Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
File: koDT5GcpaPhuiVXbYgy3ZdudcUI.mft (raw, json)
Hash identifier: Ym0F7Ylc0JfzErgZwm3EYM4ut3qsFKA0GrfUsvtaNok=
Subject key identifier: 17:06:6C:3A:D8:A3:D7:AE:4C:69:E3:B5:94:CE:B8:8C:6E:87:53:DA
Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
Certificate issuer: /CN=9280d3e4672968f86e8955db620cb765db9d7142
Certificate serial: 019E209210CF942F91127CEAAC5CC23A81ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
Manifest number: 0D37
Signing time: Wed 13 May 2026 09:01:43 +0000
Manifest this update: Wed 13 May 2026 09:01:43 +0000
Manifest next update: Thu 14 May 2026 09:01:43 +0000
Files and hashes: 1: koDT5GcpaPhuiVXbYgy3ZdudcUI.crl (hash: /mBSjJshZ2+Lwjt9Bfgdw2iTbplmSGoNAiM4lzXdG2k=)
2: lDc3tS_p7tCgEhrNKf_-eSIcLqg.roa (hash: kzElkKos01LmCGpTnk/MyVTZjZ5HsnG3CnANkjfIhL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:10:cf:94:2f:91:12:7c:ea:ac:5c:c2:3a:81:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142
Validity
Not Before: May 13 09:01:43 2026 GMT
Not After : May 14 09:01:43 2026 GMT
Subject: CN=17066c3ad8a3d7ae4c69e3b594ceb88c6e8753da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:97:ae:bc:35:fb:5c:da:63:00:b6:9f:1f:0a:
a1:6d:4a:2b:33:9c:11:44:47:d7:89:8f:ff:60:f5:
b9:ed:49:eb:dd:5f:a6:34:ce:21:7a:f1:ac:c1:21:
ec:53:c6:4e:ac:1c:af:0d:11:09:c7:68:1c:a7:af:
31:d0:ea:31:44:cf:a2:9d:6c:84:36:9d:65:ac:c5:
d8:ff:8d:2b:0f:4a:d7:fc:18:f2:03:a6:ab:e7:3f:
97:0b:00:f0:6d:85:bc:b3:bf:a3:ab:5a:1b:c0:1f:
90:97:d6:4f:dd:4f:02:9c:25:64:d7:0d:b1:01:3e:
dc:a8:eb:cd:b7:03:e7:5f:06:6e:c6:f2:22:a9:45:
a0:c0:1f:35:98:3e:fc:4b:f9:3b:1b:c2:78:3e:28:
c5:c7:36:41:4f:32:c9:4e:38:d7:6b:ec:7b:6f:c0:
e6:de:99:1d:40:64:dc:46:c8:d1:fe:57:ce:8e:0d:
66:48:a6:68:6a:87:b4:d4:64:6b:ca:0c:6a:c3:9e:
4b:d7:14:33:0c:82:7d:c7:3a:b0:f5:4a:5b:21:bc:
93:62:ea:e5:2e:ce:0d:0b:ab:40:a3:b1:08:97:66:
29:aa:e0:be:06:fd:a2:76:f3:1b:da:82:7b:00:a5:
d9:46:58:8a:5a:e7:4d:0c:d8:9a:99:72:c3:3a:8a:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:06:6C:3A:D8:A3:D7:AE:4C:69:E3:B5:94:CE:B8:8C:6E:87:53:DA
X509v3 Authority Key Identifier:
keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e2:30:b3:03:69:40:b4:72:07:31:5c:84:04:dd:03:ff:86:
40:71:9e:6a:2c:55:14:0f:0c:9e:f3:03:2f:93:c8:a0:93:91:
d2:99:7b:5c:3e:1c:5d:f9:31:fa:60:86:a4:9f:78:c9:e7:39:
