Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: gtV3MIKXFEU2l7qclRbg7QkZsjDXd4LTr9wymuXY/1U=
Subject key identifier: 82:EA:83:8E:60:E7:5B:6F:40:21:84:A7:3A:42:94:0B:D5:E6:4D:04
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 019FA7BD82D1875CD12AAE285BD23D9D62AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 1109
Signing time: Tue 28 Jul 2026 08:00:42 +0000
Manifest this update: Tue 28 Jul 2026 08:00:42 +0000
Manifest next update: Wed 29 Jul 2026 08:00:42 +0000
Files and hashes: 1: FPyM8uE4L6Nml7nHO2klAcUhOyU.roa (hash: dlXbUtTSWpw7O4SezJZ5EEDYXStl7ouFc1E3qpPS7+w=)
2: H1UVQZ89iZ3QoOMJQlSL-pRIpHc.asa (hash: viSqpgv5yYa0kBcTuuw6i+3Lf2WB/KOVlUJ9JqjFvHo=)
3: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: 4snG7fRpODEYeXTUVjbk7dRCvnxRONtWaNqqoLenKhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:82:d1:87:5c:d1:2a:ae:28:5b:d2:3d:9d:62:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Jul 28 08:00:42 2026 GMT
Not After : Jul 29 08:00:42 2026 GMT
Subject: CN=82ea838e60e75b6f402184a73a42940bd5e64d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:68:67:cc:39:72:9a:80:50:96:db:ae:e0:
2e:2a:43:32:c2:4f:b7:e7:4e:57:bc:2b:74:d1:f0:
46:52:a8:58:ab:5c:78:f6:e5:21:e1:b0:13:06:5b:
84:f6:3e:7d:3b:b9:20:66:01:7f:0f:40:b2:a5:20:
f6:c0:b6:c9:e3:e5:b5:9d:60:21:c6:0b:c8:50:d9:
6c:c7:69:2a:31:aa:6f:9f:37:4f:f6:dd:b8:17:dc:
92:bb:87:d0:78:d7:13:4e:cd:ad:76:4d:7d:77:f0:
1d:ef:30:35:53:6f:36:83:a0:5d:38:c9:36:38:54:
e2:c2:9c:f7:98:94:44:2c:e6:c5:fd:ef:00:66:5a:
3d:3e:84:0d:a4:52:bd:54:b0:1e:73:3d:c7:60:2a:
ac:fe:d9:0f:83:c1:59:ce:00:32:3a:a4:b0:88:aa:
f1:e5:c8:26:d0:5b:89:15:82:18:b4:b6:55:e6:76:
d5:89:ec:fd:6b:12:e1:d5:7b:74:f5:7d:a2:59:5a:
18:db:1a:37:60:a8:25:ef:ea:ff:8c:e4:62:dd:67:
da:99:71:7d:85:d6:f3:ca:d0:e8:86:13:2b:cc:a5:
54:6a:30:e9:da:6a:26:ce:d1:55:17:7d:ad:a1:6d:
af:ee:fe:76:6f:aa:c7:df:f6:e7:d5:a9:a0:4d:92:
2d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EA:83:8E:60:E7:5B:6F:40:21:84:A7:3A:42:94:0B:D5:E6:4D:04
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1d:7f:ff:15:13:7e:19:d9:ee:b8:d4:10:f2:28:95:5b:5f:
ce:87:97:03:50:7d:6c:70:90:6b:70:61:88:58:e2:7e:4c:b3:
aa:bf:65:68:a8:db:79:66:5c:0f:9e:d7:21:9b:ca:25:9e:60:
4c:e1:65:d3:a9:4d:0c:e6:e1:e2:ce:fb:d7:39:6e:da:7c:1a:
37:58:fe:23:d6:e8:e0:48:80:84:9b:29:ba:41:6c:7d:2d:c0:
6f:3e:54:84:a4:5f:55:dd:28:e8:5e:64:0a:c8:21:b0:03:34:
17:7e:bc:e1:27:89:de:41:7a:e5:18:0b:3a:bc:37:c4:f2:4f:
49:f0:a3:e8:76:67:8b:70:c8:7e:50:78:e8:7e:6a:37:fb:29:
96:d5:90:b9:48:dd:84:d4:80:82:4d:03:bc:b3:c9:0c:59:7c:
a7:73:0f:e7:70:fe:ae:be:0d:6e:05:9c:37:e4:0f:d8:06:10:
04:a0:ec:1e:a7:4d:b3:81:28:fa:7f:11:f3:aa:cd:1e:3f:b5:
9d:e9:56:f4:c2:2e:e1:1b:c9:aa:ec:52:8a:f6:0c:9e:3d:5a:
36:41:24:bc:54:69:34:d9:97:66:35:5b:a8:a7:2e:fd:51:c7:
a2:27:4f:2a:88:40:42:c8:13:e9:89:0d:ec:e7:02:2c:fe:30:
d9:46:8e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:15 2026 by rpki-client