Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: CgjhfwotYqTgf+80OUO5OV4SJEywLGV0vy2e7FDY/dc=
Subject key identifier: DA:FA:6A:74:B8:C8:3E:AE:02:1A:4E:83:39:29:93:53:96:1A:9A:87
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 019E299500289D6BA7424A1493A73F67C369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 1043
Signing time: Fri 15 May 2026 03:01:31 +0000
Manifest this update: Fri 15 May 2026 03:01:31 +0000
Manifest next update: Sat 16 May 2026 03:01:31 +0000
Files and hashes: 1: FPyM8uE4L6Nml7nHO2klAcUhOyU.roa (hash: dlXbUtTSWpw7O4SezJZ5EEDYXStl7ouFc1E3qpPS7+w=)
2: MuGN2Hka5jz3uKEmny_HpiiDodE.asa (hash: 6xt+FPkYOOMIE89vAz2BiI+yVSDgp4pZb6MQ1N+deOs=)
3: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: AXbK8l1Krr1ZjlqnRk9d+7Hsc9bx1HccY5VXtIJTTiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:95:00:28:9d:6b:a7:42:4a:14:93:a7:3f:67:c3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: May 15 03:01:31 2026 GMT
Not After : May 16 03:01:31 2026 GMT
Subject: CN=dafa6a74b8c83eae021a4e8339299353961a9a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:41:00:03:49:8a:4a:cb:43:db:d3:07:9d:
24:e4:92:59:8e:72:d4:fc:17:fd:08:e2:da:5f:a2:
5c:c0:e2:d6:af:5f:86:82:5f:dc:2c:b6:1a:89:20:
c5:ae:0e:79:a5:26:d9:72:19:7a:70:bf:c1:84:cc:
6f:b8:7b:b7:a3:55:21:c1:4c:2f:09:ba:96:96:e0:
b9:fd:c2:43:f4:ee:3e:28:25:e1:9a:b1:2a:fd:70:
fa:e5:b1:7e:d3:92:ae:06:62:85:96:c3:ba:a6:07:
ea:96:8d:21:ef:ff:2a:9b:f4:ba:a0:9a:1a:7c:83:
45:3e:9c:fb:93:61:ed:f6:7f:ba:19:1b:2e:80:d6:
2d:d6:fe:71:8c:85:ac:46:df:76:32:78:62:92:70:
72:b1:e8:20:98:f3:c7:20:04:6e:9e:9d:87:b3:b5:
25:07:54:e5:49:94:32:d0:a0:7d:7c:93:cf:c3:b4:
40:50:90:4c:7a:4f:a5:8e:b5:c4:68:c6:d2:6d:b6:
bd:f4:e7:ae:47:4d:9e:7f:05:af:b5:a4:a1:02:c6:
0a:34:c1:b2:06:b3:10:08:03:05:72:a6:49:92:ca:
b7:8d:2b:28:89:5f:b2:50:ff:54:2c:f0:35:a4:14:
d1:6d:2e:58:fc:3e:53:6a:f4:27:41:0a:e0:2e:7a:
89:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FA:6A:74:B8:C8:3E:AE:02:1A:4E:83:39:29:93:53:96:1A:9A:87
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ca:e9:d0:8d:cb:cc:78:89:da:e0:49:f4:99:1c:27:07:7e:
e8:d8:e9:1f:b5:cc:2a:51:8b:cf:7e:0c:be:9f:4b:84:75:7a:
da:e8:7f:9f:d8:0d:da:76:98:da:87:90:45:9e:d3:76:4d:29:
6e:9f:62:7f:14:58:bd:2b:2d:c7:55:03:bb:16:ee:12:eb:1a:
cb:e8:1f:f2:49:ab:e6:91:18:e9:3c:39:2c:d0:30:53:b9:a4:
7e:38:52:97:a3:4d:c8:0b:f7:c6:b4:86:2d:67:d4:18:b2:2e:
bd:54:33:53:14:5b:44:5b:4b:e7:c0:e2:3f:1d:7d:e3:38:76:
c2:16:66:0c:9c:bd:2b:0b:15:a9:30:12:5c:ae:fa:0c:d5:fa:
40:a3:ee:64:7a:95:9d:ec:f0:a4:f4:eb:8a:5e:88:58:95:63:
76:ad:90:70:0b:fb:8b:dc:40:96:88:19:61:97:bd:d9:ca:4f:
a0:04:6f:7f:ad:bc:62:49:29:90:77:22:23:e8:04:5f:dd:34:
dd:df:b9:b7:6e:d5:10:de:5e:43:85:6f:48:a2:e7:42:66:ae:
8b:f3:eb:dc:2e:b8:27:34:aa:e9:c8:6c:07:14:c7:a6:2f:66:
5e:41:12:e2:97:7b:d5:3a:bf:d3:78:b8:a0:44:69:1d:5d:0e:
20:f9:92:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:57 2026 by rpki-client