Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: VcCEitC+jV8RrLV3CagjYjU5TCPiW9vZBvtT7cVQ/gs=
Subject key identifier: E1:1B:1C:AF:A0:10:3B:8E:4A:60:09:B4:C4:FB:6F:D6:71:03:5C:20
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 019D24DEE13283C56477E666835C96CF490E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 0FBC
Signing time: Wed 25 Mar 2026 12:01:19 +0000
Manifest this update: Wed 25 Mar 2026 12:01:19 +0000
Manifest next update: Thu 26 Mar 2026 12:01:19 +0000
Files and hashes: 1: FPyM8uE4L6Nml7nHO2klAcUhOyU.roa (hash: dlXbUtTSWpw7O4SezJZ5EEDYXStl7ouFc1E3qpPS7+w=)
2: MuGN2Hka5jz3uKEmny_HpiiDodE.asa (hash: 6xt+FPkYOOMIE89vAz2BiI+yVSDgp4pZb6MQ1N+deOs=)
3: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: zNAL1nviVQBEh0onRu4gVutPkpJ54HLcYLcslMzMiqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:e1:32:83:c5:64:77:e6:66:83:5c:96:cf:49:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Mar 25 12:01:19 2026 GMT
Not After : Mar 26 12:01:19 2026 GMT
Subject: CN=e11b1cafa0103b8e4a6009b4c4fb6fd671035c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f7:44:13:bd:2b:cb:13:11:9e:0d:58:d4:fc:
b6:ea:28:f7:bb:4f:34:32:8f:a0:40:b7:32:a1:b1:
2b:45:63:61:bf:33:10:12:71:d1:99:13:57:d1:b8:
ab:6c:c7:ea:c0:f5:a4:30:27:28:e7:1b:72:ec:f7:
7e:ba:ff:6a:90:2b:4b:98:b4:3b:12:dd:29:3e:84:
14:47:a5:02:7a:7c:55:b2:6c:2b:90:d8:70:71:8e:
f1:c4:df:e6:7c:00:e9:99:91:10:d0:e3:15:3f:a0:
8c:20:6e:22:5c:5a:bd:a2:4b:ac:bb:b1:90:7a:67:
7e:17:5e:ea:fe:e6:65:18:51:2b:2c:e0:0b:9a:f0:
fb:e1:a8:67:12:c2:9b:6a:7f:c4:72:9e:7b:b6:bb:
b7:a2:f0:7e:66:f4:ab:e0:d7:52:c2:c8:d6:35:7f:
89:30:4c:bc:e1:4c:2d:0d:26:d3:e9:60:af:07:c0:
9a:99:24:37:c0:a8:3f:ca:48:24:fa:9b:86:bd:3f:
db:d7:43:0d:6e:47:22:76:e6:72:6c:d6:66:22:36:
21:e7:5d:02:8a:bc:31:e6:72:4b:9c:37:b3:e0:53:
e8:f0:45:f9:29:06:d3:64:59:ed:0b:53:88:34:95:
78:2d:28:4b:1f:f3:a3:70:b2:ae:c7:31:c3:f0:16:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1B:1C:AF:A0:10:3B:8E:4A:60:09:B4:C4:FB:6F:D6:71:03:5C:20
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:df:0f:c4:c9:21:da:39:12:6b:99:37:ec:4f:95:28:29:c1:
50:06:5f:e1:0f:98:81:2b:41:dd:f3:5c:b4:f7:aa:57:f1:46:
6b:7b:a0:72:3a:c2:8e:47:a1:06:7d:66:f5:a1:54:10:69:6d:
75:aa:fe:6b:e0:c8:e3:19:73:b0:76:62:a3:d2:4b:ad:ff:e4:
99:67:6e:a8:2a:e7:8f:1d:c8:7c:04:73:c0:54:00:4a:13:c2:
52:ae:1d:0e:86:73:f8:4e:bd:c2:42:9f:54:17:de:88:f5:ab:
0d:dd:91:9b:35:74:07:c9:ca:24:93:36:43:fd:e6:99:09:2c:
1e:19:26:4b:05:44:45:0b:a9:fb:82:c3:c8:13:64:c4:6b:2e:
20:4c:c5:f0:3b:6f:08:b7:85:e8:23:f2:d0:db:2a:7b:d2:d7:
d1:12:5b:13:69:06:93:35:9a:f1:ea:b8:24:b9:e9:07:93:b7:
dc:4d:86:ea:a9:21:75:6a:fe:b3:09:cb:bb:1f:8a:02:92:23:
00:53:d8:fe:a0:4f:a0:18:e9:2b:07:9b:58:03:bd:9e:8a:70:
d8:ab:a4:1d:75:75:69:67:21:bd:63:9d:f0:98:cb:10:98:08:
30:c5:29:b1:9a:84:70:67:94:9f:11:1d:b4:1f:0f:21:a5:65:
57:78:53:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:38:21 2026 by rpki-client