Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
File: koDT5GcpaPhuiVXbYgy3ZdudcUI.mft (raw, json)
Hash identifier: Ua3zzHxnEa03AH+2CRBlDeY0TiCvXBtboAiCwxQQnL4=
Subject key identifier: 20:CC:D9:21:97:DE:2D:DC:07:4F:F2:E2:7B:15:A0:51:17:29:81:24
Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
Certificate issuer: /CN=9280d3e4672968f86e8955db620cb765db9d7142
Certificate serial: 019F954986B56A8CC18731E9F0AC4BADAE7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
Manifest number: 0DF8
Signing time: Fri 24 Jul 2026 18:00:51 +0000
Manifest this update: Fri 24 Jul 2026 18:00:51 +0000
Manifest next update: Sat 25 Jul 2026 18:00:51 +0000
Files and hashes: 1: koDT5GcpaPhuiVXbYgy3ZdudcUI.crl (hash: iapSKZn8hnGOlf7QjNzarLhqFAqRM4y+w0nbnCQQHF8=)
2: lDc3tS_p7tCgEhrNKf_-eSIcLqg.roa (hash: kzElkKos01LmCGpTnk/MyVTZjZ5HsnG3CnANkjfIhL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:86:b5:6a:8c:c1:87:31:e9:f0:ac:4b:ad:ae:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142
Validity
Not Before: Jul 24 18:00:51 2026 GMT
Not After : Jul 25 18:00:51 2026 GMT
Subject: CN=20ccd92197de2ddc074ff2e27b15a05117298124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:89:c8:da:e1:8d:9d:56:75:82:c9:88:15:28:
0a:83:5b:df:bd:61:58:9a:5a:7b:e5:85:d9:53:19:
01:6c:14:e0:f5:78:aa:77:4d:db:70:0a:87:1d:c3:
ab:e7:e8:46:b1:08:30:85:9e:73:f2:b6:b9:f6:ea:
85:c4:d9:ee:df:ce:a6:e2:49:03:90:84:f7:77:0e:
97:b5:8e:6d:ec:98:ab:30:c5:cf:61:e8:25:cb:a8:
a8:cb:9f:c5:02:17:7f:f1:dc:89:45:2e:0b:f2:c9:
95:fc:7d:74:fc:16:e5:c9:7e:71:57:1b:8b:1b:24:
54:15:37:ea:67:09:48:72:63:af:95:3f:3a:f5:71:
51:05:e6:a3:6d:33:c6:c1:ea:54:01:a3:34:7b:52:
1f:ab:5a:bd:89:08:e5:7e:50:f6:c7:8c:88:78:fc:
ce:be:6e:64:b6:31:2a:5c:70:88:10:d9:b3:48:cb:
21:d0:67:ee:ac:6e:0d:d0:9a:ec:5b:7b:2c:cd:c9:
eb:3c:0d:51:0d:4f:7d:8f:54:ca:85:db:74:fe:30:
57:62:d8:f9:e4:01:d6:2d:db:3a:c6:5a:be:37:29:
58:26:ee:e8:ae:8b:a0:49:89:53:c6:58:3c:e9:25:
7d:90:46:f2:14:21:f9:0a:08:1e:aa:28:8d:0e:b3:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CC:D9:21:97:DE:2D:DC:07:4F:F2:E2:7B:15:A0:51:17:29:81:24
X509v3 Authority Key Identifier:
keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2a:39:31:dd:4b:22:b2:a3:5a:56:bb:82:22:17:ea:bb:1d:
32:b6:7b:d7:50:ec:30:02:c7:05:e8:8b:5f:3a:1c:ea:06:1e:
ef:97:89:f8:40:ba:06:1c:c1:bc:75:86:a1:d1:6e:23:48:79:
f2:2a:bf:44:6a:11:92:35:78:59:83:05:eb:04:d4:4f:4e:6e:
73:38:a1:00:56:01:1e:de:e0:3c:f2:04:1f:c6:3b:7f:b8:82:
6f:fc:f7:15:ef:a7:c2:6f:7a:e3:8c:93:d6:ee:52:88:39:c3:
6f:ed:10:0d:b3:9b:3b:29:c4:61:a5:e7:d3:dd:1d:89:c2:c6:
f4:b9:10:e9:bb:43:ba:9f:0f:cc:42:e4:2d:39:89:18:df:ef:
bb:2b:14:69:1a:9f:a6:a6:0f:b4:f3:2e:ce:3d:57:31:9a:fe:
ab:82:7f:e2:33:78:5d:f9:61:85:a2:d2:bd:2a:0a:e5:2a:83:
5f:05:79:c0:18:7c:71:02:cd:77:35:f9:43:3b:ba:25:8c:3c:
48:8a:4a:8c:c4:c9:7b:67:dd:98:ea:d1:4a:93:86:9d:fa:73:
4f:b0:40:e8:d6:34:a9:c0:4f:8e:29:cf:12:fe:3b:60:dc:24:
82:73:ed:2a:23:21:e0:3c:6e:20:e7:74:e1:7a:2d:68:71:07:
41:61:2e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:15 2026 by rpki-client