
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier: h9Xf49bJ/GXVYbC0QwrJHo6Kerg/upTaAtkglUE5My4=
Subject key identifier: 1E:8E:15:D9:AA:67:44:7D:AC:04:80:C8:82:F0:9E:71:DB:E7:14:04
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 01A0D538C67066D68206589BDA6BF3A3C0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number: 1A77
Signing time: Thu 24 Sep 2026 21:01:02 +0000
Manifest this update: Thu 24 Sep 2026 21:01:02 +0000
Manifest next update: Fri 25 Sep 2026 21:01:02 +0000
Files and hashes: 1: 0SdAWy5FbGh2pB-UZZKsGcwkt5M.roa (hash: +N3CbDkY0v4sIs+KAKMovKpqq8wIicumkVCtsw7Q2eE=)
2: 2RHf-9fOIvKsA2VNSiC87nFbCOs.roa (hash: dgDZc/LxnLIjKHM4eGdgAhe4w7g3MVLAoMHC9X1LCgI=)
3: STxyqEZJdelIgYwPQkrFzkgfanw.roa (hash: s65hDXY2ql7cBoPqQwS0YK+flCpqESibXFG1uh5dHgQ=)
4: WnHzbxcWnfjBlVEJkzUqvflkBLA.roa (hash: eI8gIZ4QgUUkSDU1/GTW0FbHxY0wg/TC2Y43t8FWow0=)
5: qXgX-MgGakZBvHLGFfMng5J68aM.roa (hash: tdETsvPamgqJs8d2zdVQ7bKa0GNEeta7JZJxdAHdr5I=)
6: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: ahiSf11EdCD/jk6hJATBISqkIS3ZdhHpASk69TSoSiE=)
7: uljHeXtwPoXTWfqHenoj_DXb3ww.roa (hash: wGmp5Bh78//8aIg6gUIYujT06jT2kqD/3V641rlo7LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:c6:70:66:d6:82:06:58:9b:da:6b:f3:a3:c0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Sep 24 21:01:02 2026 GMT
Not After : Sep 25 21:01:02 2026 GMT
Subject: CN=1e8e15d9aa67447dac0480c882f09e71dbe71404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c3:7a:9e:b2:cb:ed:80:08:0f:ce:9c:8e:73:
ff:56:e8:57:a3:08:aa:4f:90:c7:da:2e:b1:5b:72:
79:43:d2:c2:99:91:12:5d:a8:8f:ff:d2:ee:34:2e:
ea:a5:6d:89:51:70:64:aa:2f:e6:e1:7e:f7:03:ab:
b3:2c:f0:72:17:b7:78:eb:37:77:7b:a8:e4:7d:21:
ef:16:4c:78:41:d9:ff:f8:76:3a:94:f8:7b:6c:db:
01:56:29:fa:1d:f9:74:81:5a:90:19:1c:38:30:15:
e6:97:52:44:37:3a:39:ee:84:56:c3:8d:33:eb:23:
30:fe:cc:57:c3:92:91:c4:29:d0:36:36:16:2e:ec:
d9:d0:c4:fe:a6:b0:08:c6:a1:1c:86:de:0d:da:93:
33:ec:28:dd:3e:56:14:ce:bf:1b:a1:dd:4a:9a:08:
12:79:c3:ed:b9:66:ac:97:a3:53:aa:8d:62:47:cd:
c5:59:bd:4c:fb:78:ac:5d:88:6e:65:26:02:68:51:
07:69:14:c0:38:ed:e5:48:61:dc:57:c6:ed:3b:63:
dc:6f:b3:24:66:4f:e7:d4:69:97:eb:34:35:39:fd:
38:4b:e1:59:fc:ad:8c:7d:13:64:1b:64:9f:e6:96:
a4:51:05:aa:e0:76:b9:28:09:33:b6:83:7f:d9:de:
67:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8E:15:D9:AA:67:44:7D:AC:04:80:C8:82:F0:9E:71:DB:E7:14:04
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3c:1b:51:bc:2e:76:d9:c1:d2:be:68:7c:d6:ea:7e:c3:e5:
6b:95:a7:7a:9b:2d:79:1e:ad:09:0c:a2:21:21:2d:92:b4:30:
63:d7:14:34:e8:92:2d:d4:8c:97:32:8a:b7:11:32:8a:be:78:
42:f3:6f:12:2b:62:89:c3:e8:27:95:c0:83:92:7c:25:4a:a2:
8c:54:ef:49:6e:26:05:45:03:4e:27:71:ce:fb:10:5a:73:62:
f5:f7:51:b9:73:10:59:6d:9a:84:30:98:57:eb:4a:48:94:91:
61:ad:6d:26:ac:ec:2a:0f:bc:8d:8c:96:15:bd:72:45:a4:b3:
e2:38:4f:8c:b4:d8:c2:e3:b7:b7:3c:e9:ef:6c:a1:2c:c4:f4:
7c:6b:c4:22:65:9e:0f:62:bc:19:0c:d7:84:4f:65:79:d1:d7:
3e:ec:37:26:89:1b:8c:a4:8d:c5:67:e5:a1:c0:80:fb:4b:98:
dd:30:fe:87:7c:a8:bf:02:b9:88:91:4f:59:6f:5d:89:4c:ed:
19:f2:aa:f6:b6:dc:d0:20:2e:76:c7:3d:71:49:d9:fe:ea:ad:
27:4b:32:cc:7f:ec:43:ec:b4:b9:26:9f:09:c9:35:c7:f6:60:
cb:cd:6d:62:34:c7:72:29:ea:67:a4:df:5b:7a:9f:ca:4e:c7:
bf:4a:05:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:18:34 2026 by rpki-client