Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
File: roNVKZN0KXkz0oH1HrdLpcLJHME.mft (raw, json)
Hash identifier: 58Nr2JcMy41dVdQrReFnjKqiVq6dsVtDv+/Ze/pHlGE=
Subject key identifier: 12:3D:BD:DA:7B:20:EE:87:2E:DF:EE:72:67:D7:0D:C5:7A:B4:8C:50
Authority key identifier: AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
Certificate issuer: /CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Certificate serial: 01A08B6835D7FB5203DDB1A9C5E261A85CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
Manifest number: 159B
Signing time: Thu 10 Sep 2026 13:00:57 +0000
Manifest this update: Thu 10 Sep 2026 13:00:57 +0000
Manifest next update: Fri 11 Sep 2026 13:00:57 +0000
Files and hashes: 1: luvzxOrHEfm-oTNUE5I96OhB6uA.roa (hash: v1k8+jSnmhy9x9cDTWQEao/543k2k6aoV/oRZ1O120I=)
2: roNVKZN0KXkz0oH1HrdLpcLJHME.crl (hash: qnBk0ImTOMGRsPCaKcvswS1Lws04TcH2TDlZP4rYkNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:35:d7:fb:52:03:dd:b1:a9:c5:e2:61:a8:5c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8355299374297933d281f51eb74ba5c2c91cc1
Validity
Not Before: Sep 10 13:00:57 2026 GMT
Not After : Sep 11 13:00:57 2026 GMT
Subject: CN=123dbdda7b20ee872edfee7267d70dc57ab48c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:e2:88:38:f3:e6:53:f3:94:03:30:17:a1:
50:c6:40:18:27:91:8f:ac:0e:a4:dc:1d:0d:9e:54:
ed:e9:46:83:f3:54:93:1b:9f:b6:9e:04:43:96:c1:
90:30:aa:91:aa:ff:19:28:63:5f:81:e9:73:d9:5b:
24:3d:8b:d6:e9:b4:3d:90:31:a7:a1:40:85:db:b2:
22:33:18:1c:08:06:1d:2d:12:d5:b3:53:dd:f5:db:
86:3e:ba:0d:56:70:fb:29:94:8b:46:c7:86:67:90:
1a:39:06:3e:12:9b:9a:5a:c5:66:8e:80:cf:57:c4:
e2:50:53:5f:c9:04:5f:58:93:9c:db:bc:f7:ae:b4:
d1:19:82:e8:69:42:b7:36:47:68:ce:60:f7:5e:84:
ab:66:39:9c:56:7d:36:68:90:e3:57:3f:37:b6:6f:
2f:ef:4b:d2:9a:e2:43:d0:69:38:5d:72:57:8d:bb:
03:3d:49:31:b1:cd:bd:87:14:90:7a:9f:42:d4:48:
25:e7:2a:ac:be:48:9e:ed:a1:89:ec:b6:ee:c3:d4:
a1:a8:82:64:1c:0b:09:d2:ab:45:e9:41:e1:f2:45:
e9:1d:05:9d:63:7d:9c:db:49:e8:04:a7:dc:65:ed:
42:37:56:33:65:fe:0b:76:65:f9:36:89:80:d0:74:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3D:BD:DA:7B:20:EE:87:2E:DF:EE:72:67:D7:0D:C5:7A:B4:8C:50
X509v3 Authority Key Identifier:
keyid:AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:82:78:f4:bf:bd:82:5d:e8:5d:b8:6a:1f:1a:45:a6:a7:2e:
82:90:ff:40:37:70:72:64:63:31:ee:aa:33:02:b8:46:74:8d:
3a:1d:7a:5a:52:0e:d9:3a:8a:25:42:96:ec:7a:b0:5f:65:89:
56:63:43:e1:58:f7:d9:24:59:7e:67:88:39:eb:ab:f8:12:26:
25:80:6c:c4:c5:c2:75:0d:57:e7:b6:be:f7:70:8a:e6:fb:36:
8f:7b:ba:f9:0f:6e:6d:0b:4e:d1:c3:61:f1:0f:c8:2a:7f:34:
0f:a9:e8:ce:0f:fb:24:76:2f:ad:84:3b:65:f2:2e:0a:3e:95:
00:c3:9a:19:36:6b:48:c9:23:3d:31:56:52:9d:4d:b4:3c:e3:
21:04:3f:06:0c:de:38:c1:74:fa:8b:d0:97:7c:37:13:d5:42:
2e:e1:ae:6a:4d:41:73:c6:91:11:d2:ee:55:33:62:52:2b:10:
58:bf:a3:b7:74:39:62:53:bb:d2:3b:4e:ff:98:a9:2c:fc:57:
05:61:e9:d9:4e:03:3e:e9:13:25:f4:21:69:52:cc:fb:2c:65:
87:e9:a3:04:d2:f5:93:14:5c:67:88:78:6b:11:f1:1a:79:96:
e4:57:c0:7d:1e:b8:46:3b:d7:45:a2:35:39:70:10:29:75:6d:
5c:53:3f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:12:53 2026 by rpki-client