Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json)
Hash identifier: Ne4+GTIQVS3vWz/01MbCh9YGRVDu+OiBNvsb81+p8gg=
Subject key identifier: BA:FF:28:21:A6:39:7F:8D:64:37:30:B8:AA:15:B8:61:DF:F2:9F:06
Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Certificate serial: 01A0C031115A71F2822C1DC7A60CA3A5D472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
Manifest number: 06E3
Signing time: Sun 20 Sep 2026 19:00:36 +0000
Manifest this update: Sun 20 Sep 2026 19:00:36 +0000
Manifest next update: Mon 21 Sep 2026 19:00:36 +0000
Files and hashes: 1: YwZPhm_oPIIN_h73HSe7_TwtVu4.roa (hash: L8RiSrI3D8+7xc9Avh/47HaCMGihyyrZJ30e+0TUw7M=)
2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: nC5vW+KT1tsWn7CORbJKtjklnp342jl/fceoSZYmk2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:31:11:5a:71:f2:82:2c:1d:c7:a6:0c:a3:a5:d4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Validity
Not Before: Sep 20 19:00:36 2026 GMT
Not After : Sep 21 19:00:36 2026 GMT
Subject: CN=baff2821a6397f8d643730b8aa15b861dff29f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:73:bb:7f:f7:d3:35:8e:c7:66:5d:bf:a9:
54:32:a1:50:8b:5c:22:2e:54:18:09:f2:4f:13:28:
fd:ab:10:82:ca:c1:85:9e:77:27:02:d9:25:2b:9d:
41:21:9f:2d:41:24:2d:3d:d6:47:58:df:c0:57:9e:
f7:b1:bf:e1:e6:9c:69:c3:6a:fc:d9:9a:bf:70:8e:
db:cd:1d:6a:7c:7a:53:35:be:d2:08:0b:8e:67:74:
1b:aa:e7:fa:6c:f6:95:dc:30:9c:62:d2:01:6c:e3:
bf:25:9f:b7:4d:98:c4:31:2b:5c:36:0f:67:38:43:
fa:77:fe:3d:06:c2:dd:d9:28:94:43:4e:7a:55:a5:
c9:63:8e:ac:93:37:5c:1b:a0:d6:ec:e3:b8:ad:a5:
66:15:e0:15:69:96:15:d7:d9:f1:be:ff:f4:07:48:
69:aa:a9:27:ce:d1:6e:5f:d0:32:db:32:8e:d5:23:
fe:cd:e1:94:f8:2e:26:e9:bc:8f:00:68:d0:a7:b5:
01:69:db:3d:11:f2:e5:c4:4d:3e:09:f7:4a:34:8a:
17:a1:cd:0e:c1:69:fb:be:f8:a6:0a:8f:be:88:85:
57:8e:f3:84:ee:b5:e0:ce:b5:de:64:3a:2a:03:11:
4c:78:f7:81:f7:d7:b7:8b:ac:5b:8c:96:70:36:b8:
90:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FF:28:21:A6:39:7F:8D:64:37:30:B8:AA:15:B8:61:DF:F2:9F:06
X509v3 Authority Key Identifier:
keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:46:26:9c:17:89:8b:77:c5:b7:87:30:9a:fb:43:3b:9a:c3:
6a:f3:e1:ee:5d:49:25:80:a5:48:d9:71:4b:ce:fd:52:61:b2:
10:95:1c:2e:eb:01:c1:34:88:ba:ad:4d:68:25:a4:a1:60:43:
69:9b:05:08:c8:d1:a0:b3:66:e6:47:81:5d:24:f5:cc:d1:70:
ce:f9:5e:93:f9:f5:a9:cc:ee:c1:c1:ee:91:06:03:8b:94:a6:
34:21:38:af:58:12:e0:22:fb:44:60:81:f6:5f:3a:ee:3f:52:
9a:3c:da:80:74:4b:f1:f5:35:a5:bf:04:78:c4:3d:c5:ca:43:
6f:52:aa:6a:9d:8b:9e:45:c0:da:e6:2a:ff:37:96:51:d4:52:
bf:4e:c3:a1:03:76:1d:25:07:bd:b3:45:a9:1f:3a:21:61:08:
1b:77:36:f0:31:b7:e2:b8:43:66:2e:fc:e8:f0:f5:93:53:ff:
d9:b7:3e:c1:79:4f:55:53:d5:9c:4c:e6:dc:2c:b0:a4:d8:3b:
59:be:ed:88:5e:e3:e0:1d:c7:00:02:3a:69:8b:9d:a3:3a:b9:
bb:ee:1f:62:92:e3:31:d6:55:ff:28:03:44:30:ba:10:03:71:
01:a5:17:64:d0:42:62:5a:a2:65:a9:ac:ea:c7:c2:3f:45:e6:
8a:86:3d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:42:51 2026 by rpki-client