Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: ePKjgZsSEMvt7VGEolDi7g1XmeOaKhXed1KvkQDv8SQ=
Subject key identifier: D0:30:C8:72:CC:72:73:BE:B3:FB:CA:84:B2:45:EA:82:5B:47:55:69
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 019CA9460BCF741A77A781E1A2B3310CDFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 0F7C
Signing time: Sun 01 Mar 2026 12:01:05 +0000
Manifest this update: Sun 01 Mar 2026 12:01:05 +0000
Manifest next update: Mon 02 Mar 2026 12:01:05 +0000
Files and hashes: 1: FPyM8uE4L6Nml7nHO2klAcUhOyU.roa (hash: dlXbUtTSWpw7O4SezJZ5EEDYXStl7ouFc1E3qpPS7+w=)
2: MuGN2Hka5jz3uKEmny_HpiiDodE.asa (hash: 6xt+FPkYOOMIE89vAz2BiI+yVSDgp4pZb6MQ1N+deOs=)
3: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: BpJPD7VzW+b5j6EpmVmZoAhN50DAMgMt7gCKRdz6PmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:0b:cf:74:1a:77:a7:81:e1:a2:b3:31:0c:df:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Mar 1 12:01:05 2026 GMT
Not After : Mar 2 12:01:05 2026 GMT
Subject: CN=d030c872cc7273beb3fbca84b245ea825b475569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ca:06:1a:65:39:b9:e9:6d:98:6e:f4:8c:37:
d5:45:01:17:03:a3:a5:21:4e:c8:a8:3c:31:10:02:
b0:f6:f7:14:db:b3:e7:f8:a6:a6:b8:4f:26:7d:2e:
f0:f9:d7:b2:1f:85:25:96:00:65:aa:0b:c6:0f:c2:
60:8e:42:70:b8:a9:d0:85:1e:9c:49:35:26:26:b6:
40:2d:f9:c8:ed:cf:b0:91:29:15:20:b5:12:8b:6e:
c0:5e:03:ab:79:4f:56:da:ad:81:63:6e:38:f6:0c:
29:bb:c4:a4:56:6b:1f:bd:76:8c:2c:cf:fc:f0:2f:
bb:dd:ca:81:b0:e0:17:e2:1f:8c:ec:3d:f7:c1:64:
90:20:6e:18:57:eb:6a:b8:95:ad:7e:b1:4d:d4:38:
20:4a:b8:8a:3c:4e:6f:70:2e:a2:98:76:1a:2c:51:
4c:25:e4:32:6e:4d:af:f4:2b:16:6f:4c:00:7f:fd:
e3:89:40:0b:c4:d5:64:ca:75:5a:d6:28:e0:8d:9e:
83:ea:10:17:93:b5:ac:7c:ae:70:88:59:72:f1:8a:
ec:0e:1b:13:cc:27:d7:e8:ad:21:51:09:2d:7e:87:
4d:db:54:8e:78:75:b2:01:70:92:78:c8:d5:e4:e1:
dc:25:c2:98:7a:63:24:b6:32:5d:e5:34:2e:07:0f:
56:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:30:C8:72:CC:72:73:BE:B3:FB:CA:84:B2:45:EA:82:5B:47:55:69
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:51:15:90:46:f7:28:48:b4:fd:2a:73:2f:df:8e:3c:af:f4:
89:f0:95:85:c7:bb:7d:09:a4:fc:34:f2:70:6d:89:92:44:74:
ff:d1:9c:2f:b6:b7:7f:ba:33:d2:8b:b2:91:a7:a5:60:64:06:
68:31:db:8d:64:61:c4:14:8b:02:a8:72:64:92:45:98:d0:85:
b6:2f:a1:db:8b:80:9d:cb:46:9d:cf:68:8d:b0:07:2a:bf:67:
ce:3a:3f:dc:a6:e9:01:17:9d:7f:64:b2:e9:b5:5f:88:97:6d:
b0:65:99:7d:0d:f9:bf:96:2c:d9:22:cb:54:47:ca:a4:24:8b:
50:13:4e:cc:b4:41:f5:18:25:7d:59:49:6c:ab:41:a1:87:b0:
26:8e:22:6b:f8:8d:e9:f2:dc:95:9a:65:f2:7a:18:fa:b5:1a:
75:1a:f8:49:67:3b:d6:22:bb:5c:9d:50:e9:6a:23:9d:27:98:
0a:40:f8:72:de:a6:c0:e4:a3:01:a2:b0:46:5e:7a:f4:db:47:
c4:b2:4f:8b:14:7a:6e:7d:c4:1b:c5:b6:d7:09:29:a0:f7:0f:
36:c5:90:8b:03:ce:9e:34:17:c8:d7:3c:35:90:2a:71:f1:f0:
f5:c6:0a:f0:a1:a6:21:c6:8b:b1:35:69:b3:58:16:12:bd:a9:
b7:ca:f4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:52 2026 by rpki-client