bf:de:43:49:46:13:6b:ff:49:fb:2f:36:db:f3:19:bd:0f:fe:
5f:c3:a8:8f:3e:6c:e8:d7:ad:a0:41:63:a9:38:fe:01:d7:b7:
c1:56:4e:d1:0e:40:4b:16:27:56:17:07:2d:38:4b:a7:70:43:
27:76:bd:89:90:85:a5:f0:71:47:b9:e8:1c:5f:e3:60:8d:b2:
fc:b4:da:ec:3f:4b:a0:6e:8b:53:d6:3a:d9:9c:46:aa:f8:7d:
4c:e8:60:c5:58:73:63:3b:af:14:30:15:67:7b:9a:89:03:cd:
95:8d:20:97:05:fa:50:5b:10:1e:c2:3c:69:12:db:aa:96:92:
ca:69:7b:97:26:28:e1:e5:b4:92:74:c3:73:b7:bc:dd:7d:bc:
7a:85:70:dc:8a:68:16:10:04:7d:01:9e:ff:1f:fa:b0:f2:66:
8f:72:a5:9d:a5:fb:08:24:e6:5f:62:83:48:58:a7:4a:8b:05:
f8:2a:73:9b:ae:51:88:97:30:fa:e5:34:26:26:20:e2:6e:df:
91:65:1b:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkhDPlC+REnzqrFzCOoHtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyODBkM2U0NjcyOTY4Zjg2ZTg5NTVkYjYyMGNiNzY1ZGI5
ZDcxNDIwHhcNMjYwNTEzMDkwMTQzWhcNMjYwNTE0MDkwMTQzWjAzMTEwLwYDVQQD
EygxNzA2NmMzYWQ4YTNkN2FlNGM2OWUzYjU5NGNlYjg4YzZlODc1M2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJeuvDX7XNpjALafHwqhbUorM5wR
REfXiY//YPW57Unr3V+mNM4hevGswSHsU8ZOrByvDREJx2gcp68x0OoxRM+inWyE
Np1lrMXY/40rD0rX/BjyA6ar5z+XCwDwbYW8s7+jq1obwB+Ql9ZP3U8CnCVk1w2x
AT7cqOvNtwPnXwZuxvIiqUWgwB81mD78S/k7G8J4PijFxzZBTzLJTjjXa+x7b8Dm
3pkdQGTcRsjR/lfOjg1mSKZoaoe01GRrygxqw55L1xQzDIJ9xzqw9UpbIbyTYurl
Ls4NC6tAo7EIl2YpquC+Bv2idvMb2oJ7AKXZRliKWudNDNiamXLDOooxVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcGbDrYo9euTGnjtZTOuIxuh1PaMB8GA1UdIwQY
MBaAFJKA0+RnKWj4bolV22IMt2XbnXFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva29EVDVHY3BhUGh1aVZYYllneTNaZHVkY1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81OWRhNTAtYWVkYi00OTA2LWFmMTkt
MDkwZmUzZGEyNDMzLzEva29EVDVHY3BhUGh1aVZYYllneTNaZHVkY1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81OWRhNTAtYWVkYi00OTA2LWFmMTktMDkwZmUzZGEyNDMz
LzEva29EVDVHY3BhUGh1aVZYYllneTNaZHVkY1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAneIwswNp
QLRyBzFchATdA/+GQHGeaixVFA8MnvMDL5PIoJOR0pl7XD4cXfkx+mCGpJ94yec5
v95DSUYTa/9J+y822/MZvQ/+X8Oojz5s6NetoEFjqTj+Ade3wVZO0Q5ASxYnVhcH
LThLp3BDJ3a9iZCFpfBxR7noHF/jYI2y/LTa7D9LoG6LU9Y62ZxGqvh9TOhgxVhz
YzuvFDAVZ3uaiQPNlY0glwX6UFsQHsI8aRLbqpaSyml7lyYo4eW0knTDc7e83X28
eoVw3IpoFhAEfQGe/x/6sPJmj3KlnaX7CCTmX2KDSFinSosF+Cpzm65RiJcw+uU0
JiYg4m7fkWUbSw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:31:49 2026 by rpki-client