Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/rkwoDYZ-k3eD3sYj86E_PP_ulaI.mft
File: rkwoDYZ-k3eD3sYj86E_PP_ulaI.mft (raw, json)
Hash identifier: WaIfEF3qh4/WYGPa94TNBx+gZ9tkJj/I5OAQwNSIjQM=
Subject key identifier: 4C:0D:65:16:38:80:EC:C6:2A:BA:B1:E3:A5:44:C5:B6:81:FC:79:8E
Authority key identifier: AE:4C:28:0D:86:7E:93:77:83:DE:C6:23:F3:A1:3F:3C:FF:EE:95:A2
Certificate issuer: /CN=ae4c280d867e937783dec623f3a13f3cffee95a2
Certificate serial: 01A08B28942D74BE4CA6067F9361921FB818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkwoDYZ-k3eD3sYj86E_PP_ulaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/rkwoDYZ-k3eD3sYj86E_PP_ulaI.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 11:51:27 +0000
Manifest this update: Thu 10 Sep 2026 11:51:27 +0000
Manifest next update: Fri 11 Sep 2026 11:51:27 +0000
Files and hashes: 1: 0131e2pSWESXKp1FiJkWON3XoKs.roa (hash: 4xLzlyR4pogj61/fJ+d68Anxepth/fHSAb4rDCBPR1k=)
2: rkwoDYZ-k3eD3sYj86E_PP_ulaI.crl (hash: RLZL2OA183gGGRz6bbxCIxcm8l33PeUBJT9MSm2xc5M=)
3: zwIbwnh5_kJrrh2hmkd8KMEVzwo.roa (hash: 46z2WdXBxI4jpKEQrgbL4nevRdLPt/ILYjZDNX1OjFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/rkwoDYZ-k3eD3sYj86E_PP_ulaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/rkwoDYZ-k3eD3sYj86E_PP_ulaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkwoDYZ-k3eD3sYj86E_PP_ulaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:28:94:2d:74:be:4c:a6:06:7f:93:61:92:1f:b8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4c280d867e937783dec623f3a13f3cffee95a2
Validity
Not Before: Sep 10 11:51:27 2026 GMT
Not After : Sep 11 11:51:27 2026 GMT
Subject: CN=4c0d65163880ecc62abab1e3a544c5b681fc798e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:16:58:9e:1c:21:b8:65:c7:62:7a:7a:8b:
7a:8a:e4:5e:40:4a:53:03:81:6a:31:15:4f:f6:06:
11:2c:e8:00:51:5e:78:e3:d0:cc:33:e1:f0:2d:3a:
e6:06:88:da:ec:33:a9:99:9b:bf:9e:41:e8:d3:66:
b3:2e:b8:87:69:ef:47:f0:79:45:ce:50:e3:b1:96:
27:00:2b:ac:6f:a8:29:79:07:2b:b8:2a:63:a5:78:
10:0a:32:08:24:71:88:86:74:65:7a:e9:8e:a0:c3:
96:b9:9d:69:11:9a:e4:22:95:7a:5e:4b:25:9b:87:
40:0b:4b:71:65:27:c1:f2:15:83:5b:f6:00:40:d4:
03:ba:99:de:56:56:46:3c:1a:4f:b6:4b:6b:6b:af:
5c:43:33:20:b6:87:62:d1:e3:80:a6:cd:ad:88:03:
ac:d6:79:c6:ec:17:6a:2b:ef:33:3a:23:af:e2:83:
e1:7b:2f:17:5f:0e:2b:c6:8c:0b:da:74:8e:76:92:
a4:bf:7c:81:51:41:2f:62:57:03:3a:fc:0a:e4:24:
0f:e7:82:5d:cb:40:5f:89:6c:9e:10:fa:20:54:95:
7f:cc:9e:98:8d:48:f9:f5:38:f3:82:23:3c:85:75:
be:67:22:cc:73:b9:86:2a:c2:70:12:f7:62:9c:88:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0D:65:16:38:80:EC:C6:2A:BA:B1:E3:A5:44:C5:B6:81:FC:79:8E
X509v3 Authority Key Identifier:
keyid:AE:4C:28:0D:86:7E:93:77:83:DE:C6:23:F3:A1:3F:3C:FF:EE:95:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkwoDYZ-k3eD3sYj86E_PP_ulaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/rkwoDYZ-k3eD3sYj86E_PP_ulaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/rkwoDYZ-k3eD3sYj86E_PP_ulaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:dc:92:75:df:c6:36:e8:8d:03:a9:18:0e:8a:d4:15:54:79:
4a:db:f4:a5:2b:06:84:23:42:16:0e:f0:b1:0b:16:f7:69:b5:
3a:1d:48:10:b5:4a:b0:47:92:9c:d1:34:36:bd:72:d4:92:00:
f5:10:c7:26:c5:af:61:67:3d:18:5a:d5:ca:4b:6f:8f:4b:db:
6f:e6:b2:ee:8f:1e:ef:7e:8b:97:e8:b7:fc:22:51:a3:2f:00:
34:2c:8a:59:4a:e9:6d:f5:af:05:9a:66:55:9c:d9:67:19:9b:
c9:f3:b7:f5:d4:d0:c5:d1:49:49:7b:4f:71:ad:e4:04:dd:1e:
89:6c:e2:79:ab:14:20:f8:c6:39:5d:e1:b1:e0:ce:2a:7a:1b:
7e:c9:27:75:f8:58:6c:40:16:61:52:03:9c:a6:9f:f4:a0:d1:
cb:93:f5:ba:63:45:db:49:a8:c9:e1:bd:d6:7a:f4:33:6b:84:
cd:04:60:bc:34:37:ea:1f:a9:2d:50:ae:14:92:32:ba:b4:79:
cc:a5:66:5f:28:9c:09:56:54:10:e3:9f:83:a2:90:13:9b:08:
fb:ee:9b:9b:7e:bf:ee:05:e3:3c:7d:37:3f:5e:05:62:82:67:
29:85:16:17:a6:df:d3:0e:4a:7b:3f:9a:d9:a2:68:a0:b6:fd:
25:06:fa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:38:56 2026 by rpki-client