Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: ugxRjpQotPVnLy1gEfvZT/euBppV9AtKeQZzNSSF0fQ=
Subject key identifier: D4:75:DD:37:8C:05:2B:21:95:48:B5:6F:7F:E1:A6:92:45:DD:36:97
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 01A0C77C9025258C110E0E51B1B034D48385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 119E
Signing time: Tue 22 Sep 2026 05:00:24 +0000
Manifest this update: Tue 22 Sep 2026 05:00:24 +0000
Manifest next update: Wed 23 Sep 2026 05:00:24 +0000
Files and hashes: 1: FPyM8uE4L6Nml7nHO2klAcUhOyU.roa (hash: dlXbUtTSWpw7O4SezJZ5EEDYXStl7ouFc1E3qpPS7+w=)
2: H1UVQZ89iZ3QoOMJQlSL-pRIpHc.asa (hash: viSqpgv5yYa0kBcTuuw6i+3Lf2WB/KOVlUJ9JqjFvHo=)
3: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: NtrkqPXbsyb67AIAGj8fvylZCApRBUAc6GheOneoAOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:90:25:25:8c:11:0e:0e:51:b1:b0:34:d4:83:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Sep 22 05:00:24 2026 GMT
Not After : Sep 23 05:00:24 2026 GMT
Subject: CN=d475dd378c052b219548b56f7fe1a69245dd3697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:65:55:6d:eb:2e:f8:14:16:49:f8:81:12:87:
ce:d6:40:a5:9c:ea:f1:bc:de:91:3f:ef:33:cd:4d:
53:0e:dc:ef:4f:dd:18:8a:5a:42:9a:c1:07:79:cd:
aa:16:d2:79:bd:d7:1b:6c:97:3b:78:aa:52:9a:7f:
7a:30:13:27:5c:99:6a:86:c5:9a:87:7e:22:05:ce:
55:57:de:5f:ff:b6:52:3c:1b:94:8c:d3:cb:6f:72:
f3:11:1f:a6:cd:2e:e9:3b:07:3a:24:39:7a:c8:6f:
19:c7:b1:bd:41:d9:00:14:90:11:43:c9:90:8b:b4:
a4:19:89:55:09:4e:e4:f5:5d:05:f5:a8:bd:5a:9d:
50:2d:78:a4:d1:a7:88:6b:d3:70:98:af:72:75:bd:
13:ac:2b:48:f8:73:0b:83:e9:00:9a:57:1c:55:34:
cd:34:76:be:73:fb:7f:af:ab:7b:73:fe:b8:d7:86:
9e:c9:6a:a5:2f:b0:15:d6:e9:1c:df:3b:8e:05:85:
4b:21:96:01:9a:93:c4:14:e4:c2:ca:d0:ed:ce:7a:
ab:31:c1:47:be:4f:dd:d6:5d:53:61:49:55:df:93:
14:a4:91:47:b8:fc:02:72:2b:c5:3f:e3:87:dc:48:
6c:74:7e:ea:54:f1:19:20:08:f4:2d:c0:02:2a:6c:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:75:DD:37:8C:05:2B:21:95:48:B5:6F:7F:E1:A6:92:45:DD:36:97
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:1f:23:06:d8:ec:a7:6c:e9:5f:52:07:77:8a:90:eb:0e:6e:
07:0f:75:00:06:86:b7:b5:b8:48:1f:61:a4:ee:70:cc:5d:b1:
80:c3:05:76:28:d0:56:7a:c0:19:79:ec:2d:cf:e4:6d:8b:04:
2d:be:78:79:c1:26:c7:9a:6c:61:25:3c:e1:f9:2a:6a:c4:7d:
c4:91:d3:b5:24:90:4f:06:ef:39:b1:1f:96:b0:96:1e:5e:07:
36:21:87:15:6f:2c:a8:ae:45:66:3c:ef:06:a1:6e:f9:30:6e:
35:25:36:b0:ae:10:c3:68:5d:7f:e0:29:8e:76:ff:3f:7c:ce:
31:0d:de:fe:99:48:54:c1:02:7c:0a:ea:a2:34:b9:9d:8f:7b:
52:68:9c:3a:78:0c:57:b2:14:39:8f:5c:c2:5d:86:8d:c0:c8:
54:c6:46:50:23:82:91:25:9a:b2:af:90:57:ec:a4:f8:89:d8:
fa:76:78:f2:53:d5:de:19:c3:46:b5:1e:4b:15:62:a1:b9:99:
b0:e6:18:fc:7b:eb:9a:94:85:fd:d3:eb:3e:15:ac:a9:d8:24:
1d:58:93:6e:32:2b:c9:b6:fc:2c:1a:73:25:47:8e:01:a2:32:
cc:3b:44:5c:92:89:c5:0e:08:da:8c:d5:51:8c:33:0b:bc:a3:
c3:97:c6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:52:31 2026 by rpki-client