Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
File: RKw-QPgEbPOHzJFwxdFifUIh190.mft (raw, json)
Hash identifier: 03G7swORv+6EAL9bQ8osbJ6kqy409Q5qmJs6ggyZsRw=
Subject key identifier: D0:90:F3:17:E3:22:1A:74:29:35:02:AB:39:44:42:05:94:39:FD:35
Authority key identifier: 44:AC:3E:40:F8:04:6C:F3:87:CC:91:70:C5:D1:62:7D:42:21:D7:DD
Certificate issuer: /CN=44ac3e40f8046cf387cc9170c5d1627d4221d7dd
Certificate serial: 01A0E3639878A00D7DAFCA8BD8541AE77869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
Manifest number: EF
Signing time: Sun 27 Sep 2026 15:02:30 +0000
Manifest this update: Sun 27 Sep 2026 15:02:30 +0000
Manifest next update: Mon 28 Sep 2026 15:02:30 +0000
Files and hashes: 1: RKw-QPgEbPOHzJFwxdFifUIh190.crl (hash: emw3wEvnaVSSwewjf9hQRHnh7io7QFaAKECqn3vyboQ=)
2: SVKbgAlazhSBrSFI_Vfp0bKjVhY.roa (hash: 7TPEHCfibMPRsy9xSphGCCfugTiCDmZv7qGFp4wnVmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:98:78:a0:0d:7d:af:ca:8b:d8:54:1a:e7:78:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ac3e40f8046cf387cc9170c5d1627d4221d7dd
Validity
Not Before: Sep 27 15:02:30 2026 GMT
Not After : Sep 28 15:02:30 2026 GMT
Subject: CN=d090f317e3221a74293502ab394442059439fd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:75:d5:41:3b:86:19:75:63:31:d6:92:db:
99:a2:5c:7d:ca:7f:b5:2f:93:56:12:a0:f0:5b:50:
ba:59:14:6d:d4:16:cb:3b:02:c0:81:a5:34:44:7d:
32:ef:32:5f:83:cb:ae:aa:1a:7b:d1:11:b3:7b:af:
92:b1:7f:6f:bd:83:ca:1f:18:55:cf:81:b5:e2:aa:
83:7d:12:16:c7:91:d9:fc:cf:09:28:ff:30:db:b0:
4a:f5:aa:0f:1c:0e:9c:bb:22:12:02:90:d0:5d:dd:
f0:20:08:b6:ae:b4:7a:55:82:ff:c0:d8:07:fd:e5:
67:28:37:08:ff:f8:cc:6d:b4:ef:52:26:31:7c:fb:
51:72:fd:11:5b:93:17:aa:9d:dd:b3:79:7e:76:c7:
dd:46:f9:46:5b:81:c6:de:b6:a0:ad:20:c0:b8:84:
90:10:1a:79:cc:28:57:b7:e3:d6:56:34:c7:38:95:
0a:f7:20:81:02:d9:c7:4e:19:4c:e8:ea:09:99:37:
88:36:ae:d8:76:d3:c3:eb:5f:44:27:e0:15:f0:29:
5f:e6:c1:44:0d:47:71:51:b9:51:cd:e7:db:ab:56:
96:0e:f8:5f:04:43:dc:f2:ce:95:cf:05:ef:00:b8:
0e:6a:ef:b2:5c:b3:90:4e:79:16:85:a8:79:ed:06:
2b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:90:F3:17:E3:22:1A:74:29:35:02:AB:39:44:42:05:94:39:FD:35
X509v3 Authority Key Identifier:
keyid:44:AC:3E:40:F8:04:6C:F3:87:CC:91:70:C5:D1:62:7D:42:21:D7:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5f:b4:40:85:f9:94:3c:c4:0a:9f:0d:83:03:48:c0:db:d2:
f7:2e:b9:d8:91:88:97:a7:c0:d3:fc:a7:ed:49:ea:81:04:9f:
42:fc:6b:f6:71:b9:ad:2c:64:76:31:ed:ad:cd:d1:9e:c3:c6:
79:90:18:76:36:79:31:a6:35:1c:9a:ce:56:42:6e:36:05:7e:
9c:bc:49:64:9c:17:b1:78:0d:aa:53:5a:b9:3b:b1:c8:18:68:
9f:49:88:fa:50:f7:4f:84:5a:8f:7b:0c:1e:e9:d9:49:b3:08:
1b:c5:05:39:ec:c3:57:77:f4:0b:6a:95:69:1e:c5:9a:25:f7:
b6:45:93:d2:79:fb:00:a7:f0:ce:f0:27:c6:2c:a5:1b:b3:9b:
d7:d4:9a:6a:d6:98:ee:49:1d:3e:4f:06:de:f9:2e:7c:f7:b6:
06:de:79:62:5d:3c:b5:b2:d2:36:fc:c3:5c:8c:35:43:76:b9:
07:22:07:28:32:22:b4:49:f6:31:0b:27:59:c1:dc:12:49:13:
d3:f1:6e:48:82:b9:e8:02:a1:b8:c3:0e:58:ad:27:45:f5:a6:
0b:e8:09:7a:fd:cf:ef:8e:4e:0e:c4:a5:9e:54:38:48:10:17:
e8:5e:f8:33:59:4a:d5:ec:40:9e:95:75:6b:48:f9:ce:3d:08:
99:f3:73:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:36:17 2026 by rpki-client