Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
File: rKbwaDzHS63SOoFAw4XxyBziTfc.mft (raw, json)
Hash identifier: 0/fWpzu7RMMG9eBxJdhUINQF8JQC8vMy3SQDLEXfUEY=
Subject key identifier: F1:F8:AD:65:B2:E1:32:49:5F:E8:CC:DD:6B:FB:F0:5C:2A:D6:03:94
Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Certificate serial: 019DCD1994A5F8D876794557ED94B0B27A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
Manifest number: 0F85
Signing time: Mon 27 Apr 2026 04:01:38 +0000
Manifest this update: Mon 27 Apr 2026 04:01:38 +0000
Manifest next update: Tue 28 Apr 2026 04:01:38 +0000
Files and hashes: 1: Hl-oGjMEXSHh22tv7GvQWauR6Ls.roa (hash: k0kjDMHyxNG6XHvsH8YWl0QTbYb+WeHWx5ruPE+qWhs=)
2: rKbwaDzHS63SOoFAw4XxyBziTfc.crl (hash: VIPzlFnMHQ19zmKyo3uS5QgSRDt+83mW5aC7j6RQTCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:94:a5:f8:d8:76:79:45:57:ed:94:b0:b2:7a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Validity
Not Before: Apr 27 04:01:38 2026 GMT
Not After : Apr 28 04:01:38 2026 GMT
Subject: CN=f1f8ad65b2e132495fe8ccdd6bfbf05c2ad60394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:91:b3:c8:14:0b:3f:9a:6d:37:53:41:b6:f6:
e0:e7:8e:39:52:c9:3e:c7:87:a7:a9:02:89:54:a3:
5d:c1:90:28:cc:77:1d:62:bf:2e:1a:81:df:ff:4a:
67:11:7c:58:c2:a0:c1:ef:0a:6e:6a:77:54:17:8c:
11:04:d4:a6:8d:7e:46:7b:1f:ef:bf:f8:4b:f6:99:
de:35:ca:6b:89:71:79:9d:1c:12:89:5e:93:3c:e7:
cc:5b:39:00:14:06:fa:53:07:22:83:08:36:57:34:
c0:80:7a:71:9d:79:92:fa:85:1f:a9:3b:d2:a9:4c:
b8:87:a7:cb:77:c2:6a:b5:6e:b9:4f:94:cb:5f:a3:
d9:5a:2a:76:a3:8e:1d:b9:87:24:16:38:67:67:15:
37:6c:be:57:0f:aa:b3:12:14:14:0e:0c:0f:e7:1d:
73:80:1e:99:b5:98:c9:d8:e1:22:6d:10:8c:cd:51:
7d:25:e7:7a:57:65:9a:2a:4f:de:52:4a:41:2d:f4:
4f:c6:9c:03:ef:91:a1:0a:4c:b7:c9:a3:d9:97:7e:
8b:c5:82:e5:6f:1c:c2:1e:2e:ee:ae:db:ae:20:fb:
f7:14:fc:ca:7b:77:7e:84:15:3b:89:58:dd:f9:dc:
35:1b:ad:d1:e9:b7:e4:54:1c:7e:c7:e2:41:76:bf:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F8:AD:65:B2:E1:32:49:5F:E8:CC:DD:6B:FB:F0:5C:2A:D6:03:94
X509v3 Authority Key Identifier:
keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:05:e8:80:0c:86:eb:09:21:1d:71:f5:18:ff:f5:8f:1c:06:
6f:09:72:69:74:19:3b:c9:e7:3a:c2:53:cc:02:b6:e5:06:3f:
77:dd:0d:a9:80:94:bc:af:d1:1b:6c:23:e7:b7:c4:f8:15:a6:
40:8f:f8:19:a5:c1:51:5f:66:84:c6:94:c1:06:bc:d3:8d:f6:
10:a6:a3:8b:ac:dd:48:e9:57:2f:04:3f:c0:37:21:1b:1d:05:
c5:92:76:c0:55:15:ba:7b:a9:df:62:af:6b:df:c1:fd:53:54:
6b:ff:73:08:07:42:ce:4c:23:31:64:da:ac:3b:32:e8:6c:cd:
6d:60:ee:58:12:84:8d:e9:9e:f8:61:52:2a:d2:c6:2a:69:49:
f8:20:aa:d2:ab:9c:c6:1b:1b:2f:fd:de:c4:97:e4:0b:fd:2d:
9c:ed:90:1a:ee:fa:ec:7c:6c:0c:b5:78:9a:a0:40:1a:6e:fe:
19:c4:82:db:32:05:82:cd:7a:c6:48:95:f9:46:3c:26:a4:b5:
6f:23:2f:2d:49:75:2c:f0:e9:5d:83:bc:cb:2e:e7:b4:b2:4d:
b8:0c:a0:03:65:48:a2:35:58:54:85:31:e2:c8:e1:45:69:99:
78:cf:d0:5b:2a:ff:9c:5e:19:48:59:aa:e7:bc:38:dd:50:e3:
27:c7:18:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:21:25 2026 by rpki-client