Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: gx3dyttQyqWf8R7ASjQnXkjCQM/NlZu6Yk8P1YDMu80=
Subject key identifier: 14:DB:4B:7D:01:C3:F0:0A:EB:B6:23:20:2E:1F:E1:63:05:AF:97:2E
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 01A03C70EAF291916B033B2667469FA8170F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 1156
Signing time: Wed 26 Aug 2026 05:00:28 +0000
Manifest this update: Wed 26 Aug 2026 05:00:28 +0000
Manifest next update: Thu 27 Aug 2026 05:00:28 +0000
Files and hashes: 1: FPyM8uE4L6Nml7nHO2klAcUhOyU.roa (hash: dlXbUtTSWpw7O4SezJZ5EEDYXStl7ouFc1E3qpPS7+w=)
2: H1UVQZ89iZ3QoOMJQlSL-pRIpHc.asa (hash: viSqpgv5yYa0kBcTuuw6i+3Lf2WB/KOVlUJ9JqjFvHo=)
3: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: 6zTXDIu7IHx66CjY0jwPWwoA0R3alpcX7o0xyHTWUpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:70:ea:f2:91:91:6b:03:3b:26:67:46:9f:a8:17:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Aug 26 05:00:28 2026 GMT
Not After : Aug 27 05:00:28 2026 GMT
Subject: CN=14db4b7d01c3f00aebb623202e1fe16305af972e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f5:68:e3:bb:2a:27:f0:f9:dd:72:a0:d8:08:
8e:3e:c7:7a:cd:55:d6:2e:59:43:13:7a:c3:5f:97:
9d:97:9b:5a:eb:11:21:02:92:66:05:31:3f:b4:5a:
46:24:26:f2:2d:e0:5a:44:c9:f5:db:14:bb:ea:e4:
b7:a3:24:16:c0:33:a1:4a:11:57:d0:51:ee:e3:72:
40:e2:19:08:ce:79:a1:62:d0:3f:5e:24:30:e0:00:
4e:83:91:70:cd:93:5d:8b:78:30:15:fb:d5:f4:d9:
ef:37:ae:b7:be:a1:e4:76:da:4e:f4:51:78:53:88:
63:d5:b4:b0:2d:96:31:04:e1:d7:e3:a6:a5:e5:f7:
aa:9c:cd:c6:a2:87:6c:24:29:a7:b1:ce:93:f3:ec:
f8:2b:54:fc:ab:a1:82:7f:3f:09:11:8a:d5:b2:54:
ee:1b:96:da:11:c5:cb:e0:39:c3:d0:f2:30:3d:ce:
92:05:2f:34:f7:d7:4b:4d:9f:64:b2:ae:96:e3:88:
fe:47:d3:3a:6a:cb:d9:22:4b:b2:c0:b2:d2:53:c0:
0c:7d:db:6a:94:5f:be:cc:8c:9d:10:d2:48:ef:8e:
fd:ec:7f:9a:91:49:04:c0:55:47:ac:fa:6d:2b:8a:
9d:12:7e:8a:a0:c8:a4:62:fa:8b:f3:9a:d5:bd:51:
f6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DB:4B:7D:01:C3:F0:0A:EB:B6:23:20:2E:1F:E1:63:05:AF:97:2E
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a2:c4:6f:50:88:b0:4b:0a:69:ee:3e:9b:6c:f5:9c:18:ef:
5f:b4:57:1b:29:d0:0f:10:df:2e:20:e6:29:43:5c:46:43:f1:
83:89:83:8d:06:b7:13:52:93:c7:1d:7d:7d:5b:10:00:68:f4:
23:57:5b:1c:88:56:a5:19:ae:e7:84:03:52:ba:ad:66:93:bf:
83:ed:2c:14:35:32:6a:09:0f:1c:0e:74:c7:46:dc:40:01:39:
91:bf:dc:05:7e:db:ce:db:da:ce:fa:fc:fb:64:b4:b5:19:a5:
f4:c5:03:6c:35:df:59:39:69:30:4b:82:75:d5:da:4b:50:09:
7d:22:dd:cd:69:91:a6:e0:98:90:c8:39:4d:3d:0d:d4:8a:a2:
6f:14:c7:e8:16:17:7d:40:41:0e:72:8a:1b:63:8a:66:08:8b:
8e:e4:a0:9d:b7:2d:d9:11:37:a8:ae:7f:54:00:f3:7f:53:1b:
b0:f1:d9:5f:5b:71:ae:10:c9:77:44:60:d1:1f:d0:f2:a2:3b:
25:88:3f:26:45:3c:05:3f:07:04:58:96:43:06:26:2c:98:ef:
6b:51:7e:a4:56:29:fe:35:e7:97:97:c0:3b:4b:7c:67:76:15:
57:24:e1:22:b4:a8:b7:e7:30:cf:e1:f6:f8:44:24:d6:48:15:
9e:ef:b5:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA8cOrykZFrAzsmZ0afqBcPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYThlY2ZlZTUxZjY4ZDVmODAzYWFlNmZiZmMxZmRjNDE5
MDI2MmEwHhcNMjYwODI2MDUwMDI4WhcNMjYwODI3MDUwMDI4WjAzMTEwLwYDVQQD
EygxNGRiNGI3ZDAxYzNmMDBhZWJiNjIzMjAyZTFmZTE2MzA1YWY5NzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fVo47sqJ/D53XKg2AiOPsd6zVXW
LllDE3rDX5edl5ta6xEhApJmBTE/tFpGJCbyLeBaRMn12xS76uS3oyQWwDOhShFX
0FHu43JA4hkIznmhYtA/XiQw4ABOg5FwzZNdi3gwFfvV9NnvN663vqHkdtpO9FF4
U4hj1bSwLZYxBOHX46al5feqnM3GoodsJCmnsc6T8+z4K1T8q6GCfz8JEYrVslTu
G5baEcXL4DnD0PIwPc6SBS8099dLTZ9ksq6W44j+R9M6asvZIkuywLLSU8AMfdtq
lF++zIydENJI74797H+akUkEwFVHrPptK4qdEn6KoMikYvqL85rVvVH2XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTbS30Bw/AK67YjIC4f4WMFr5cuMB8GA1UdIwQY
MBaAFKyo7P7lH2jV+AOq5vv8H9xBkCYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iMDk1MzAtOWNhMC00NDA3LThhMDUt
YmJkN2IwYWJhNmFiLzEvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9iMDk1MzAtOWNhMC00NDA3LThhMDUtYmJkN2IwYWJhNmFi
LzEvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqLEb1CI
sEsKae4+m2z1nBjvX7RXGynQDxDfLiDmKUNcRkPxg4mDjQa3E1KTxx19fVsQAGj0
I1dbHIhWpRmu54QDUrqtZpO/g+0sFDUyagkPHA50x0bcQAE5kb/cBX7bztvazvr8
+2S0tRml9MUDbDXfWTlpMEuCddXaS1AJfSLdzWmRpuCYkMg5TT0N1IqibxTH6BYX
fUBBDnKKG2OKZgiLjuSgnbct2RE3qK5/VADzf1MbsPHZX1txrhDJd0Rg0R/Q8qI7
JYg/JkU8BT8HBFiWQwYmLJjva1F+pFYp/jXnl5fAO0t8Z3YVVyThIrSot+cwz+H2
+EQk1kgVnu+1+g==
-----END CERTIFICATE-----
Generated at Wed Aug 26 07:12:24 2026 by rpki-client