
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier: ScWNOudd7RohFTBH6rWrRSPuPw57HtS+gUZydSKUqAM=
Subject key identifier: 12:C7:92:61:F5:54:EE:C5:1D:33:21:55:E1:F0:68:46:88:E1:BC:BB
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 019D25843E254DE64703205B7BFF5EC6A52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number: 188D
Signing time: Wed 25 Mar 2026 15:01:56 +0000
Manifest this update: Wed 25 Mar 2026 15:01:56 +0000
Manifest next update: Thu 26 Mar 2026 15:01:56 +0000
Files and hashes: 1: STxyqEZJdelIgYwPQkrFzkgfanw.roa (hash: s65hDXY2ql7cBoPqQwS0YK+flCpqESibXFG1uh5dHgQ=)
2: r3hgF8w2ISQEvnYVws0uagdgXaQ.roa (hash: fTPQMjGaJ6jaiZa2YYhiWQOETzK7JUfg3B1DmMWkq3g=)
3: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: W9/3vySTtgiUXcZ0Al0s1kUSVA9lH12OOWETbj3XELg=)
4: uljHeXtwPoXTWfqHenoj_DXb3ww.roa (hash: wGmp5Bh78//8aIg6gUIYujT06jT2kqD/3V641rlo7LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:3e:25:4d:e6:47:03:20:5b:7b:ff:5e:c6:a5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Mar 25 15:01:56 2026 GMT
Not After : Mar 26 15:01:56 2026 GMT
Subject: CN=12c79261f554eec51d332155e1f0684688e1bcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:35:28:2c:c2:b0:5e:31:ca:6f:2a:fb:e5:f3:
62:a5:82:f8:37:4d:f4:17:1b:06:b6:18:1c:c2:43:
d0:aa:a2:b1:27:a5:72:5a:33:e7:7c:7b:ce:3e:98:
97:46:6f:44:97:7d:ea:d5:9c:1d:b3:42:16:82:25:
96:20:63:55:26:51:1c:ed:16:72:e8:ac:e5:9a:44:
52:db:49:7e:33:73:ba:cb:67:5d:95:af:50:45:fa:
c1:f4:74:a8:da:b9:6b:bd:14:5b:ac:36:f0:e0:47:
14:5a:3c:e8:35:2a:47:5f:f5:a2:da:f7:70:36:a1:
0e:08:44:90:77:ab:b6:06:30:b0:b4:7a:11:85:d3:
e6:a9:cd:0c:b9:c6:77:fd:d9:22:88:52:ed:45:d4:
42:be:83:4a:e2:82:0c:e4:2a:06:3e:48:18:16:92:
2c:7d:ab:05:d0:32:6c:46:52:ed:05:71:50:6a:36:
41:f8:7a:f1:be:4a:04:92:4d:5b:27:50:6f:84:41:
a1:7e:e0:39:74:f4:2b:b7:17:15:2a:02:2f:18:00:
7c:71:d9:0e:e4:a4:d1:92:33:b4:51:bb:16:9b:48:
03:b9:60:f6:37:68:75:97:7f:1c:cb:a4:ba:a3:c6:
a2:36:4d:f4:b8:94:66:b8:1e:bd:c7:9a:95:61:49:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C7:92:61:F5:54:EE:C5:1D:33:21:55:E1:F0:68:46:88:E1:BC:BB
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:85:ca:d0:10:2c:b3:ad:bc:58:b5:ea:f1:d1:06:09:42:36:
7c:80:df:86:67:82:bf:60:ce:3e:2c:8d:f1:0a:a5:1a:4b:d3:
da:c3:63:0a:ef:9c:df:bc:07:13:0e:c9:c9:1b:ef:fa:03:cc:
eb:be:1e:14:c2:c4:ab:d3:f0:30:ae:ad:47:f1:e5:49:75:ea:
25:85:d8:cb:62:87:03:df:ca:f5:cd:44:65:64:1d:08:41:8f:
f8:50:cc:40:00:c3:d0:ee:c7:5e:af:61:68:86:b2:fa:34:95:
b1:c4:92:b1:53:41:58:8c:6a:2c:3e:ca:ed:d7:ec:4c:ef:22:
65:7a:ed:22:8b:3c:b8:89:3b:7c:02:33:f9:49:f3:e9:e5:74:
70:25:31:df:44:22:20:a3:97:22:78:b9:1f:7f:3a:11:5f:dd:
a9:6b:a5:ed:e2:87:39:e4:0a:83:24:5a:b6:65:7c:f8:68:46:
07:73:62:11:1a:25:c8:cd:a3:e6:69:d6:5a:b0:96:bf:b2:c2:
fb:17:36:fa:4c:f9:e7:4b:13:b4:22:2a:bc:47:47:a0:07:29:
47:23:77:b9:40:13:70:a4:eb:2a:53:45:42:a9:44:41:39:ac:
60:7c:55:f8:ca:01:73:ce:53:6b:29:51:06:86:eb:b3:5b:b9:
70:6f:3b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:18 2026 by rpki-client