Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
File: rKbwaDzHS63SOoFAw4XxyBziTfc.mft (raw, json)
Hash identifier: TLw53U3o02X7kYa5efP3ZaP9RjtABGXRLWZVxoNCwrI=
Subject key identifier: E0:A4:F7:57:E8:02:5E:20:52:97:20:1C:3B:50:F6:D6:63:53:CD:AF
Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Certificate serial: 019F94DBE10E27D3F1DDC7C81D3834115001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
Manifest number: 1071
Signing time: Fri 24 Jul 2026 16:01:05 +0000
Manifest this update: Fri 24 Jul 2026 16:01:05 +0000
Manifest next update: Sat 25 Jul 2026 16:01:05 +0000
Files and hashes: 1: Hl-oGjMEXSHh22tv7GvQWauR6Ls.roa (hash: k0kjDMHyxNG6XHvsH8YWl0QTbYb+WeHWx5ruPE+qWhs=)
2: rKbwaDzHS63SOoFAw4XxyBziTfc.crl (hash: W78GtszzSbdHaPMlgjWVv1Q9tochr3pU7b47BQqbOck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:e1:0e:27:d3:f1:dd:c7:c8:1d:38:34:11:50:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Validity
Not Before: Jul 24 16:01:05 2026 GMT
Not After : Jul 25 16:01:05 2026 GMT
Subject: CN=e0a4f757e8025e205297201c3b50f6d66353cdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:a1:59:a1:c8:12:1b:7b:9f:39:37:e6:f0:
fe:ad:04:48:60:c2:90:3f:82:76:92:90:0a:62:df:
d9:d5:4b:0d:57:e0:02:90:e4:59:5d:61:c2:87:86:
20:5c:2a:ff:da:d6:b0:77:2a:90:20:b5:fc:f7:e2:
7f:96:78:ef:e7:e5:94:b7:b2:cf:07:50:8c:b8:ab:
9a:18:1a:f2:56:38:79:c9:d2:52:39:9c:f0:2e:b4:
a1:66:11:cf:b5:ab:27:76:16:95:9e:c0:e6:d4:25:
d9:88:df:84:38:e1:55:eb:66:22:d0:0a:72:9d:58:
95:fa:cf:fb:d9:49:76:3d:09:04:cc:ed:1e:6d:19:
8e:e0:b4:1c:33:cd:9a:18:4c:1a:3f:e1:1e:28:0d:
51:4d:48:be:6d:46:e9:1e:11:83:17:31:f4:a5:b3:
68:9b:a9:42:a8:db:ee:22:a5:51:92:d0:10:ce:e6:
d8:19:fe:86:ca:46:6a:3f:b3:a0:af:c9:5c:c5:40:
dc:74:b2:ef:a4:91:da:44:1e:a0:1a:17:0b:99:74:
a1:f1:34:b0:9d:0b:cf:e4:a8:31:31:41:56:4a:23:
7e:c1:6c:58:f4:40:15:49:33:fd:82:b9:11:4c:9e:
1c:00:ec:6b:33:b7:9e:92:20:62:c2:4e:b6:c3:2a:
e3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A4:F7:57:E8:02:5E:20:52:97:20:1C:3B:50:F6:D6:63:53:CD:AF
X509v3 Authority Key Identifier:
keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:36:9a:c9:af:49:b6:1d:40:42:44:5c:d2:36:eb:92:9a:5b:
e3:fb:03:ac:e2:dd:f8:00:43:94:25:20:f0:db:6f:6f:9a:05:
f1:6d:f0:82:99:9c:03:42:cd:fd:08:cf:4b:17:b5:07:17:d0:
83:01:fa:81:36:3f:d0:60:03:8b:dd:cc:11:65:42:c7:51:b0:
d6:06:d6:fb:6d:26:b4:b5:bc:4a:26:c5:28:72:a5:dc:3a:8d:
d2:b9:30:c6:58:4d:13:53:03:05:4f:03:0a:26:18:7f:ff:74:
2d:20:b2:05:f9:92:12:f4:99:2c:58:e3:2d:42:05:b3:97:71:
6e:aa:64:63:81:68:ad:6c:ca:28:8a:e1:de:f5:f4:ba:af:48:
05:ee:1b:43:a5:74:26:f1:27:70:ba:e9:e6:26:a8:57:01:65:
b7:2c:36:cb:ae:38:06:fb:04:fc:c9:7e:a3:cd:52:f0:b7:93:
6a:30:50:81:53:56:70:52:0c:4c:d6:2a:33:c5:b7:50:4b:57:
88:f3:6e:9d:20:b3:ce:6a:df:3c:68:5f:0f:6a:33:ae:56:91:
5d:1e:74:d9:7e:93:0b:ec:cf:e2:89:bf:95:78:c1:fe:2e:5f:
bf:e8:39:56:55:6a:fd:95:c0:ee:19:30:22:84:4b:88:04:77:
8d:c3:a1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:05:17 2026 by rpki-client