Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
File: rKbwaDzHS63SOoFAw4XxyBziTfc.mft (raw, json)
Hash identifier: 8bm0hCDx68qlnrMjWwONzIuKw2zH36RNgLRjVaZiXR4=
Subject key identifier: 4E:AE:D2:D2:FE:F7:B0:55:80:24:F9:7B:BF:A1:B7:8E:C2:CB:63:9C
Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Certificate serial: 01A18909BFB5011F613DDFEB70836DF6F451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
Manifest number: 1174
Signing time: Thu 29 Oct 2026 19:01:19 +0000
Manifest this update: Thu 29 Oct 2026 19:01:19 +0000
Manifest next update: Fri 30 Oct 2026 19:01:19 +0000
Files and hashes: 1: Hl-oGjMEXSHh22tv7GvQWauR6Ls.roa (hash: k0kjDMHyxNG6XHvsH8YWl0QTbYb+WeHWx5ruPE+qWhs=)
2: rKbwaDzHS63SOoFAw4XxyBziTfc.crl (hash: hwIthvPYJ6S24zuaPdPnTE4AphFmv4RMww+ddg1cLtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:09:bf:b5:01:1f:61:3d:df:eb:70:83:6d:f6:f4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Validity
Not Before: Oct 29 19:01:19 2026 GMT
Not After : Oct 30 19:01:19 2026 GMT
Subject: CN=4eaed2d2fef7b0558024f97bbfa1b78ec2cb639c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:ed:2d:06:ea:bb:a3:fe:e7:08:a0:87:9e:
68:57:28:e4:7d:75:a4:f6:5d:45:b2:a5:c0:67:75:
f9:76:44:16:ec:82:87:a3:90:c7:24:74:32:0a:1b:
6c:8c:28:6c:10:43:c8:93:5c:f5:33:a7:c6:8d:34:
6c:c9:8c:4d:2c:ac:82:29:10:a1:99:02:3d:f4:c7:
c5:56:ee:a5:56:d5:6d:2c:3e:d7:63:f7:ef:bf:96:
7d:06:9b:79:99:0b:a3:50:3f:43:4b:95:e4:75:8b:
06:8f:20:61:34:39:9f:74:96:50:e5:42:ce:b4:19:
7d:23:67:c6:e3:d5:48:cb:6f:e2:b4:3e:a7:ff:20:
ff:11:aa:f2:c3:7d:fa:d7:a9:52:18:90:5c:47:5c:
30:e7:7c:f2:31:9d:83:ff:7c:85:87:91:94:62:5b:
6c:7a:c5:ce:0f:1d:97:e6:08:b1:3c:31:53:68:3a:
ec:bf:d0:55:83:ad:92:c6:ee:ab:49:48:c9:42:4b:
88:f8:dd:ed:52:55:7f:e5:c8:0c:35:e4:78:06:3c:
5d:c1:b9:3d:63:fe:a3:25:d0:a6:13:db:5c:58:70:
be:1a:6a:bf:8c:fc:52:63:a2:94:ea:ca:03:41:bf:
22:94:9a:e2:9e:0f:57:25:5e:fe:6c:69:eb:a0:5f:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AE:D2:D2:FE:F7:B0:55:80:24:F9:7B:BF:A1:B7:8E:C2:CB:63:9C
X509v3 Authority Key Identifier:
keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:eb:04:18:6c:82:84:3d:8d:4b:3d:00:9c:18:6f:39:d5:55:
5d:bf:b1:93:b5:a4:f9:1f:6c:ee:26:4b:f6:c8:22:54:5d:8a:
36:e0:eb:ea:2c:bd:fa:77:a7:de:19:5b:c6:14:1d:9f:a1:64:
d5:61:8a:24:a8:6f:3e:31:7c:5e:08:95:de:a2:55:a2:1d:d1:
40:08:51:7b:9d:2d:0c:8c:58:3d:0d:64:37:76:03:6a:89:5b:
3a:27:9e:dd:3b:ba:6e:90:2f:0a:94:b2:d4:8c:87:73:22:c6:
d5:53:de:49:83:75:d9:56:bb:b8:c2:11:2e:46:61:1c:b6:15:
da:1b:20:99:4a:f2:c0:1b:d6:cb:9a:77:c4:00:c5:eb:60:89:
a5:35:ff:41:c9:6d:51:96:b9:47:5d:14:9b:02:5e:47:68:fe:
ba:2f:8f:5b:c4:59:08:2c:0e:07:e3:d9:c4:54:a1:4c:47:03:
dd:8f:61:41:6f:e4:7e:05:e0:f8:46:46:ac:d4:22:4b:cd:39:
59:bc:e0:1a:ba:af:25:ad:60:89:75:da:31:ae:58:08:ea:99:
9a:8d:06:b8:dd:9b:a8:9e:27:71:50:10:29:c9:15:c1:2d:fd:
4c:cb:92:a3:de:80:a8:eb:f7:40:78:33:6e:e9:11:64:03:c4:
4c:66:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:02:12 2026 by rpki-client