Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: emCwWKEr34wyQkqv6gFImyKPMGbKRy4pE/csMAJGKss=
Subject key identifier: 95:13:47:D2:16:B7:BA:16:88:2D:49:E9:10:A4:3F:95:68:20:06:51
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 019D98BDD241055C08430189CD1DC1358851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 0FF8
Signing time: Fri 17 Apr 2026 00:01:10 +0000
Manifest this update: Fri 17 Apr 2026 00:01:10 +0000
Manifest next update: Sat 18 Apr 2026 00:01:10 +0000
Files and hashes: 1: FPyM8uE4L6Nml7nHO2klAcUhOyU.roa (hash: dlXbUtTSWpw7O4SezJZ5EEDYXStl7ouFc1E3qpPS7+w=)
2: MuGN2Hka5jz3uKEmny_HpiiDodE.asa (hash: 6xt+FPkYOOMIE89vAz2BiI+yVSDgp4pZb6MQ1N+deOs=)
3: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: Qla0RfNu4NPI9+v8A8INqbASBphE/JcDoumGQwr/eU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:d2:41:05:5c:08:43:01:89:cd:1d:c1:35:88:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Apr 17 00:01:10 2026 GMT
Not After : Apr 18 00:01:10 2026 GMT
Subject: CN=951347d216b7ba16882d49e910a43f9568200651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:63:d1:fe:90:90:47:26:bc:80:88:94:73:6a:
67:2c:63:f4:0d:42:86:a9:76:63:05:f1:e3:fa:ef:
34:55:54:eb:7b:16:70:a2:c2:07:ef:c7:d8:06:81:
12:00:e7:51:9e:47:f0:5e:64:61:1f:08:bb:60:c3:
01:ec:70:41:1b:81:48:e2:27:34:d1:d9:a7:b5:d1:
bf:28:0f:51:e8:9c:3c:49:af:29:c2:0b:3d:43:9b:
20:6a:d7:ea:7f:96:2a:02:0c:58:72:f1:48:2a:5b:
0e:c3:f8:c2:0f:96:47:62:6a:47:ae:40:b6:9e:ef:
80:d2:eb:f8:23:e5:fb:d7:d9:d9:2a:8a:9d:c4:db:
58:a0:8f:8b:fa:e1:80:54:83:0b:f9:79:3c:6e:7e:
6e:56:92:f5:d6:55:77:52:7e:30:7c:d1:a4:0a:28:
6d:96:ad:44:ee:9a:ab:37:df:6a:e0:2d:07:ce:31:
26:34:08:21:c8:2b:96:b5:de:75:49:82:b3:20:23:
52:e2:ba:68:b5:aa:8f:ad:d1:6f:48:c2:de:16:84:
e6:6d:25:87:1f:91:bc:e4:65:c7:1e:d7:58:cb:09:
04:94:45:55:4e:b0:6a:d4:65:63:d1:81:2a:25:da:
d8:41:57:b8:69:75:ed:08:46:37:6f:e4:dc:71:02:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:13:47:D2:16:B7:BA:16:88:2D:49:E9:10:A4:3F:95:68:20:06:51
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9e:ec:fa:d6:5a:7a:6b:c2:ae:ee:73:15:c4:ad:29:c3:d9:
40:54:e9:70:68:d6:d5:00:31:23:1d:88:d1:0e:7a:1b:9f:64:
0a:b2:ce:74:df:f6:9c:68:17:f6:5c:0f:fe:f1:47:87:ee:ad:
7f:65:75:d6:9f:5c:5f:9e:43:07:83:ad:65:32:15:5b:52:86:
13:98:66:32:1e:08:f4:3a:42:ea:3a:98:7f:e3:3c:07:81:bd:
ba:35:86:6f:fd:63:b3:5c:e7:4a:17:3b:10:14:73:5d:f2:46:
4c:d0:a1:7b:99:e0:8f:d8:6e:58:a3:20:4b:fe:dc:d1:7e:e6:
f1:8e:73:d7:fc:ff:48:af:2e:93:b2:2d:cc:2e:20:91:8c:54:
75:06:3b:52:c2:58:dd:1c:22:c6:98:d8:15:bc:13:74:29:36:
ce:c2:65:f2:74:e4:75:03:0b:a8:c4:e0:f7:62:24:a6:42:ef:
5e:e1:2a:04:c6:e0:5a:a2:4a:7f:a7:ad:2d:80:22:de:e9:97:
07:6f:e9:a7:b5:ee:47:b4:6a:de:6a:94:e9:e2:14:41:f8:1f:
bc:46:22:55:47:95:31:db:95:a7:2f:07:a8:be:cd:42:23:80:
bd:b7:28:2b:34:05:02:32:0b:d1:eb:c5:2c:0a:2b:0a:67:5a:
49:6b:b0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:50 2026 by rpki-client