Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json)
Hash identifier: JnvuTdsRUJ/Hf6B4ydtbHT+A3j7IK4AL6sUIa0glnX0=
Subject key identifier: 5F:53:F1:4D:F1:A3:B0:47:9C:AF:83:EB:B9:BE:1D:4B:79:EE:79:05
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial: 019DCD86700A1CB187572B37B4C677130586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
Manifest number: 089F
Signing time: Mon 27 Apr 2026 06:00:32 +0000
Manifest this update: Mon 27 Apr 2026 06:00:32 +0000
Manifest next update: Tue 28 Apr 2026 06:00:32 +0000
Files and hashes: 1: DWZ7HjSRCLESUgo7i9Znv3F8WPI.roa (hash: 8dYfzKxyh8S4a9rEf+ls3bA5hsUeQ004H6oQiSZHoVw=)
2: a3gSQ9IQVQweYEMK-gNDpqDeUyE.roa (hash: X9hTJQV75Af9HWfAGJL8jpedHMgdZakYiBqDBBKMiVQ=)
3: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: 7V5/4fbdR5ense5Tqko6AXLigClE35g8hPs4zw7J2CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:70:0a:1c:b1:87:57:2b:37:b4:c6:77:13:05:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Validity
Not Before: Apr 27 06:00:32 2026 GMT
Not After : Apr 28 06:00:32 2026 GMT
Subject: CN=5f53f14df1a3b0479caf83ebb9be1d4b79ee7905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:91:a5:ae:30:ad:cb:1e:de:a1:50:3a:ef:
da:10:6b:dd:64:6d:62:10:36:39:30:80:a3:97:64:
37:40:c0:67:02:00:aa:9d:60:b1:b2:cc:99:35:ce:
c4:3a:3b:25:f8:c1:35:da:49:76:7c:58:a3:57:46:
b3:ba:98:51:bb:b2:17:4f:b3:54:ca:e7:d7:fb:74:
ed:66:3e:17:01:88:22:5a:a1:df:bf:96:5c:9a:91:
47:1b:5b:57:2d:bb:ec:17:22:8b:0d:9b:28:6c:6e:
bb:fa:92:d3:1a:30:ae:27:8c:2a:65:a5:b7:45:5f:
e0:1b:d9:47:d6:24:7e:16:1a:4c:a9:e2:44:e6:45:
0a:b4:f4:f8:23:d8:7c:23:14:89:c4:f4:3d:c6:34:
25:6a:c9:62:55:87:b0:71:50:e5:94:ba:f0:e2:64:
3f:3e:53:37:ea:ed:63:bf:41:a9:9e:a0:85:aa:43:
a8:24:44:ab:7e:91:65:00:37:78:7e:e9:6c:46:3d:
7b:7a:0e:fa:12:c9:15:fe:f8:15:61:e4:dd:4a:bd:
57:e5:ca:78:ae:62:9a:ad:a9:b8:c9:03:78:c5:e1:
90:c5:06:90:21:17:ab:d9:86:87:00:c5:0b:79:ec:
af:53:46:81:b2:b0:7e:78:dc:6d:35:3a:06:e5:48:
a3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:53:F1:4D:F1:A3:B0:47:9C:AF:83:EB:B9:BE:1D:4B:79:EE:79:05
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7b:51:cf:43:5f:21:b7:25:44:07:e2:d6:6f:e6:00:52:5c:
5c:2e:31:59:77:ae:8f:5d:56:88:c8:c4:f1:7b:13:62:82:a1:
17:21:fe:cf:d4:b5:d7:19:29:b8:44:31:27:d4:0b:0e:02:a6:
8f:16:26:2a:4f:59:da:bc:f6:5c:2e:77:e6:6e:fa:c8:d5:b0:
e3:b0:b0:86:27:1d:01:ab:e1:2e:6e:df:11:59:ee:ac:e5:10:
ee:9b:b9:18:8f:d1:74:bd:5c:fc:54:23:d4:d4:ed:20:97:5b:
21:45:ba:1f:e2:22:d8:26:8f:34:29:42:46:93:a2:47:0e:01:
43:48:c3:68:60:54:c3:f7:9a:a5:3a:55:2f:29:7f:5a:31:23:
e9:94:c1:80:03:df:4a:74:c3:1d:f2:26:33:17:35:1b:df:c8:
ef:c3:67:ff:df:6c:ae:d0:4e:85:2f:7c:d5:02:21:c4:12:bc:
ff:2d:85:38:40:cb:68:6c:37:26:c9:16:37:d2:49:02:3d:0c:
db:09:53:8a:fd:75:a7:34:25:1f:1d:92:39:6b:cb:33:db:7f:
2a:2e:31:2b:78:64:65:44:29:41:db:b8:e0:7e:33:41:e5:e5:
20:0a:0e:e0:15:1a:27:b8:f4:de:3c:1f:38:5c:cc:2a:0d:cb:
43:89:6d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:39:22 2026 by rpki-client