Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
File: rKbwaDzHS63SOoFAw4XxyBziTfc.mft (raw, json)
Hash identifier: 9QLQPp2skTxgNKcQUl1OCkPYXLj75B3NHsikNrqJbz8=
Subject key identifier: B8:73:B7:5C:83:CD:E3:75:91:A5:1A:42:2D:35:D8:BB:EB:9F:0A:CE
Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Certificate serial: 019F9E839C54FF72363AB5BC17785F3DB855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
Manifest number: 1076
Signing time: Sun 26 Jul 2026 13:00:53 +0000
Manifest this update: Sun 26 Jul 2026 13:00:53 +0000
Manifest next update: Mon 27 Jul 2026 13:00:53 +0000
Files and hashes: 1: Hl-oGjMEXSHh22tv7GvQWauR6Ls.roa (hash: k0kjDMHyxNG6XHvsH8YWl0QTbYb+WeHWx5ruPE+qWhs=)
2: rKbwaDzHS63SOoFAw4XxyBziTfc.crl (hash: Ojk+JUusebWFnfIz7mHcO5HeJLOwQSgp9pz/h7k74EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:83:9c:54:ff:72:36:3a:b5:bc:17:78:5f:3d:b8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Validity
Not Before: Jul 26 13:00:53 2026 GMT
Not After : Jul 27 13:00:53 2026 GMT
Subject: CN=b873b75c83cde37591a51a422d35d8bbeb9f0ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:87:71:d7:c2:40:a7:94:12:09:58:9e:e7:3e:
38:be:eb:2f:c5:c7:ea:e6:f2:6e:f0:71:66:a3:2c:
25:ea:f4:df:8f:05:1f:64:65:9c:11:c5:f5:25:dc:
55:5c:fc:25:b9:c5:4a:76:4e:33:06:90:1a:b2:4a:
93:05:2f:5c:3f:71:13:ae:a0:8c:2b:e9:c1:6d:b6:
19:16:b9:67:9e:90:87:0e:10:8b:bd:ef:b0:1f:1d:
b0:d9:22:e8:96:c8:c6:e6:77:0d:2b:d5:fe:54:f0:
7f:ef:96:41:67:f6:04:63:c5:33:f1:2b:09:48:49:
89:62:1c:0d:25:3b:d7:49:fe:3c:24:4b:0b:77:ce:
5b:7f:41:2a:85:dc:a7:f1:ea:b4:64:fa:e9:2a:e3:
ea:03:8c:b0:34:29:cd:59:7e:1e:3c:7a:f1:28:58:
ec:b2:50:af:c5:00:58:59:4b:74:b1:8d:af:3d:0d:
65:53:df:84:77:b6:7c:ef:c1:f7:aa:61:9b:e3:41:
7c:3e:38:97:53:f8:77:a8:70:64:6b:55:ec:23:b1:
45:77:fb:b5:0c:c9:12:4e:da:94:28:0f:ea:04:ec:
d0:97:1e:10:83:3d:6f:e1:e8:a8:49:15:9b:fb:7b:
09:09:c6:13:84:ea:79:12:a9:cc:1f:b2:ed:85:57:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:73:B7:5C:83:CD:E3:75:91:A5:1A:42:2D:35:D8:BB:EB:9F:0A:CE
X509v3 Authority Key Identifier:
keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:24:0d:f7:88:56:12:16:4e:60:e4:a7:6a:6d:52:ca:12:8d:
87:30:4a:2a:79:2a:05:30:7e:c3:a6:b7:a3:6a:cd:2c:af:8f:
1f:bb:ee:3e:2c:19:93:04:fc:5f:67:11:dc:dc:b1:a7:2c:42:
ea:a2:05:ee:e7:50:79:14:c8:23:ff:c9:b4:2c:d6:3e:e4:ed:
60:07:dd:b7:74:74:2f:e2:cf:3e:0a:1d:96:a8:83:33:f3:e5:
de:a7:6e:75:4f:f5:11:26:99:b4:05:3b:5e:cf:6a:7c:02:4e:
d2:14:2a:06:65:ab:69:0a:0a:f2:a0:f8:50:de:c1:18:bc:7a:
4f:99:31:54:43:46:4a:8f:33:24:e5:d6:c0:a8:6c:f9:19:99:
a8:a8:ed:8f:95:1e:72:a7:3e:b9:f8:44:e3:c6:db:87:13:8f:
82:4f:0d:b2:17:07:ff:ba:00:3c:cd:17:bd:64:fb:a3:f4:e5:
a6:d3:e6:16:3a:86:72:e5:2e:e1:ec:16:cc:04:f5:ca:5c:48:
d5:3c:48:70:9e:8d:bb:95:8d:ea:a8:e3:47:2c:8a:e0:c5:f6:
d4:9d:76:98:97:ad:72:21:86:b4:6b:ec:ab:e7:2f:59:01:a0:
6b:fc:07:ad:39:dc:88:05:25:8b:65:44:ff:df:aa:01:fa:f2:
02:06:fb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:26:36 2026 by rpki-client