Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: d60WMM3m9CUWzRD5jCxSQkJAd/j60JZ12K8ITnf5I3U=
Subject key identifier: D4:02:8F:B5:D9:BB:CE:97:2F:20:26:BB:DB:6A:7F:D6:BC:B7:B6:C8
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 019F115355D711B94A1BCA027D663A0AD820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 10BB
Signing time: Mon 29 Jun 2026 03:01:41 +0000
Manifest this update: Mon 29 Jun 2026 03:01:41 +0000
Manifest next update: Tue 30 Jun 2026 03:01:41 +0000
Files and hashes: 1: FPyM8uE4L6Nml7nHO2klAcUhOyU.roa (hash: dlXbUtTSWpw7O4SezJZ5EEDYXStl7ouFc1E3qpPS7+w=)
2: MuGN2Hka5jz3uKEmny_HpiiDodE.asa (hash: 6xt+FPkYOOMIE89vAz2BiI+yVSDgp4pZb6MQ1N+deOs=)
3: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: msXEhPXnGGRIIv707ZF09RgJMtCPr6ZUw/6BHHeH26o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:53:55:d7:11:b9:4a:1b:ca:02:7d:66:3a:0a:d8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Jun 29 03:01:41 2026 GMT
Not After : Jun 30 03:01:41 2026 GMT
Subject: CN=d4028fb5d9bbce972f2026bbdb6a7fd6bcb7b6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:3f:30:c6:35:f7:1e:e9:ba:02:85:92:d0:
a1:f1:ae:02:e6:12:10:4f:bc:1f:31:a4:57:5e:ba:
cc:65:af:43:cc:dd:ad:d5:b9:ae:f8:10:6a:46:c1:
1d:d3:5b:eb:c9:f7:65:c9:da:1c:16:8c:6a:db:01:
99:78:37:09:cf:26:33:f7:58:25:5b:e8:2e:bc:9a:
b3:e5:bc:62:f1:ca:71:39:57:e8:04:33:1b:1a:31:
39:cc:fd:76:07:09:d0:95:a6:5d:e5:9a:23:55:28:
ca:b4:06:16:51:32:b1:29:9f:61:ae:98:2b:1a:81:
9f:e4:8e:0c:96:3b:a3:f6:23:5e:ad:99:21:d6:b8:
d2:b2:9f:cf:6d:94:48:28:95:8d:28:9b:7e:1c:52:
cc:eb:0b:e4:18:09:a8:f3:a0:32:10:61:f3:3e:95:
6c:4c:78:86:01:0f:f3:1e:df:56:c4:54:ff:9d:99:
1e:54:b6:0f:24:3c:ca:00:8a:91:d2:dd:5b:64:f2:
bb:70:67:cb:4a:5f:4f:f6:1f:e0:c4:98:26:73:77:
87:17:b3:dc:8b:5d:7e:95:dc:a2:cf:e9:9f:a7:8f:
a8:52:ac:e7:3a:91:0b:67:79:27:84:31:8e:c7:db:
4b:23:50:90:03:55:bc:22:ed:a7:00:ab:c4:08:c0:
23:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:02:8F:B5:D9:BB:CE:97:2F:20:26:BB:DB:6A:7F:D6:BC:B7:B6:C8
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c0:e3:7b:da:a6:89:36:71:33:7e:89:77:36:d5:56:f5:ee:
1f:a5:a3:14:34:90:f0:54:16:e9:0c:01:4d:fc:5f:3e:b0:94:
d7:ad:ff:82:58:d6:b1:6f:ba:04:c6:86:5a:7b:69:47:ce:e2:
19:39:21:d7:8d:df:c5:0b:8b:53:13:1c:05:92:20:5c:ab:09:
83:3e:82:a3:9c:02:2f:02:7b:a5:1f:a9:d6:61:b0:d0:05:3f:
5f:44:bc:41:cf:f2:ba:b8:ec:bd:79:9d:c3:2f:7a:7e:be:4d:
a5:64:5b:de:56:76:a8:cf:90:db:8a:5c:b8:ca:da:d0:ed:31:
75:55:d1:d7:12:03:15:58:cd:2c:cd:9b:cd:11:36:4f:33:08:
7a:ad:e6:55:c9:6c:a5:6e:ac:4b:b5:ea:92:36:34:d4:39:4f:
57:73:b8:4a:60:c8:de:f8:79:b1:05:03:ce:ea:32:f4:7a:5d:
6f:49:c7:f0:b1:f4:75:f6:86:cf:5e:0b:93:34:98:a5:ca:02:
c5:2c:fe:60:18:60:72:12:89:e0:ac:b4:ef:26:7f:23:82:bc:
4a:b0:06:ee:7d:8f:67:86:eb:9e:02:4e:06:26:9f:23:8a:29:
43:c9:cd:bd:fb:65:1c:2c:f2:1b:a2:d4:82:b5:4f:ad:0a:21:
c5:a8:e4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:38 2026 by rpki-client