Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: mJqVujH5jxwT5mRDztvM/nlKTTRnZRMLv8Guxb+KqMo=
Subject key identifier: D4:2E:0F:5B:D1:D0:48:06:AC:16:60:32:E8:9A:D5:10:D3:A4:E8:81
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 01A0D34ADDD4F31B139D8865B4D00CB995D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 185D
Signing time: Thu 24 Sep 2026 12:01:34 +0000
Manifest this update: Thu 24 Sep 2026 12:01:34 +0000
Manifest next update: Fri 25 Sep 2026 12:01:34 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: 6fvZT1Gs75kgd6kBZkxdjJhi/YWjf9l3R6FeE9oko5o=)
2: GoeVKkXV9KennXFFcSaLbR3SUT4.asa (hash: +e3JEyEvlmDvyKfQ88OWzaojqU5e4fHq1z//PA0aN/4=)
3: yq5Siwl4i3jmM8YcRC0pxHMIUlk.roa (hash: nGkz7j5CjWTfBWr6c+S9Cs2//HPjWw5q8jEucRFb/jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:dd:d4:f3:1b:13:9d:88:65:b4:d0:0c:b9:95:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Sep 24 12:01:34 2026 GMT
Not After : Sep 25 12:01:34 2026 GMT
Subject: CN=d42e0f5bd1d04806ac166032e89ad510d3a4e881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:be:79:9b:42:8b:d8:58:5b:3f:d0:14:4b:
9a:e8:17:50:11:d3:c3:a3:40:4c:c8:9d:3a:dd:c0:
ec:5c:85:8a:c6:49:2a:2b:61:bf:d8:69:cb:a8:ef:
f2:16:23:c5:df:0d:16:b4:01:ae:9a:b3:0e:2e:ef:
76:be:cf:98:a1:83:a9:d6:cb:95:3c:35:f7:52:0b:
b3:18:2e:88:dc:1f:2e:5c:c7:d1:7e:42:5f:d0:ef:
d3:dd:4c:96:b7:2a:81:48:29:4f:68:83:33:c6:7d:
17:de:36:7f:0b:9c:f7:fd:f9:27:10:cf:87:e9:fc:
eb:07:60:22:5e:b8:ed:de:07:dd:32:04:fa:10:e5:
c9:15:ff:8c:a5:fa:61:35:a8:ef:00:84:e2:30:aa:
65:56:aa:49:58:d0:0f:37:63:f3:eb:18:a5:64:de:
bb:60:b5:a2:b9:76:96:2b:7a:c0:00:04:89:60:b5:
63:05:84:27:4a:99:82:5f:cf:98:5b:0b:49:bf:b2:
74:1b:70:76:ce:48:ee:8a:07:8a:70:47:38:e4:f1:
75:ab:80:7e:20:be:d8:08:a6:ef:ad:27:2d:e1:24:
93:23:f9:6a:8a:23:1a:34:98:b8:67:4e:59:fc:1b:
19:e5:c6:9f:1c:18:85:0d:af:c3:a3:b9:41:6f:50:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2E:0F:5B:D1:D0:48:06:AC:16:60:32:E8:9A:D5:10:D3:A4:E8:81
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c0:ef:73:68:f3:0a:08:d8:a1:8b:5e:69:16:cc:5a:f5:d8:
6d:db:0d:ba:21:c4:f5:da:50:29:44:d9:28:59:1b:cd:d4:28:
6c:8f:0c:f1:61:40:37:89:3f:0d:f9:da:fb:f7:36:8e:d6:bc:
d5:63:cc:2e:08:ee:2e:92:07:77:d8:6d:3b:79:90:20:92:14:
15:a0:1e:29:58:a3:84:02:cd:95:9b:0a:62:f1:c9:26:c7:ff:
f8:c9:22:e0:e1:42:59:4e:0d:ae:bc:cc:d9:f5:2a:7a:ef:d3:
b2:89:06:b6:09:19:12:68:fd:0a:1c:76:e1:95:65:98:12:6e:
cc:16:a6:f1:e8:b5:9e:0b:ce:19:64:26:96:89:cd:bc:da:2a:
3b:68:cf:cb:10:cf:08:33:58:74:69:e6:12:47:f4:af:99:00:
d4:a9:04:75:43:d7:e6:c2:03:89:ac:7a:a3:be:18:f3:c0:4c:
18:5d:b6:b9:2e:97:eb:c6:ea:3c:9e:01:3c:a3:91:f2:1a:35:
c5:ef:33:3c:76:8c:c1:32:88:39:3b:05:56:37:4b:05:99:65:
6b:f6:0b:03:d4:da:9b:6d:cd:7c:ba:c2:fa:88:03:50:2d:ad:
00:07:52:1c:a5:62:e0:89:32:99:47:53:e6:e1:31:c7:ce:71:
d0:b4:70:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:31:20 2026 by rpki-client