Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
File: rKbwaDzHS63SOoFAw4XxyBziTfc.mft (raw, json)
Hash identifier: DQvK1z+oxWVtVs83r0qalINHsh/YFIUgzUKoyZYXanY=
Subject key identifier: E0:A9:1A:5E:DA:CB:30:48:9E:D4:66:D5:12:FA:B4:BD:E6:58:DC:7A
Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Certificate serial: 019EB6C4E7A12155EABAE460BDEE1D5B242B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
Manifest number: 0FFE
Signing time: Thu 11 Jun 2026 13:00:18 +0000
Manifest this update: Thu 11 Jun 2026 13:00:18 +0000
Manifest next update: Fri 12 Jun 2026 13:00:18 +0000
Files and hashes: 1: Hl-oGjMEXSHh22tv7GvQWauR6Ls.roa (hash: k0kjDMHyxNG6XHvsH8YWl0QTbYb+WeHWx5ruPE+qWhs=)
2: rKbwaDzHS63SOoFAw4XxyBziTfc.crl (hash: WjaNXol4aryetpCZTUVs6oKNhkFShcCAp3JluejS998=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c4:e7:a1:21:55:ea:ba:e4:60:bd:ee:1d:5b:24:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Validity
Not Before: Jun 11 13:00:18 2026 GMT
Not After : Jun 12 13:00:18 2026 GMT
Subject: CN=e0a91a5edacb30489ed466d512fab4bde658dc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:ab:ed:21:a7:54:fc:70:44:54:f6:64:f3:
ff:a2:1c:f3:0a:bc:91:84:b1:99:67:58:2d:77:4c:
99:e6:4e:dd:a9:d5:64:52:13:14:c5:b6:8c:51:fb:
54:36:d7:6f:88:d2:79:d9:6e:82:22:50:cf:4a:b6:
17:1d:ae:93:11:6f:07:58:72:ee:b8:18:b1:c3:3b:
c4:8b:dc:3f:3c:30:95:eb:93:3a:22:58:e0:f4:cc:
45:83:c4:49:03:3e:e1:50:32:63:e5:04:d6:ba:d4:
c5:be:b1:e0:9d:f1:ff:1f:24:d5:c2:ae:f0:2d:62:
de:99:24:cd:e2:15:03:c3:cd:c4:65:49:d6:81:a7:
18:52:7f:79:03:ae:0d:3e:cf:f9:6e:d5:f7:51:0a:
6e:b4:cd:44:02:34:9e:20:5b:31:c8:35:2d:72:61:
98:b6:88:0a:0f:cc:9e:6b:12:d7:a3:20:a7:c9:60:
f2:84:96:21:00:cf:fa:ef:5f:01:29:5e:d5:5c:d8:
44:f2:a0:a2:8e:76:9c:b2:f4:74:26:c6:a9:82:bc:
cf:dc:27:d1:a0:d1:68:fb:a4:2b:5a:b2:91:a1:d7:
da:cf:21:0a:bf:90:3a:42:23:99:59:33:92:42:52:
ac:a8:e0:39:77:45:62:e2:73:1b:a6:e3:72:d7:2e:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A9:1A:5E:DA:CB:30:48:9E:D4:66:D5:12:FA:B4:BD:E6:58:DC:7A
X509v3 Authority Key Identifier:
keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fe:d7:6f:8e:74:2e:f8:c3:16:15:c6:8b:33:1d:37:7b:93:
a3:25:f7:44:9b:fc:19:b5:b6:06:a0:a2:52:3b:bf:e0:38:54:
e3:16:5e:be:ef:51:4e:7e:12:4d:7d:31:a1:f3:14:00:dd:cc:
1c:63:3a:a5:3d:d8:a0:63:a3:77:16:1e:eb:f9:24:59:a0:dc:
64:ef:6e:0e:c2:39:8c:a3:78:a9:84:0e:09:2d:88:2d:d8:c0:
f1:08:d0:65:ca:5b:bf:55:3f:0e:73:3e:ae:a7:78:c4:39:02:
53:57:15:70:71:a2:a8:6a:5e:2b:48:cd:f2:c4:6a:af:8f:1c:
83:4d:c6:41:85:f7:e1:54:d7:b0:98:21:04:02:5d:b2:46:9d:
bc:10:f2:98:4c:c7:4a:13:70:75:27:16:ad:e2:d5:10:ba:6e:
ea:b2:27:0e:e5:29:e0:bf:fc:38:e4:8e:8b:32:f4:c1:90:f6:
e9:5a:9f:e1:36:f2:2f:cf:c7:f5:02:2d:73:20:25:fc:af:dd:
03:67:b6:86:be:4d:80:d5:9b:39:0d:13:d6:24:3a:57:cd:6c:
1f:d2:4e:a2:8e:e2:fd:15:15:68:1a:eb:84:87:49:90:94:f5:
0a:76:c5:77:ce:d7:89:1e:62:ae:ca:07:68:e7:00:10:84:f9:
35:c5:4e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:21:17 2026 by rpki-client