Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
File: rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft (raw, json)
Hash identifier: AeTIE9e06JmRqr1+lS0tSxgOgmuQ1M22MckUJsdRVRk=
Subject key identifier: E2:3E:99:9D:61:30:7C:96:75:6F:DE:72:B6:8D:1A:8A:5C:53:1F:A9
Authority key identifier: AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
Certificate issuer: /CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Certificate serial: 019D389BFA73E82013DA15BF1A41BFD02257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
Manifest number: 0ECF
Signing time: Sun 29 Mar 2026 08:00:39 +0000
Manifest this update: Sun 29 Mar 2026 08:00:39 +0000
Manifest next update: Mon 30 Mar 2026 08:00:39 +0000
Files and hashes: 1: e-FqLsmWRfG7hL5RbexGQG93a0U.roa (hash: 1pwDbwKlXgh7FVQpfpD5GQV1e5qWwIn7TQRZ0S2m00o=)
2: rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl (hash: wJRUlIsCdR5TmtNXvagM2vMzVmVOOAUIuNeQ+DZcBEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fa:73:e8:20:13:da:15:bf:1a:41:bf:d0:22:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Validity
Not Before: Mar 29 08:00:39 2026 GMT
Not After : Mar 30 08:00:39 2026 GMT
Subject: CN=e23e999d61307c96756fde72b68d1a8a5c531fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:21:af:07:24:a9:56:43:72:65:68:ce:32:
e8:a9:7c:c3:c7:ec:de:be:d9:9d:c4:a0:75:fb:a4:
b5:80:13:9f:5b:6a:d4:b2:02:1c:07:a8:de:97:78:
c6:e0:69:f9:cc:ae:35:e9:8f:15:02:8a:3d:3a:c7:
39:05:cb:42:e8:e0:77:71:b1:46:cb:cc:09:66:1d:
ee:b4:20:43:78:a6:64:e2:1b:4c:db:cf:0b:4f:bb:
ac:91:bb:90:9e:bc:ac:db:77:ab:2a:b3:6b:74:ee:
50:f9:bb:73:55:ea:48:b6:ff:e7:c4:f2:12:23:3f:
7e:4e:8a:a9:22:74:95:13:1e:f2:7b:8a:35:f2:86:
6a:31:f9:0f:7b:56:52:25:53:8b:17:8a:3b:29:68:
f2:67:c7:02:52:52:da:c9:2d:10:06:73:89:a0:a1:
f9:2e:56:81:d8:11:ec:1b:f3:e5:f3:4a:38:4d:2b:
07:d7:af:9e:06:96:9f:3c:b6:ef:a2:bc:a7:ca:d5:
b5:bb:30:63:0c:e8:be:b6:33:9f:e0:54:dd:5c:a4:
82:1a:92:fd:2d:57:1c:72:bf:7a:d5:fa:62:8d:91:
66:d4:11:f7:a7:44:80:3a:aa:6c:4f:d0:9e:68:b7:
cd:6d:62:67:60:0f:e9:b7:59:fe:92:87:32:e4:1a:
4b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3E:99:9D:61:30:7C:96:75:6F:DE:72:B6:8D:1A:8A:5C:53:1F:A9
X509v3 Authority Key Identifier:
keyid:AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:71:59:f3:b8:47:e7:59:99:bc:bd:09:68:7c:40:6f:68:8c:
3a:03:cc:19:27:fd:5a:ba:a3:e2:dd:cf:46:a5:ed:f9:f7:82:
3b:55:5f:71:ae:47:da:d8:7c:11:e9:6a:85:dd:1e:7b:54:84:
d8:78:35:0b:89:26:ed:eb:cb:94:ab:fe:84:22:8e:08:ea:9c:
c7:6a:4d:8b:21:62:dc:93:b9:29:0b:14:fd:24:6e:0d:5c:85:
44:ad:c5:3b:98:71:6f:47:1d:be:f8:4f:ff:35:64:7d:79:92:
7b:f3:db:15:4d:c2:d6:83:c2:5b:b3:82:b1:d7:76:14:e5:d2:
36:8c:9f:34:77:55:ed:16:9e:54:68:6b:f3:ab:b1:1a:dd:bb:
c9:ac:c1:e1:ac:67:07:10:82:20:75:57:0f:ea:e2:72:65:df:
82:cc:46:c8:43:7c:5a:c3:25:61:fc:68:37:fd:6d:ce:a7:ef:
42:36:67:14:aa:2b:95:88:c7:3d:1b:0c:61:5a:04:51:a0:bb:
39:60:97:f6:e7:a0:23:42:37:23:44:e2:3f:35:58:f4:1f:b9:
f9:02:eb:20:9c:6f:fa:19:31:aa:31:d1:6e:4e:90:f3:ea:94:
a9:b6:32:e3:37:8d:51:b8:f0:e0:30:34:eb:7b:6f:aa:9c:2c:
f5:45:f0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:19 2026 by rpki-client