Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier: x7IsFf5Tmj1qlj2TosqBzPye/yQyL07Om9Srh+KzIsU=
Subject key identifier: DC:6F:1A:0B:0D:7C:3B:3B:1A:D7:B6:A1:BA:7B:98:1C:C5:0A:56:25
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 019D38D2D30AE6D128ED986A2E61DA6E1BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 09:00:33 +0000
Manifest this update: Sun 29 Mar 2026 09:00:33 +0000
Manifest next update: Mon 30 Mar 2026 09:00:33 +0000
Files and hashes: 1: STxyqEZJdelIgYwPQkrFzkgfanw.roa (hash: s65hDXY2ql7cBoPqQwS0YK+flCpqESibXFG1uh5dHgQ=)
2: r3hgF8w2ISQEvnYVws0uagdgXaQ.roa (hash: fTPQMjGaJ6jaiZa2YYhiWQOETzK7JUfg3B1DmMWkq3g=)
3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: ns9qh9v82VyJxCMPAaB4zwXkvbwF/qCzTDepNwKhBZ8=)
4: uljHeXtwPoXTWfqHenoj_DXb3ww.roa (hash: wGmp5Bh78//8aIg6gUIYujT06jT2kqD/3V641rlo7LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d3:0a:e6:d1:28:ed:98:6a:2e:61:da:6e:1b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Mar 29 09:00:33 2026 GMT
Not After : Mar 30 09:00:33 2026 GMT
Subject: CN=dc6f1a0b0d7c3b3b1ad7b6a1ba7b981cc50a5625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:e5:ef:16:74:08:51:2e:8b:5f:b6:33:a7:
22:cb:70:bd:f2:6a:c3:8c:0f:81:ae:2a:e0:5d:b9:
43:5e:61:08:0d:b3:c2:4c:50:ff:11:e9:ed:f8:d4:
e3:71:6d:eb:a5:88:60:42:fc:31:dc:02:3a:1f:ce:
4f:49:cd:c7:fe:c1:eb:23:5f:a5:ac:8b:bd:5e:7f:
8b:ef:09:05:88:28:26:da:1b:4b:f3:7b:3d:61:a7:
62:47:3e:56:0d:20:cd:bf:ec:79:91:8a:64:56:5e:
34:87:39:33:2c:99:89:49:22:db:38:fa:53:2a:13:
c2:dc:74:05:d9:7a:03:f6:42:3a:99:b1:63:53:a7:
1b:4d:8b:2d:dd:fd:92:51:bc:b0:71:ff:ba:dc:0a:
83:75:16:d9:2c:94:27:57:e4:ae:67:39:ed:7d:0c:
1d:52:83:c1:02:ea:d3:89:8a:50:44:a5:e8:f1:12:
6a:99:e2:7b:6e:42:56:91:94:2b:95:98:bc:00:99:
30:5f:67:a3:03:6c:3d:c2:21:68:85:f6:e7:6f:a3:
6d:0e:1f:18:d5:39:d9:f6:e4:38:6d:c1:0f:b8:9e:
b8:ca:8e:21:99:ba:c8:9a:6e:2f:d0:b8:13:17:e2:
ba:d3:b0:f4:ff:5d:35:0b:9b:13:65:03:dd:e6:d9:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6F:1A:0B:0D:7C:3B:3B:1A:D7:B6:A1:BA:7B:98:1C:C5:0A:56:25
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ae:b9:54:71:ae:ca:c0:20:12:f3:20:6d:ab:6e:0a:fa:ab:
60:b3:c9:c8:19:62:38:72:5a:a9:8d:92:b0:79:03:7a:ec:62:
9b:4a:de:d8:a2:fd:dc:1c:26:6c:f0:60:e4:a9:6c:db:94:f2:
75:1c:45:6f:b7:c2:e4:53:06:e8:f8:ac:ba:9e:e6:12:fd:4a:
81:11:d9:21:a1:68:1a:ab:6e:a9:3d:38:f0:85:b0:3d:0e:ed:
6d:0b:0b:eb:43:73:89:e3:4c:97:6b:0b:fe:dd:b6:cc:94:86:
10:09:e9:3b:85:8c:3d:f6:cf:6f:f8:fa:f3:a6:d3:d8:39:c5:
02:f5:6d:06:23:3e:39:21:52:b0:b6:e3:45:c9:1d:52:27:14:
22:ae:8f:d3:d1:ed:ed:8a:85:b1:f7:ae:0f:89:6c:4a:4f:b3:
10:77:d2:54:5e:37:1d:84:dd:3f:e8:02:db:4f:be:d7:c5:e8:
95:d9:79:b1:05:81:48:75:72:4a:c6:b3:05:1d:3e:1f:e1:a3:
be:85:b7:20:c6:c2:46:8b:85:da:49:c3:41:93:9d:51:50:fa:
18:c2:f3:25:20:e8:b8:37:b7:4d:38:65:06:04:40:ca:5e:5c:
d5:11:49:92:08:08:4b:56:bc:36:71:b5:33:62:f4:3b:26:a9:
60:7f:05:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:21 2026 by rpki-client