Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
File: kRbcv3jGLVHakHag0Gra027jt1U.mft (raw, json)
Hash identifier: ddAZC/AchfEqGTmOQodNq58eoCCzWAzw90hW2E8jDFI=
Subject key identifier: 69:BB:3A:D1:EF:9D:FD:0A:5B:74:D2:A9:55:7B:5C:EA:D2:06:32:0D
Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Certificate issuer: /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Certificate serial: 01A17A3AA8750DA0260DC9E89B791129B2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
Manifest number: 1AC5
Signing time: Mon 26 Oct 2026 22:00:26 +0000
Manifest this update: Mon 26 Oct 2026 22:00:26 +0000
Manifest next update: Tue 27 Oct 2026 22:00:26 +0000
Files and hashes: 1: 3_teHZlqiyJL6OCe3l3tQgUazuw.roa (hash: LTM6e0OE0QUFBKrZfsSmWI5JalOFaXi6PGkxoB/+ybc=)
2: kRbcv3jGLVHakHag0Gra027jt1U.crl (hash: YqPr6MKY2tc3MJ0ZXnK8NQSoKy/kr7rPFHefgCPcPXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:a8:75:0d:a0:26:0d:c9:e8:9b:79:11:29:b2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Validity
Not Before: Oct 26 22:00:26 2026 GMT
Not After : Oct 27 22:00:26 2026 GMT
Subject: CN=69bb3ad1ef9dfd0a5b74d2a9557b5cead206320d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:3a:de:f4:fe:48:17:15:83:f4:eb:bb:8e:
5f:05:c1:0f:25:2c:f5:10:18:e1:00:7d:79:77:b6:
3b:c6:d0:61:8f:6f:2e:7d:03:ae:d9:ea:d1:0c:1a:
96:a5:0d:ff:7a:03:59:55:f9:43:52:7c:dc:43:10:
bf:71:bf:bb:1e:55:16:58:6c:70:84:5f:12:17:09:
fe:9a:ac:c3:5d:10:64:f4:4e:44:fd:f9:8a:16:ad:
89:6b:98:87:7d:3b:87:2b:eb:7b:9d:86:d4:0e:3b:
1b:a1:ff:ff:e3:c5:28:3a:fb:b8:28:f4:1f:22:18:
6a:53:92:1a:02:94:08:d3:c2:66:f7:2c:0e:02:f3:
84:62:af:23:d6:7f:f7:fc:2d:62:42:c4:d4:2a:f1:
89:37:f3:20:3f:4e:31:1f:2a:2d:c9:84:fe:08:9d:
7b:5e:4b:5d:01:73:48:16:8e:14:7c:a7:dc:19:48:
7b:59:92:55:8d:e7:40:5e:09:62:22:be:49:0e:25:
9a:ae:de:e8:c2:8c:bc:5f:ee:b7:3b:31:0f:0c:d3:
f4:be:8d:19:b8:68:cb:29:78:a3:58:4d:a4:1e:1c:
87:d8:78:13:25:fc:05:3b:d3:ef:1d:6b:43:1a:9b:
57:9e:ce:e9:dd:17:a6:34:08:f7:bf:e3:5b:cb:a9:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BB:3A:D1:EF:9D:FD:0A:5B:74:D2:A9:55:7B:5C:EA:D2:06:32:0D
X509v3 Authority Key Identifier:
keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b4:8e:13:6b:97:70:cd:de:31:15:ee:17:ae:33:8b:a5:3f:
c2:b7:9d:99:ed:18:20:26:c9:05:a1:c4:99:ab:f2:1f:71:00:
ce:99:83:13:b8:09:2d:a9:40:4e:8d:59:d9:6e:ae:cd:dd:8c:
e7:da:08:a5:1a:2c:60:3b:0d:6c:66:cb:ec:6e:79:7d:cb:6f:
9c:bc:23:69:fa:d4:9d:23:00:37:85:37:35:c6:30:b7:ed:bb:
ba:4b:88:57:31:35:78:d1:79:ae:54:14:8c:6e:a8:7d:d8:19:
47:dd:56:34:af:b9:d6:26:45:1d:2f:cc:b8:84:58:06:f2:1f:
45:85:ec:a7:92:fc:08:e6:90:b9:30:76:c6:7b:47:fe:e6:dd:
97:10:4d:4a:5e:03:f1:4c:3c:5d:91:4b:94:a3:30:30:ae:25:
61:e6:96:66:8d:da:8c:60:4e:96:e3:37:bd:93:4d:67:dd:f1:
06:58:56:0c:09:6a:37:85:4a:b5:df:9f:e3:24:6f:f7:5e:7c:
29:44:5d:3c:a0:fb:ee:54:08:c6:b6:d5:69:3a:5b:32:51:74:
48:91:95:b1:6b:dc:86:00:d3:c2:6f:5f:ed:3d:39:60:1d:5a:
1c:a8:1b:7f:00:73:49:f2:52:a9:0e:3a:08:1e:1c:04:37:05:
3c:4a:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:36:41 2026 by rpki-client