Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: 9flziwAJA7080Uwg20R9fYSdhrMuOuyy7rMUiGSfHGA=
Subject key identifier: 5D:30:66:17:32:E5:46:1B:DB:23:A4:2D:26:67:08:E9:CF:64:BC:2B
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 01A0BDD462EB7395447F084E9803AF1C4E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 1199
Signing time: Sun 20 Sep 2026 08:00:07 +0000
Manifest this update: Sun 20 Sep 2026 08:00:07 +0000
Manifest next update: Mon 21 Sep 2026 08:00:07 +0000
Files and hashes: 1: FPyM8uE4L6Nml7nHO2klAcUhOyU.roa (hash: dlXbUtTSWpw7O4SezJZ5EEDYXStl7ouFc1E3qpPS7+w=)
2: H1UVQZ89iZ3QoOMJQlSL-pRIpHc.asa (hash: viSqpgv5yYa0kBcTuuw6i+3Lf2WB/KOVlUJ9JqjFvHo=)
3: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: Qkig1u5Xv1G3T1TZFVgGPIXdVohuQq8JeMLtD0D3+BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:62:eb:73:95:44:7f:08:4e:98:03:af:1c:4e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Sep 20 08:00:07 2026 GMT
Not After : Sep 21 08:00:07 2026 GMT
Subject: CN=5d30661732e5461bdb23a42d266708e9cf64bc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:82:7e:40:0e:44:a4:09:4d:7a:cb:96:af:96:
31:42:24:c3:6e:43:38:93:07:95:c7:1a:68:2e:55:
98:08:64:32:83:af:18:36:e1:16:1a:75:7d:5e:ee:
fd:48:bd:52:7f:a5:49:55:f8:60:a8:3f:dc:83:9d:
62:ff:47:88:a5:bf:9a:50:11:0f:98:7a:db:28:dc:
cb:5f:5a:0b:1b:38:f4:b3:ba:24:51:05:62:c0:a4:
d6:22:47:68:b4:ac:54:76:53:14:c2:d2:8d:39:d7:
36:dc:d0:30:9c:f4:1e:21:fd:82:a8:8e:05:38:20:
e3:82:ee:9c:c4:c4:4c:b8:2e:52:85:ff:63:20:2e:
21:7f:f7:ad:09:b0:f8:b4:7c:34:a3:b5:41:1c:7c:
9e:4f:01:d3:3c:dc:d7:86:bb:a3:22:92:0f:1a:62:
d3:a5:51:94:79:f0:3e:8b:39:75:6f:a9:53:05:46:
3b:6c:c8:6d:ca:de:e3:3b:a4:8f:88:52:b3:08:1e:
85:c8:7c:cc:21:b4:31:b0:04:cf:f6:73:81:89:6c:
fc:fb:d3:c0:39:3d:5f:fa:9b:52:ab:fd:9e:77:a4:
b0:d1:b1:cf:39:f6:36:b1:3d:82:32:6b:03:17:61:
fd:c4:f5:38:6b:5e:ca:cb:5a:30:29:25:30:10:a7:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:30:66:17:32:E5:46:1B:DB:23:A4:2D:26:67:08:E9:CF:64:BC:2B
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f7:f3:01:bd:ce:a9:1b:81:b2:1d:2f:55:5b:44:ba:3d:38:
32:6a:e5:ee:d4:0b:4f:26:6a:3a:64:ff:44:c3:2b:f1:25:e6:
18:4e:ce:d5:28:5c:8b:7b:73:ad:76:af:82:52:79:b2:6a:cf:
2b:1c:72:b4:0e:c2:83:67:48:13:d4:92:b3:09:7d:25:13:cd:
32:54:6b:ae:2b:95:4c:e8:e8:9f:fc:cb:14:d9:e2:5e:94:bf:
dd:c9:5a:8d:1c:62:58:47:7d:9c:19:f6:d9:29:d3:3f:ed:9b:
ec:f9:f9:08:5b:c8:ad:dd:a7:c4:b1:32:84:97:c4:0b:ce:3c:
b4:5e:a9:34:78:9f:82:03:01:0f:7f:78:e7:e2:54:bd:91:57:
94:b1:d4:d1:44:4f:db:c1:f8:f5:c9:cd:00:78:85:cb:55:3e:
ae:c6:5a:66:45:53:8f:a8:f3:d0:43:0a:cb:84:85:7b:8d:33:
4c:59:76:27:fb:e0:34:a2:fb:1b:8d:83:2c:aa:6b:65:ab:c8:
fc:e7:dd:36:cc:f0:41:e8:dd:ee:99:dd:41:a6:97:c6:c4:24:
78:d2:c0:dc:c4:f3:e5:c9:93:43:93:9c:39:bf:b9:93:27:17:
9d:2e:35:65:61:29:8c:20:d5:bb:4d:f9:d7:fa:17:6f:9d:5f:
79:b6:2e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:52:03 2026 by rpki-client