Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
File: RKw-QPgEbPOHzJFwxdFifUIh190.mft (raw, json)
Hash identifier: sI1gLvIT1QILWEXunjt2EDBv2IyUpmSet6DKHaeF09o=
Subject key identifier: F7:FB:EF:39:F7:5E:E7:33:EC:18:5D:49:5E:7C:7E:11:DA:3C:99:C0
Authority key identifier: 44:AC:3E:40:F8:04:6C:F3:87:CC:91:70:C5:D1:62:7D:42:21:D7:DD
Certificate issuer: /CN=44ac3e40f8046cf387cc9170c5d1627d4221d7dd
Certificate serial: 01A0C28D1F398E3C3F8DBA9FE871F79C384D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
Manifest number: DE
Signing time: Mon 21 Sep 2026 06:00:23 +0000
Manifest this update: Mon 21 Sep 2026 06:00:23 +0000
Manifest next update: Tue 22 Sep 2026 06:00:23 +0000
Files and hashes: 1: RKw-QPgEbPOHzJFwxdFifUIh190.crl (hash: kD3pwBpIjzoCft8KdBQER5iv7EKP8Pve+56he5BECFI=)
2: SVKbgAlazhSBrSFI_Vfp0bKjVhY.roa (hash: 7TPEHCfibMPRsy9xSphGCCfugTiCDmZv7qGFp4wnVmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:1f:39:8e:3c:3f:8d:ba:9f:e8:71:f7:9c:38:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ac3e40f8046cf387cc9170c5d1627d4221d7dd
Validity
Not Before: Sep 21 06:00:23 2026 GMT
Not After : Sep 22 06:00:23 2026 GMT
Subject: CN=f7fbef39f75ee733ec185d495e7c7e11da3c99c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:e4:25:65:dc:91:69:03:ee:84:22:e6:4f:
b6:ae:63:d4:97:4a:09:7a:81:23:eb:93:c7:44:50:
a7:e5:03:4d:c5:48:1e:68:4c:7d:6e:71:ce:d1:7f:
10:dc:bc:7a:7a:26:52:dd:32:8d:64:27:d5:2f:bd:
46:d7:8c:77:01:52:31:b3:df:49:97:10:51:b5:11:
ce:55:5c:74:d2:70:81:97:8e:4c:60:c0:12:ac:fc:
46:b1:65:26:3e:55:8e:02:39:89:c0:48:ae:15:0b:
e1:f9:c7:72:b1:e4:f0:05:52:f1:47:12:7c:ed:b1:
ca:ea:99:84:1c:2a:f0:9c:ce:10:c6:6e:f1:e2:38:
63:44:24:ac:8a:49:b8:e9:55:a2:cb:66:7f:d6:a3:
36:d8:1f:ff:5a:1b:5c:04:a2:1f:8b:b1:77:fa:93:
1d:93:22:a9:8b:3b:52:d3:d5:8a:c5:13:66:b1:89:
dc:a1:f4:2e:33:78:01:e0:4c:34:c1:32:7c:8b:8a:
c5:ab:cf:16:51:18:f6:71:0b:c4:81:74:f8:f4:c4:
71:d1:e2:9b:37:e6:e9:a8:be:ed:41:aa:f2:e0:63:
81:e4:fc:c3:73:3e:7a:f6:c2:c8:10:5a:41:73:ea:
bc:27:3b:9c:24:18:01:bb:e8:2d:00:5c:0c:d1:5c:
c3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FB:EF:39:F7:5E:E7:33:EC:18:5D:49:5E:7C:7E:11:DA:3C:99:C0
X509v3 Authority Key Identifier:
keyid:44:AC:3E:40:F8:04:6C:F3:87:CC:91:70:C5:D1:62:7D:42:21:D7:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:12:3a:39:34:b8:40:98:98:47:7e:22:c5:3a:27:74:98:f1:
31:c0:61:ea:d9:3f:fc:7c:52:a1:4d:df:66:31:c1:d3:99:42:
c9:ba:2d:d0:63:ba:c9:9f:4b:c9:c0:e8:dd:43:51:1e:89:68:
c5:25:fc:5d:88:c4:80:77:07:cc:e4:af:33:3b:e4:59:7a:24:
08:f5:a1:e0:7a:33:82:31:6f:b6:d6:10:69:b7:6f:02:6e:f1:
22:2d:a6:8d:b7:49:64:93:9f:2f:aa:57:1f:d1:08:29:b8:ad:
05:e1:d8:4b:c6:ea:84:66:cf:71:3c:94:33:80:d6:b8:7e:c2:
3b:d8:08:0a:fe:dc:47:24:3f:a1:c7:d2:e6:30:b6:e0:eb:b8:
37:c5:d9:23:05:c7:e6:0e:d9:e4:54:da:9d:0d:04:68:d8:d2:
9f:d9:51:b4:f1:9a:c1:a1:1a:e7:46:6a:17:5b:87:25:68:d6:
7d:24:44:55:8f:8b:7b:93:47:fd:2a:5f:dc:66:ad:96:a7:cb:
a8:70:ba:83:be:fb:fc:91:cd:c3:e7:cd:14:ed:32:4f:a3:e1:
40:47:2b:72:b5:c2:ad:1e:10:68:65:f4:b9:f0:70:97:b2:9b:
a8:a8:0e:88:42:58:86:9c:5e:17:20:f7:cd:74:33:c2:4b:b7:
7a:22:b6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:07:06 2026 by rpki-client