756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:97:92:bc:03:04:94:db:0d:cf:5d:cd:33:
85:05:7e:74:d7:cc:f1:c5:e1:34:bc:6e:84:c9:47:
50:06:4e:af:ee:e6:f0:bb:59:3b:9c:dc:1e:41:48:
bd:cd:36:fd:86:9c:4d:07:40:6c:8a:65:16:f1:4d:
b2:01:30:50:1e:be:bc:08:08:0a:90:51:47:e7:46:
2d:da:82:0c:43:2c:8d:ce:f4:fd:80:aa:17:2f:d2:
28:d7:d1:47:f5:3b:4b:65:5c:89:e6:67:47:3a:eb:
61:f2:49:0e:ab:2e:05:e7:d8:08:28:e8:ac:e5:e1:
4c:13:04:8f:26:41:44:91:c7:0b:cc:d6:2c:b1:e3:
a9:89:21:a6:4d:35:59:19:b0:93:0c:29:de:41:93:
d8:45:91:ea:5c:9c:24:35:a9:7b:3f:9c:fb:b0:c4:
20:43:6a:d6:bd:ce:01:c3:48:aa:da:d1:e3:d4:62:
f2:81:51:fd:83:70:19:4c:89:ad:9b:1b:77:92:fe:
2a:08:fb:a9:da:ae:ae:76:83:79:02:6b:f1:2d:07:
30:6f:85:4d:2d:63:49:9a:76:77:72:e9:48:7f:24:
83:d9:00:96:9a:b8:98:f4:2d:94:ad:71:46:6d:a8:
13:6f:5c:cc:b9:83:a9:93:fd:4f:2d:d0:8b:7e:52:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E9:86:87:43:EF:0E:CD:38:23:BF:02:DD:56:7E:F6:FF:0C:F7:56
X509v3 Authority Key Identifier:
keyid:44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b7:21:d0:b9:bd:11:17:28:66:84:9f:66:87:70:9f:fc:d9:
cc:bd:c4:46:e2:62:5d:31:7e:cd:35:15:9f:1d:8f:4e:4a:e7:
81:9f:9e:32:25:6a:c0:09:9a:e6:42:15:28:0d:51:97:b7:a1:
60:31:18:c8:a6:af:fa:67:5e:b2:59:de:ff:fe:fd:a2:b9:0b:
a2:34:19:d6:69:c4:55:a6:ac:46:0b:42:b4:16:36:37:bd:87:
60:0f:b0:78:1b:5a:6e:3d:1c:67:08:58:8a:f0:0f:3a:60:ee:
17:a9:07:8f:3d:45:65:42:0c:2f:61:a1:f2:df:c6:d3:67:23:
6b:eb:46:3b:73:72:6d:3e:6b:f9:20:e3:5f:83:c9:12:95:7e:
c5:ad:d8:ae:1e:65:9c:0f:71:5f:4e:99:82:7f:22:f2:67:dc:
11:bc:94:52:43:46:bb:4e:41:dc:53:7a:4f:d4:bc:e8:c8:0f:
76:bd:67:af:a5:46:da:86:7c:e4:57:33:af:7e:ed:40:25:13:
98:9e:b8:08:ad:84:38:3b:5f:60:f3:0d:e2:76:bc:ee:b8:d9:
e8:87:18:4b:c9:19:38:23:fe:ec:b1:7f:f0:3c:b3:68:6b:ad:
96:2d:6b:61:76:a1:eb:24:70:62:09:7e:25:78:6e:bc:49:86:
d1:96:b3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:21 2026 by rpki-client