Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: nCnoKE8kjQdv//sMDejvzV0yddWw0er4PPc3W+EtRxQ=
Subject key identifier: 64:01:51:1E:20:35:28:32:8D:77:C2:88:F1:45:C4:1C:C5:98:AE:58
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 01A179CCCC1A3F2FFCED370794580911D3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 1AC8
Signing time: Mon 26 Oct 2026 20:00:27 +0000
Manifest this update: Mon 26 Oct 2026 20:00:27 +0000
Manifest next update: Tue 27 Oct 2026 20:00:27 +0000
Files and hashes: 1: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: 2ahsc5AgduM/5+u8Rd5Q+t6Mi6KTvV0ofK62QjGTrmA=)
2: Z3R0EQtwJ794BTmAMNg0p5SAS3Q.roa (hash: rsyFG4zSMDanCniCWjGQKtysSRfWfwv2oqvo0sGOb8Q=)
3: j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa (hash: o6TreCVefDSXu+8rGe91JOOHIeWosH7WbE6szGGOzyU=)
4: zQSdeObX9i7OS1eAgVlUu1k6izE.roa (hash: fz5kqxfesb7Vy8VFR5dTlm8GMN9rTXkTLsQbrA4g9G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cc:cc:1a:3f:2f:fc:ed:37:07:94:58:09:11:d3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Oct 26 20:00:27 2026 GMT
Not After : Oct 27 20:00:27 2026 GMT
Subject: CN=6401511e203528328d77c288f145c41cc598ae58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:35:db:83:63:d5:93:4d:99:2f:dc:33:07:
61:c6:e9:50:e9:2b:34:bf:cf:52:83:74:17:d3:bc:
83:95:70:aa:ec:c2:72:c4:6e:9e:95:2c:68:22:f5:
4d:05:0f:48:e2:b3:e3:5a:1e:41:36:7e:7f:f6:a6:
98:57:e1:b0:d9:09:ca:57:cd:37:c1:48:2e:62:5d:
73:fa:e0:56:20:6b:85:d1:d2:70:fa:5e:35:85:15:
36:33:5e:40:ea:02:e7:05:39:51:85:92:f7:6d:92:
08:d1:e8:9c:c9:ca:8f:7f:aa:f1:f0:59:f8:96:ba:
4e:f1:40:71:c8:5a:1e:11:f0:75:e7:60:55:f7:ec:
22:ac:4f:85:a7:81:f6:59:f8:b2:97:97:70:bd:2c:
24:18:bf:96:13:34:03:93:4f:7a:48:09:a7:70:f8:
03:0f:b2:76:7e:ad:4e:8c:19:da:32:b6:16:7b:36:
9a:a3:e3:86:14:92:f6:eb:c6:f8:6a:33:16:7a:21:
de:2f:5c:3b:60:8c:19:0e:6b:b4:9f:0e:b1:ed:2f:
92:65:a5:de:43:15:26:bd:78:af:c3:d7:fb:fe:a6:
0d:4e:2e:25:5b:17:ce:e0:4d:6c:5c:16:14:db:b2:
9e:f9:54:6b:69:d8:37:19:b8:ed:28:61:26:86:7f:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:01:51:1E:20:35:28:32:8D:77:C2:88:F1:45:C4:1C:C5:98:AE:58
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e8:82:43:f4:71:2c:9b:98:71:bd:f3:e5:fa:da:d3:fa:98:
bc:8e:00:34:d3:e7:5b:33:c2:ad:d2:ff:69:c2:ff:f2:97:34:
93:09:29:50:fb:14:00:16:fb:39:e2:ee:cc:7b:e7:dc:25:76:
d2:ac:0d:40:03:3f:d6:80:6d:4f:a9:5d:5c:43:bf:1a:27:d8:
f9:78:27:52:bf:3b:a0:b7:63:63:b7:4d:05:86:c1:e6:58:ea:
25:c2:42:0f:f0:52:83:be:d0:61:c9:0d:47:eb:d2:d2:de:df:
56:0c:fe:a8:9d:8b:30:51:6f:3f:8c:bf:b7:04:78:98:29:2d:
fa:ee:79:f9:99:ac:28:03:73:ba:e8:ae:17:8b:37:51:82:86:
12:00:e8:fb:35:93:32:55:79:f3:3e:fb:ce:a4:0f:5e:1f:f2:
48:b5:50:e3:0c:a0:b9:5a:7f:c4:9e:55:dc:33:b4:a4:f6:12:
38:dd:93:cb:88:97:ef:66:c4:74:d6:37:af:6d:71:ef:6f:ca:
0a:c0:f4:ff:2c:f8:f6:71:3f:91:18:d3:59:d9:63:f9:cf:44:
9b:4e:da:7a:84:0b:af:8d:b8:14:6f:99:a5:e6:d4:5f:e5:94:
0f:30:51:41:0e:51:d4:d5:5e:bc:b3:3b:e8:15:3f:55:5b:ea:
5f:ad:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:50:29 2026 by rpki-client