Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
File: rKbwaDzHS63SOoFAw4XxyBziTfc.mft (raw, json)
Hash identifier: yaJQMSXjytw3YXhiLBWM0GP3XCeZM2cKzY3RzVIdUXs=
Subject key identifier: 68:8B:BA:F7:AB:09:3B:20:C8:30:20:A9:FC:DF:39:AA:E2:0E:4B:CF
Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Certificate serial: 019CE36C09DD110959267175132615A28DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
Manifest number: 0F0C
Signing time: Thu 12 Mar 2026 19:00:34 +0000
Manifest this update: Thu 12 Mar 2026 19:00:34 +0000
Manifest next update: Fri 13 Mar 2026 19:00:34 +0000
Files and hashes: 1: Hl-oGjMEXSHh22tv7GvQWauR6Ls.roa (hash: k0kjDMHyxNG6XHvsH8YWl0QTbYb+WeHWx5ruPE+qWhs=)
2: rKbwaDzHS63SOoFAw4XxyBziTfc.crl (hash: j77hR2p4L8HlBhxT/rWX5yHgTxQnUGMRsSTbPyDjDvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6c:09:dd:11:09:59:26:71:75:13:26:15:a2:8d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Validity
Not Before: Mar 12 19:00:34 2026 GMT
Not After : Mar 13 19:00:34 2026 GMT
Subject: CN=688bbaf7ab093b20c83020a9fcdf39aae20e4bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:8e:17:7b:83:ec:23:51:64:a5:18:69:cc:
85:ef:45:a4:44:7b:64:e3:ca:ba:ea:87:f6:e7:22:
2a:bd:a3:85:ba:b3:0b:71:79:c1:1f:99:93:57:cb:
56:90:00:74:57:ed:55:ab:78:cf:91:e8:19:bc:6b:
74:05:2e:5e:c5:1d:97:d0:17:20:2c:2f:ef:68:14:
29:8a:cf:4a:c7:3a:e5:d7:0f:cd:83:4e:06:82:dd:
9a:9d:92:fb:0d:32:05:66:1c:74:5a:f8:44:1e:ef:
e2:14:3f:52:18:50:77:0e:f3:fe:b3:2a:3e:34:1f:
13:fb:60:80:99:a8:5a:ed:9a:83:83:81:08:29:93:
9c:0a:ad:43:33:96:91:41:4c:3d:8b:72:e7:2c:b9:
ef:e9:a8:a0:cd:af:d2:13:fe:41:6a:68:aa:1a:ff:
62:46:37:d7:0d:8a:30:40:8e:0e:95:cb:7a:74:de:
d5:a4:57:53:de:71:29:6a:66:ee:c8:8d:a9:a4:b1:
4b:44:8c:53:a1:fd:4a:1a:96:57:3f:15:46:2b:63:
2a:09:84:6c:03:94:28:40:54:f3:27:1c:74:da:f9:
99:a7:ad:49:43:eb:35:bf:24:71:7a:8f:a7:1d:2f:
06:de:1e:6f:95:82:d3:1c:31:25:75:1d:e8:ea:43:
b6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8B:BA:F7:AB:09:3B:20:C8:30:20:A9:FC:DF:39:AA:E2:0E:4B:CF
X509v3 Authority Key Identifier:
keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:89:63:b9:6c:0e:70:75:e1:f1:b5:8c:4e:6d:f7:6f:00:ab:
a2:ca:25:16:22:5d:21:67:36:1a:fb:f8:fc:93:df:fc:f6:20:
bb:05:b1:ff:96:7b:11:f3:30:bf:fc:84:fc:04:d3:0e:e3:6f:
4d:70:c5:0b:57:1e:96:91:56:83:56:ef:9a:ee:b7:2c:5c:01:
d7:3f:7d:d6:42:78:21:1a:d9:f9:c1:6f:5e:19:2d:ba:4b:b3:
b4:8a:6f:75:72:81:e0:60:92:30:2b:f3:a4:00:44:45:2c:f2:
c4:08:eb:68:8e:63:08:ac:9f:4b:7d:f5:be:3b:1f:5c:ec:79:
05:01:f9:eb:57:a7:f3:c4:d0:6f:04:14:2a:32:63:92:9c:3d:
07:f3:5f:2d:34:c0:d8:fb:93:5c:4a:ed:38:fd:04:d5:a3:09:
51:5c:3e:b9:20:00:23:25:5d:da:48:66:b2:62:f6:24:e7:74:
06:23:a1:cc:e8:93:fe:4c:4d:8f:7c:ba:46:eb:eb:3f:34:78:
6c:92:ad:e7:4f:4b:08:f6:dd:68:d3:f7:6d:7c:75:eb:fb:44:
68:b0:d7:a5:47:f9:9a:dc:20:71:35:77:b4:fb:43:c7:b9:a4:
96:9a:ac:9a:38:ea:ce:ad:d0:49:36:40:5e:f8:a7:ec:ae:24:
43:31:52:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:46:40 2026 by rpki-client