Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
File: rKjs_uUfaNX4A6rm-_wf3EGQJio.mft (raw, json)
Hash identifier: poGCBwoYQuWlGfRi7VCnJjuVaOU5tBpYpOndzMWJ8xo=
Subject key identifier: 2A:73:A4:B5:53:71:42:AD:59:1C:4C:94:1E:DD:00:75:02:EC:E5:CA
Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Certificate serial: 019F8EA2775B27D7FBDD1B69A65448F5BF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
Manifest number: 10FC
Signing time: Thu 23 Jul 2026 11:00:39 +0000
Manifest this update: Thu 23 Jul 2026 11:00:39 +0000
Manifest next update: Fri 24 Jul 2026 11:00:39 +0000
Files and hashes: 1: FPyM8uE4L6Nml7nHO2klAcUhOyU.roa (hash: dlXbUtTSWpw7O4SezJZ5EEDYXStl7ouFc1E3qpPS7+w=)
2: H1UVQZ89iZ3QoOMJQlSL-pRIpHc.asa (hash: viSqpgv5yYa0kBcTuuw6i+3Lf2WB/KOVlUJ9JqjFvHo=)
3: rKjs_uUfaNX4A6rm-_wf3EGQJio.crl (hash: Eq7jy21YYhP5zXgLtaHFr1eQbQyEQ/5P6P0TaJ/ePXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:77:5b:27:d7:fb:dd:1b:69:a6:54:48:f5:bf:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a
Validity
Not Before: Jul 23 11:00:39 2026 GMT
Not After : Jul 24 11:00:39 2026 GMT
Subject: CN=2a73a4b5537142ad591c4c941edd007502ece5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:d0:4f:a4:22:72:23:f6:a7:1f:1e:b2:f5:
57:02:c6:b4:de:55:de:40:88:39:58:39:d9:bf:28:
c7:b5:1c:06:cb:95:c5:4d:cb:0a:e6:c9:2a:17:04:
10:03:e3:a9:49:28:3c:7b:40:a5:33:bd:f9:f0:2d:
85:c4:53:9f:b2:1f:74:49:f9:48:7e:6a:c1:df:da:
00:52:de:9c:b8:70:13:f2:23:5a:9b:34:de:09:e9:
65:a2:c0:f7:53:1d:45:94:df:86:5e:e0:c7:f4:7b:
05:7f:0d:84:0a:2a:b5:6c:01:88:df:fe:c8:b7:65:
6d:58:69:45:79:c6:0a:12:22:c4:0b:2f:ab:2d:da:
21:05:f5:e0:45:2b:76:d7:12:8e:f9:c9:73:2d:9b:
4b:31:71:65:77:11:fb:b1:b2:50:a7:f8:d9:06:e9:
17:50:6a:91:d0:d3:7b:08:58:8e:7f:f6:0c:75:4c:
e0:03:d9:2d:76:f2:3f:04:6e:dc:76:bd:1a:9d:ae:
31:bd:57:68:d6:de:e4:17:1a:1f:98:a6:4a:c7:73:
2d:4f:a1:d1:45:81:b5:68:dc:6b:25:95:99:21:37:
4b:67:70:fa:a3:20:63:19:16:7d:c4:fc:df:08:07:
a3:90:b8:97:b4:0e:16:24:cc:1d:61:a7:45:9a:14:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:A4:B5:53:71:42:AD:59:1C:4C:94:1E:DD:00:75:02:EC:E5:CA
X509v3 Authority Key Identifier:
keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:40:76:b1:44:11:62:37:ef:2f:83:db:e3:2a:85:39:7b:f1:
c2:8a:f5:e8:25:89:2f:39:0b:af:13:94:dc:c1:0f:a8:24:f4:
3d:ff:31:5f:9e:1e:a8:3b:87:b3:86:45:df:02:b9:8d:4a:02:
52:96:72:ea:c4:d1:bd:97:ac:1c:d6:ec:b4:ef:18:65:2c:e0:
a4:70:cd:06:30:50:a2:e5:1f:21:5c:57:9c:af:25:da:8f:bd:
a1:14:7d:4c:fd:53:4d:05:c7:a0:4b:0c:ef:75:84:ee:12:d8:
a6:22:bf:7b:40:6c:93:27:c4:d7:f4:02:f3:aa:c7:7e:b3:e2:
0e:cf:8b:5b:f1:3e:b0:6f:a2:60:8f:71:51:dd:04:cf:85:4e:
05:05:44:0a:b3:ca:55:6a:3c:78:80:ba:24:f2:b5:39:5e:1e:
3e:e4:71:f3:dc:23:8d:9c:34:ce:79:4c:db:10:76:6c:bd:f8:
b8:27:32:17:bc:9d:ca:ac:a5:aa:9c:96:52:8e:ec:e0:5d:20:
19:cd:73:95:62:c0:ee:fb:5e:42:3d:19:c9:26:91:5c:29:1d:
49:20:0a:85:30:92:3c:d2:e0:ab:7c:93:64:7c:54:a1:45:b5:
d8:c6:8a:8a:7d:d9:8c:0c:9e:f5:01:71:ec:b9:2c:1a:f2:d2:
2f:58:89:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:47 2026 by rpki-client