Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
File: koDT5GcpaPhuiVXbYgy3ZdudcUI.mft (raw, json)
Hash identifier: A0sr+2CIV2Qg1kSRUNmrslVCt7ltsctEgA4CPrNVPow=
Subject key identifier: C8:F7:CA:3B:E6:6E:D9:7A:66:A2:EB:83:BB:69:BB:69:CF:F9:28:8B
Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
Certificate issuer: /CN=9280d3e4672968f86e8955db620cb765db9d7142
Certificate serial: 019D277285E8EB9773894DD4494B681C9847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
Manifest number: 0CB6
Signing time: Thu 26 Mar 2026 00:01:49 +0000
Manifest this update: Thu 26 Mar 2026 00:01:49 +0000
Manifest next update: Fri 27 Mar 2026 00:01:49 +0000
Files and hashes: 1: koDT5GcpaPhuiVXbYgy3ZdudcUI.crl (hash: WW4rLuux5y+tj8RFUIqCo2g7WtC0asFY+b/4+sHTZIk=)
2: lDc3tS_p7tCgEhrNKf_-eSIcLqg.roa (hash: kzElkKos01LmCGpTnk/MyVTZjZ5HsnG3CnANkjfIhL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:85:e8:eb:97:73:89:4d:d4:49:4b:68:1c:98:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142
Validity
Not Before: Mar 26 00:01:49 2026 GMT
Not After : Mar 27 00:01:49 2026 GMT
Subject: CN=c8f7ca3be66ed97a66a2eb83bb69bb69cff9288b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:80:93:4e:5d:30:41:99:ae:24:30:41:8a:
53:06:28:04:f9:e3:32:fb:eb:0d:3e:8d:e8:6c:9a:
ec:fb:49:31:c7:d3:b8:64:36:c9:42:2b:84:03:e0:
d7:4e:d8:9d:1d:64:5e:44:bc:9f:0a:9a:8d:55:f9:
80:f4:cb:e2:28:a9:5e:76:89:3e:6b:75:a9:bc:47:
1d:06:58:b6:97:3f:a5:54:b3:11:a6:ef:26:e6:f7:
81:94:6b:ef:c0:50:56:64:20:38:c3:57:4e:bc:cf:
27:54:2e:c6:0e:d9:69:06:75:86:43:f9:47:e1:0f:
c5:e9:dc:d5:6b:c7:f5:cb:a7:fd:22:12:9c:72:29:
3d:97:40:73:cb:fa:15:46:17:17:0d:12:87:69:e0:
e3:d1:7e:90:bf:76:ea:74:5d:28:3c:bc:c9:fa:a8:
1d:80:dc:f2:2c:d1:b0:ab:35:8e:04:dd:57:74:6e:
b2:f5:24:9f:2f:19:45:f6:38:f3:fe:ad:1d:e0:7d:
a7:2b:4a:3e:83:1d:a2:a1:ae:a2:47:a4:f0:ea:cc:
a4:52:50:d9:84:13:e1:6e:76:45:24:db:9d:98:a7:
09:bb:b0:00:59:4f:15:c1:e4:bc:5d:7e:f3:56:ec:
de:87:69:db:d1:7e:56:a6:11:a4:3a:42:1e:bd:0e:
6d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F7:CA:3B:E6:6E:D9:7A:66:A2:EB:83:BB:69:BB:69:CF:F9:28:8B
X509v3 Authority Key Identifier:
keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:33:0a:a7:db:08:98:2b:55:18:f5:09:cb:6d:01:de:b7:1c:
7b:f7:57:60:86:70:f0:ad:99:7e:80:2b:c9:e6:2e:67:f5:45:
96:12:2a:2c:27:46:61:48:16:1b:ea:c6:41:81:66:99:4c:68:
f9:0a:6d:ee:3f:b0:67:00:f4:3a:ad:66:54:24:65:51:eb:52:
62:ba:68:05:d8:51:46:b0:4f:06:81:b7:2d:7b:4c:64:99:c6:
31:84:90:0c:54:51:17:6d:a1:91:78:3d:2d:9d:fa:c2:47:05:
7b:f0:31:60:52:2d:4a:91:a6:0f:a3:b0:2f:3a:2b:ef:c7:22:
1c:7f:3d:db:80:fd:00:73:a8:6d:2d:7f:cf:3b:38:6a:4b:09:
d8:fb:98:15:56:b6:41:72:20:bd:24:2f:a9:d9:ab:03:a0:35:
ab:82:d7:ef:c7:9d:02:00:3a:92:ea:46:86:36:9d:5c:09:46:
07:ac:4e:0d:8f:da:72:bf:00:2a:52:3e:de:26:e7:eb:a2:9a:
3b:e9:4f:f5:ba:97:24:cc:2b:96:75:2a:33:26:11:12:82:0d:
c7:82:de:09:da:ba:3e:9a:7c:f6:cb:71:2e:40:61:a2:fc:7e:
88:e4:ae:28:85:6f:e5:36:49:b5:ac:bd:0a:a9:ac:6e:34:aa:
d4:56:6c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:32 2026 by rpki-client