Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
File: koDT5GcpaPhuiVXbYgy3ZdudcUI.mft (raw, json)
Hash identifier: sHoNQuUErbaaGmYs0NCVl59tzgVxqUmIhHT/c1BPEuw=
Subject key identifier: 5C:38:65:11:59:03:20:9F:34:D6:95:66:88:DB:59:F8:A8:69:1A:8E
Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
Certificate issuer: /CN=9280d3e4672968f86e8955db620cb765db9d7142
Certificate serial: 01A119750092089418317EBD8AAB5C5A10BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
Manifest number: 0EC1
Signing time: Thu 08 Oct 2026 03:01:00 +0000
Manifest this update: Thu 08 Oct 2026 03:01:00 +0000
Manifest next update: Fri 09 Oct 2026 03:01:00 +0000
Files and hashes: 1: koDT5GcpaPhuiVXbYgy3ZdudcUI.crl (hash: 7FZdGqpMjUmA/zL4S2x6D1rSB07GDFJ8LY3dATb16kU=)
2: lDc3tS_p7tCgEhrNKf_-eSIcLqg.roa (hash: kzElkKos01LmCGpTnk/MyVTZjZ5HsnG3CnANkjfIhL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:75:00:92:08:94:18:31:7e:bd:8a:ab:5c:5a:10:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142
Validity
Not Before: Oct 8 03:01:00 2026 GMT
Not After : Oct 9 03:01:00 2026 GMT
Subject: CN=5c3865115903209f34d6956688db59f8a8691a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:5e:c8:a1:d5:ae:60:e8:86:5c:df:7d:c2:
08:e0:09:26:4f:db:6c:a4:92:33:09:66:4d:06:2d:
58:6e:d8:fb:07:02:d3:37:94:8d:16:2e:49:91:39:
e6:32:67:c5:71:d9:e9:a9:55:5a:47:7b:fd:11:ac:
68:68:b5:9e:0a:b5:96:50:0d:26:5c:f6:34:90:5b:
fe:74:4b:0b:ee:a7:a3:03:53:ab:06:07:21:43:b1:
30:8a:e7:c6:da:4c:29:cd:16:3a:c4:ae:0b:f2:b1:
83:0a:6f:fd:0f:9b:0d:b8:14:72:92:9f:23:84:6e:
98:fd:87:0b:fa:f3:66:a4:cc:7a:e6:9d:a5:ad:51:
6b:39:28:8b:ad:6d:fb:26:05:a3:5b:29:df:e2:a2:
80:1e:89:bc:87:44:16:15:56:ab:87:15:f8:dd:08:
05:87:ba:37:93:57:6b:ea:72:d6:1d:19:28:79:40:
8c:c6:8f:7a:4f:4f:1a:0f:97:b6:ce:d8:e3:17:76:
72:13:5e:09:d9:1a:31:95:80:86:91:dd:20:c3:aa:
0f:27:c0:dd:93:b5:f6:85:0e:dd:e6:7d:a5:6c:e6:
05:19:57:12:95:03:f3:1f:d5:4c:09:85:8c:a5:7a:
9c:3c:35:72:35:74:17:43:13:75:a5:16:4f:af:b7:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:38:65:11:59:03:20:9F:34:D6:95:66:88:DB:59:F8:A8:69:1A:8E
X509v3 Authority Key Identifier:
keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9c:72:70:b8:64:cd:5d:aa:11:e3:c3:c9:9f:01:ff:e9:47:
99:5e:cd:95:2f:68:25:7b:bb:fb:ae:0f:f1:c1:16:35:1c:f2:
2a:06:9d:49:88:a2:bd:4a:d3:4e:00:b2:33:32:ce:56:13:40:
e7:10:32:88:62:3d:06:14:6e:b1:37:79:58:da:7c:a8:ec:bc:
95:c7:1c:13:f5:d5:70:9f:21:d4:7a:c7:85:26:7d:dc:8c:2d:
4f:3e:34:5b:30:85:a0:0f:05:50:d3:c8:7f:71:7a:45:04:88:
da:0e:0d:e4:d3:50:b8:72:5f:88:e4:17:e2:a7:82:2c:54:85:
6e:1b:38:b5:b5:5e:55:d9:22:b1:bc:4f:fe:ff:ff:49:e5:be:
e6:e6:15:27:15:98:3d:8f:0f:36:87:61:32:11:da:d8:5d:1b:
fb:49:e1:3f:e2:b0:29:a4:00:b2:07:63:42:f8:b3:31:0f:83:
a4:e2:74:a8:d4:d5:84:89:86:19:bf:59:b3:9d:84:3f:04:9d:
16:c9:78:ca:cf:e7:b4:69:27:33:53:2a:44:7c:ed:2b:2b:c8:
e5:19:5a:3a:9f:84:bf:02:82:7f:bf:12:28:b2:0e:87:de:e3:
18:39:ca:40:c1:21:90:e1:52:33:df:1d:1d:92:ec:ac:23:b2:
5e:8b:b4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:26:30 2026 by rpki-client