Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
File: 0kvL9emk_kMp8iPBFFBykFOPnMI.mft (raw, json)
Hash identifier: VhDWFVSNpSAKkZfMtNvopuLOWbPdtAGj+4kLc01ooQA=
Subject key identifier: 11:15:97:5B:07:C5:FB:FF:40:88:66:66:9B:F6:F9:95:99:31:6E:70
Authority key identifier: D2:4B:CB:F5:E9:A4:FE:43:29:F2:23:C1:14:50:72:90:53:8F:9C:C2
Certificate issuer: /CN=d24bcbf5e9a4fe4329f223c114507290538f9cc2
Certificate serial: 01A0D192C4AA2055DA85742DDC82F21D8FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
Manifest number: 15B7
Signing time: Thu 24 Sep 2026 04:00:51 +0000
Manifest this update: Thu 24 Sep 2026 04:00:51 +0000
Manifest next update: Fri 25 Sep 2026 04:00:51 +0000
Files and hashes: 1: 0kvL9emk_kMp8iPBFFBykFOPnMI.crl (hash: 8NkglSD3/qe9JQcLxhqTHo/42oL2JiB6RCu3Bwgy7fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:c4:aa:20:55:da:85:74:2d:dc:82:f2:1d:8f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24bcbf5e9a4fe4329f223c114507290538f9cc2
Validity
Not Before: Sep 24 04:00:51 2026 GMT
Not After : Sep 25 04:00:51 2026 GMT
Subject: CN=1115975b07c5fbff408866669bf6f99599316e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:9a:33:38:e9:17:c9:11:48:27:ac:4f:04:
45:12:e9:55:60:de:02:a9:73:dc:ab:17:a3:3e:12:
68:88:90:9e:14:32:ba:31:3f:d8:dc:50:8c:0f:7c:
a9:fc:7e:7d:ea:09:21:d8:c2:1c:10:01:ee:23:86:
6f:c9:88:9d:7d:c6:a5:ac:e5:8e:e1:6d:64:49:ab:
eb:d2:25:e5:de:df:13:41:76:a3:bc:04:1e:b3:b4:
0f:19:de:d2:2a:77:53:e2:ed:28:fa:78:b1:6b:d3:
67:c2:7d:dc:ab:80:23:c6:10:91:d8:95:33:c6:5f:
14:ca:41:fa:52:0b:48:e0:4f:7c:b5:fe:02:01:5d:
a7:73:1b:39:85:59:e9:8b:40:9a:a7:6f:5a:4a:61:
b1:7f:22:09:d6:d3:6d:91:28:70:93:91:67:4c:fd:
43:fe:83:19:4f:f5:e4:09:af:b6:ec:01:9b:7a:53:
ba:1b:eb:cb:06:41:36:d7:2a:4f:e9:3d:b6:8b:5a:
4c:9f:54:db:ae:4d:8e:f3:fa:b1:ea:1d:ff:ed:5b:
13:d0:5c:95:80:3c:c1:c1:1f:52:40:31:d8:51:ce:
23:6d:25:2f:7e:9a:8f:c5:ed:56:c3:07:3f:c6:eb:
03:28:ed:00:ed:2e:ad:43:59:4b:ca:b1:50:50:29:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:15:97:5B:07:C5:FB:FF:40:88:66:66:9B:F6:F9:95:99:31:6E:70
X509v3 Authority Key Identifier:
keyid:D2:4B:CB:F5:E9:A4:FE:43:29:F2:23:C1:14:50:72:90:53:8F:9C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:87:b3:72:3b:49:f0:cc:8e:27:2b:55:f6:23:07:d0:eb:9f:
86:de:3d:04:03:ef:be:03:d5:b6:d9:51:ea:29:bb:88:7a:fd:
04:24:f5:22:85:86:f1:0f:13:33:78:07:ac:b7:71:d0:02:5a:
2e:78:1b:c9:79:95:19:ec:9d:6b:4b:0c:22:2c:fb:74:85:a9:
d5:a7:c2:a1:40:9f:5f:8c:78:8d:bd:ee:e8:a3:34:8c:f6:b6:
5a:72:1d:06:1c:82:b9:3e:6e:66:bf:ca:54:93:39:1d:e4:21:
ec:4d:1a:5f:59:3c:5e:74:c2:92:63:74:18:63:b9:99:74:9e:
7d:81:b9:24:02:2a:89:a1:6a:d5:b3:41:36:33:ef:67:d7:70:
4e:5d:83:e4:22:20:ea:18:46:bd:f7:e8:01:02:84:60:3e:00:
45:94:ae:df:a4:f6:c9:b7:c4:54:89:cf:e2:93:ed:61:01:27:
26:ca:49:19:37:5f:55:69:11:db:a5:6f:8b:9e:61:61:e0:ca:
f2:69:a5:09:15:77:a2:7e:ff:45:d0:2b:59:a2:35:7f:17:9f:
4e:ec:98:81:9d:d0:76:20:02:ee:0e:0b:41:04:67:0f:28:1d:
12:dd:71:1f:0d:a5:da:2f:aa:29:9f:98:79:a1:ce:9e:e1:00:
37:cb:d9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:23:48 2026 by rpki-client