Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: o8TLfdfCfL1aFGNlTKM63l3QSxqLWr61HpuMJJmBPKE=
Subject key identifier: 17:E3:61:E5:02:64:4C:17:26:73:D4:B2:2F:F0:A5:00:1F:FD:3A:43
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 019D382EAC81F4685E1ACB9BB4F92C7D41B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 0FC6
Signing time: Sun 29 Mar 2026 06:01:16 +0000
Manifest this update: Sun 29 Mar 2026 06:01:16 +0000
Manifest next update: Mon 30 Mar 2026 06:01:16 +0000
Files and hashes: 1: FPyM8uE4L6Nml7nHO2klAcUhOyU.roa (hash: dlXbUtTSWpw7O4SezJZ5EEDYXStl7ouFc1E3qpPS7+w=)
2: MuGN2Hka5jz3uKEmny_HpiiDodE.asa (hash: 6xt+FPkYOOMIE89vAz2BiI+yVSDgp4pZb6MQ1N+deOs=)
3: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: RdtWgCAC+aF9d4fB2FMUn2w69ABCHEC23wikNUs9k4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:ac:81:f4:68:5e:1a:cb:9b:b4:f9:2c:7d:41:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Mar 29 06:01:16 2026 GMT
Not After : Mar 30 06:01:16 2026 GMT
Subject: CN=17e361e502644c172673d4b22ff0a5001ffd3a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:a4:da:48:cb:78:6b:45:b7:33:78:00:55:
a0:34:e3:13:9d:ef:e4:2d:9d:a3:23:0e:8a:4f:ac:
b3:2a:db:9a:58:0d:cf:e0:18:22:5a:81:21:91:d2:
1d:35:cf:ef:34:fa:3c:9c:2f:af:6a:51:06:44:5c:
29:89:f4:be:b8:80:2f:2d:c6:f8:02:5e:0e:52:8b:
4b:a1:0f:76:5f:61:98:4e:d6:31:38:90:54:40:c9:
26:15:10:47:23:de:40:63:e8:f4:4c:22:7a:12:02:
7d:d2:39:00:c1:3a:36:29:7f:92:07:c8:49:d2:da:
c7:ce:a1:45:16:b2:8e:03:30:b5:f9:02:16:9e:f6:
8f:87:77:85:4a:00:3b:0c:10:35:de:d5:e5:f9:f4:
4e:a0:7e:da:a7:f8:02:f9:70:5d:a9:0a:c5:82:46:
0e:57:ba:b4:f0:fe:48:3d:bc:90:73:4a:1d:ea:81:
4a:f2:37:6d:77:0f:a3:ae:d7:86:fc:3e:e9:17:04:
75:90:61:71:47:c2:c1:ed:20:6a:3e:81:ae:92:e3:
1b:d8:6a:ca:b6:66:03:7a:93:14:dd:11:dc:49:10:
f6:66:1c:60:cc:39:73:3e:2d:1b:15:e8:e6:5d:60:
40:e8:c9:70:af:32:e5:f6:cc:eb:a4:20:61:a4:5b:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E3:61:E5:02:64:4C:17:26:73:D4:B2:2F:F0:A5:00:1F:FD:3A:43
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:80:94:d3:ac:ba:a1:f0:d5:b4:f9:e5:f2:ff:78:7b:ee:d4:
84:8b:85:6a:a4:7d:5e:37:01:f8:f9:3b:b7:0b:5f:c8:ce:8c:
80:f5:c8:41:d5:11:f5:0d:93:b2:f9:b9:9e:89:33:22:f9:89:
49:c6:2e:6d:9a:7e:e0:67:d0:3e:54:a4:2f:bc:55:1c:78:92:
bb:5e:f9:28:76:64:83:c5:5c:ae:89:0c:0e:21:a4:80:96:eb:
bd:39:87:17:97:69:a4:da:e9:9a:a5:cd:0d:ea:89:97:5f:1c:
f0:c4:1e:65:d7:cc:95:73:58:7d:76:2d:c8:85:7d:18:b6:92:
3c:74:37:af:d0:45:6b:cb:f1:42:fe:8f:bc:68:e8:b2:15:42:
40:ba:e6:9a:ef:52:1c:9a:34:f3:e6:f1:fd:1e:29:10:2d:75:
5f:6b:0f:62:61:16:b5:40:66:6c:97:24:58:f9:ee:93:6f:e3:
8d:f2:90:ec:2a:f5:29:3f:da:30:8f:b7:b4:66:c9:bd:c7:c2:
a8:1f:5f:6c:99:c2:75:c8:bb:a6:23:b2:03:75:e0:9c:28:1e:
67:fd:e9:ff:14:e2:e9:a2:bf:3c:66:3f:94:bd:9f:eb:da:71:
9b:cd:75:de:a5:ea:4c:28:ef:48:c6:66:3d:f0:04:69:87:e9:
3a:30:9d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:25 2026 by rpki-client