Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
File: RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft (raw, json)
Hash identifier: Mxy0U9y4DiK64EMP71h9x0dvJPbDGzc7XTKRscLLM6w=
Subject key identifier: 1E:19:66:3C:A8:D3:33:7A:94:CB:4D:1D:74:00:5C:D6:01:E7:3D:20
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial: 019D390A42EB43524BBA99A82F9BD887F325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
Manifest number: 189C
Signing time: Sun 29 Mar 2026 10:01:06 +0000
Manifest this update: Sun 29 Mar 2026 10:01:06 +0000
Manifest next update: Mon 30 Mar 2026 10:01:06 +0000
Files and hashes: 1: 8fhYtKpVakt0uV4ZHUTjU4fIbFw.roa (hash: BUVZIDRFer90z5xzSe7ir9WDKqZ/aWAGvB26nEQK32A=)
2: RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl (hash: hZ9WkFAQKlQ3bYpGfu5rs82JVZirbNolGFbKdcUpmlE=)
3: TCAQGPQ0BZ8ud4Gm8UguZYpuzms.roa (hash: +Kmb6BumaUGSfi8TJeQxjsoBcMk+3PlRsvjbV5UF/c8=)
4: _xGsVJQeBzbBLpCkFLNfOvZbW4U.roa (hash: Y4500/iUXADzSRR+OyCO6ojWBN6EGiCPjwgXlWxzhhA=)
5: vcbEzvx1zie9dwpRKaaVwvTw4d4.roa (hash: s7dhy3Ht7fPj270WhKJcSmby6GyMwW0TOLWlYMocDDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:42:eb:43:52:4b:ba:99:a8:2f:9b:d8:87:f3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Validity
Not Before: Mar 29 10:01:06 2026 GMT
Not After : Mar 30 10:01:06 2026 GMT
Subject: CN=1e19663ca8d3337a94cb4d1d74005cd601e73d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:46:ea:85:9d:87:ac:2e:f5:b0:eb:e1:83:
ed:fd:2b:88:0d:ac:fc:c1:b9:9b:f1:d3:12:57:e0:
c1:97:5c:13:5d:44:a1:b6:76:0a:c9:02:f7:ac:0a:
9f:da:bb:3a:e0:2c:09:14:22:55:ce:8c:a8:dc:df:
da:be:f0:6d:fd:46:21:91:7e:28:83:67:80:44:00:
c5:8f:9b:07:78:97:a5:2e:20:44:64:68:8c:14:28:
1d:a4:23:56:b1:0b:57:2c:2e:57:74:f1:2e:17:b8:
63:7b:92:5d:7d:94:f9:ae:08:76:d2:62:e8:24:4e:
bd:b7:65:cd:88:c9:0a:ef:7a:cd:15:4b:87:9a:0e:
93:c1:36:55:39:74:f8:19:13:d1:0a:9a:d9:d3:84:
42:b0:51:d7:00:5f:78:cf:20:0f:98:c6:06:a9:81:
34:55:3d:6d:05:96:6f:a4:12:55:73:67:da:ad:a0:
c5:cd:50:30:08:59:7b:5c:23:59:47:a3:1f:c0:79:
1d:e2:0d:b0:ae:44:21:18:20:da:81:90:a0:6c:c3:
3e:0f:98:27:5e:93:e5:7a:ad:e5:fb:23:8e:d7:74:
ea:2b:9d:6f:d4:b5:6c:0a:65:76:20:37:1a:a6:1d:
d3:1a:98:ef:0a:a0:d7:3a:1b:9f:e5:c0:b8:4b:30:
46:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:19:66:3C:A8:D3:33:7A:94:CB:4D:1D:74:00:5C:D6:01:E7:3D:20
X509v3 Authority Key Identifier:
keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fe:b8:36:ff:64:b3:9d:29:65:ea:02:4b:33:05:df:75:d7:
75:d8:90:26:71:3e:34:84:4f:fe:11:a0:44:cd:64:df:da:9d:
5d:b9:30:74:81:35:56:7e:12:df:d0:d8:e6:0c:00:0d:ce:13:
8f:be:56:06:40:dd:a8:cf:cc:99:36:d9:23:6f:1e:bc:48:0c:
dc:7b:48:95:dc:fc:5d:7c:12:bb:1b:cb:ba:d7:2b:e4:d4:5d:
8d:9b:6b:3b:0d:64:1d:9d:b6:af:39:92:aa:02:a6:b0:d8:e3:
8f:0e:7c:6f:8e:33:1a:34:1d:4f:4e:93:c3:27:13:2d:dc:c4:
0a:85:fc:77:6b:74:a9:d9:84:63:da:74:2e:c1:5c:44:ce:60:
0c:05:d2:34:9b:76:a6:1d:4b:32:a7:28:94:7d:ef:9a:1b:65:
d5:04:74:ac:c9:6c:e3:c1:b7:c3:b5:1a:3d:83:ee:38:57:38:
ba:5f:f8:61:df:b3:12:9d:cf:be:1c:b0:fa:ab:0f:ec:c7:43:
3e:cc:e7:75:e1:1a:12:37:8d:79:4b:80:f1:08:be:41:f0:54:
fe:0b:7c:aa:20:ff:42:0f:38:6a:af:40:2a:8c:c5:ca:53:a7:
2d:df:8f:f2:3c:f5:14:12:da:c8:50:bf:25:77:d7:69:b4:69:
50:bb:85:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:58 2026 by rpki-client