Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
File: rkZkQGbOrznTr7D9c1sBnOydo2Q.mft (raw, json)
Hash identifier: UYLry7UTxU2xPHF4Es+gr0EiqPEfF3JtwdxT6uh1qB0=
Subject key identifier: D2:45:34:23:0B:8F:8A:3A:47:1E:E5:10:74:9F:40:44:AF:D7:D6:AC
Authority key identifier: AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
Certificate issuer: /CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Certificate serial: 01A1ABCC661F91917037A8B23D67C9D58D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
Manifest number: 075D
Signing time: Thu 05 Nov 2026 13:01:01 +0000
Manifest this update: Thu 05 Nov 2026 13:01:01 +0000
Manifest next update: Fri 06 Nov 2026 13:01:01 +0000
Files and hashes: 1: YwZPhm_oPIIN_h73HSe7_TwtVu4.roa (hash: L8RiSrI3D8+7xc9Avh/47HaCMGihyyrZJ30e+0TUw7M=)
2: rkZkQGbOrznTr7D9c1sBnOydo2Q.crl (hash: FxeYNw9d6gyelJCdNLYOlBMHIKuorVlwZrn0s9h21Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:cc:66:1f:91:91:70:37:a8:b2:3d:67:c9:d5:8d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae46644066ceaf39d3afb0fd735b019cec9da364
Validity
Not Before: Nov 5 13:01:01 2026 GMT
Not After : Nov 6 13:01:01 2026 GMT
Subject: CN=d24534230b8f8a3a471ee510749f4044afd7d6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:47:09:9f:1c:14:66:86:61:ce:72:6f:e7:
28:97:11:4d:08:ea:6b:5b:0c:a1:a8:e3:e5:a9:ec:
02:71:74:3f:69:7d:94:ed:9e:b7:95:f8:7b:35:22:
ad:aa:4f:b0:eb:25:25:9e:1f:53:c2:04:65:f5:f7:
07:33:b6:d1:80:11:9b:dc:ea:ac:08:13:c3:6f:f0:
5c:08:8c:b8:dc:02:8f:f9:18:d3:d1:1f:64:6c:e8:
c7:60:28:c9:ed:bc:6d:01:13:a9:45:5d:09:07:99:
73:ca:d2:e1:bd:90:7f:a3:32:11:40:0f:ee:e3:f5:
04:b2:62:2a:8e:9a:a2:59:f1:ba:5e:0f:ac:31:fb:
ba:11:a9:26:09:10:aa:5a:45:ef:66:76:ff:bc:4b:
63:80:f4:5b:46:0f:87:51:c5:a1:b6:ae:b3:ac:4e:
a4:8d:4a:ad:3d:29:9d:eb:6e:30:43:da:4c:ec:89:
cc:a4:49:6c:24:b6:7d:85:bb:f1:82:cf:99:10:8d:
d8:c1:75:fd:42:3e:1d:3b:37:e3:3c:85:88:e0:ef:
75:d1:0e:84:90:53:09:cc:0c:bc:da:23:ff:46:61:
66:a6:68:b8:e9:da:35:c1:2a:49:57:cc:50:66:3d:
60:f1:4a:e1:39:8d:54:65:95:b3:7d:03:53:05:e3:
c5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:45:34:23:0B:8F:8A:3A:47:1E:E5:10:74:9F:40:44:AF:D7:D6:AC
X509v3 Authority Key Identifier:
keyid:AE:46:64:40:66:CE:AF:39:D3:AF:B0:FD:73:5B:01:9C:EC:9D:A3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkZkQGbOrznTr7D9c1sBnOydo2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bc178e-9dc0-4688-a2e3-8d9f11f916e9/1/rkZkQGbOrznTr7D9c1sBnOydo2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e4:0f:a2:04:d5:8e:54:b7:09:1c:c5:22:bf:65:b4:ae:ed:
0f:ae:b1:d4:33:6d:34:f1:ce:31:42:9e:7f:a0:6a:97:c7:93:
65:b0:d1:c2:a9:71:57:ef:7b:4f:50:58:71:37:37:6b:c2:d2:
f3:9e:54:0c:a0:1d:c2:3b:e2:2e:e8:49:e1:d0:81:db:09:30:
81:cd:9e:5c:e5:b4:fe:1b:8f:30:22:c1:ce:d9:48:64:47:48:
ca:fb:2a:4f:d4:6e:2d:9d:f7:26:1b:7e:d8:6f:b0:25:fa:b5:
77:f0:bd:59:12:ae:33:e7:12:06:04:7d:3a:78:05:e3:1f:25:
42:10:4e:47:10:d9:c6:b2:f3:a0:41:fc:0d:76:64:f1:f8:78:
c5:91:fb:a6:d0:87:68:58:96:9d:69:7e:8f:cf:6d:2b:45:86:
e6:76:0e:42:83:91:f1:16:b9:15:e7:48:81:19:5d:0b:bd:0d:
4c:40:cc:73:52:b7:44:7e:18:32:a0:26:bc:c6:53:f7:2a:44:
29:42:07:b0:86:d1:13:ff:2a:9f:98:83:fc:7a:73:55:31:7f:
8e:f7:23:b1:19:28:80:51:55:ec:fc:47:84:5b:ca:a6:71:13:
08:94:fa:78:d6:91:12:53:e0:6b:a2:90:76:a1:4b:53:9d:13:
66:83:09:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:38:08 2026 by rpki-client