Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
File: 0kvL9emk_kMp8iPBFFBykFOPnMI.mft (raw, json)
Hash identifier: 2boVK3IIgNahJzrtPcxvPl8wKsGIiYmD0OCRqhCPBus=
Subject key identifier: 9C:B0:9F:B6:97:71:47:DA:0B:75:C3:80:5F:7E:A7:42:4F:05:C4:2A
Authority key identifier: D2:4B:CB:F5:E9:A4:FE:43:29:F2:23:C1:14:50:72:90:53:8F:9C:C2
Certificate issuer: /CN=d24bcbf5e9a4fe4329f223c114507290538f9cc2
Certificate serial: 019F8F10D7FE65D4610EE7AC8E69E6AECC50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
Manifest number: 1510
Signing time: Thu 23 Jul 2026 13:01:13 +0000
Manifest this update: Thu 23 Jul 2026 13:01:13 +0000
Manifest next update: Fri 24 Jul 2026 13:01:13 +0000
Files and hashes: 1: 0kvL9emk_kMp8iPBFFBykFOPnMI.crl (hash: Yv85bNRdluJRQeWUuIFvzBlMAPWeg70LJDW+fxYhdoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:d7:fe:65:d4:61:0e:e7:ac:8e:69:e6:ae:cc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24bcbf5e9a4fe4329f223c114507290538f9cc2
Validity
Not Before: Jul 23 13:01:13 2026 GMT
Not After : Jul 24 13:01:13 2026 GMT
Subject: CN=9cb09fb6977147da0b75c3805f7ea7424f05c42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:2b:6d:79:dd:ad:7e:ea:0c:24:00:8d:be:
0f:88:a9:59:d8:4c:33:15:89:f0:ac:ec:96:f3:5e:
3a:0b:c7:f3:b8:b1:47:d8:47:af:b3:2e:f8:69:c8:
03:66:09:33:cb:ee:dc:04:f7:c3:c0:21:48:53:b6:
27:92:3a:76:c0:8d:96:7b:c1:24:7a:3e:aa:22:a2:
57:6a:b5:8f:ad:e7:c2:34:85:b7:8a:89:e3:3c:8f:
88:b7:90:6f:1b:15:3c:4c:c7:51:7e:70:e5:5f:9c:
f5:ba:a6:05:a7:16:d8:0e:64:1b:c2:d1:bb:c8:da:
13:5a:30:a3:8a:fa:72:0b:e9:0b:7a:ad:c3:25:62:
64:b1:70:41:fc:07:e0:f0:5c:81:37:6c:1c:44:9d:
56:6a:db:99:c7:27:f5:44:63:9b:ec:59:11:18:e6:
63:ed:b5:63:4e:45:b4:a5:c4:f8:4d:68:80:c5:2c:
09:b8:0f:bd:c0:9b:f6:fa:0d:93:4f:25:b8:4d:15:
8b:68:d7:1d:bf:cf:51:dd:8a:e0:e1:c7:81:38:54:
8c:23:11:77:61:3f:d8:c8:fa:09:a9:a7:e2:92:92:
50:1f:7c:a7:31:87:55:94:15:9e:9f:32:04:ce:1a:
28:db:54:8f:9b:e7:3b:02:29:d2:b1:5e:e3:b3:f2:
c8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B0:9F:B6:97:71:47:DA:0B:75:C3:80:5F:7E:A7:42:4F:05:C4:2A
X509v3 Authority Key Identifier:
keyid:D2:4B:CB:F5:E9:A4:FE:43:29:F2:23:C1:14:50:72:90:53:8F:9C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6e:7f:2e:3c:1d:9e:51:07:56:c1:e1:a1:f7:9b:c0:82:33:
d7:20:d6:69:00:07:f3:07:76:1b:94:ac:91:72:3a:80:33:91:
34:61:8c:f3:2b:94:06:24:0a:00:5d:35:42:4f:58:40:f7:64:
f7:af:53:70:52:d2:7e:21:8b:67:87:f0:ad:73:30:5e:72:55:
bf:21:21:c0:d7:e3:f2:45:26:f3:d3:6b:8c:70:3a:d4:a7:c6:
4d:15:1c:37:67:22:63:b2:07:6c:0c:41:35:9a:59:77:e2:28:
db:67:4d:ef:2c:97:54:4d:c5:db:f8:25:36:0a:53:18:5d:6a:
18:18:36:b1:33:cf:70:7a:54:33:c0:2d:02:8a:5a:51:70:56:
69:df:5c:5a:ff:a7:33:e5:df:d8:ff:eb:c9:ed:20:85:d6:1e:
cc:ea:10:d0:84:4a:2f:d2:f4:3a:0d:3b:7f:be:17:6b:05:52:
18:d7:89:3f:7b:02:95:e3:14:9d:d9:fc:80:4b:dc:70:bf:6d:
f8:94:e5:98:d0:a1:d3:cd:24:67:96:80:c5:5d:dd:6d:a6:9c:
24:86:4a:b3:95:a9:20:7b:32:00:7d:a0:41:47:f6:1d:a2:95:
43:95:46:0b:d0:e7:46:cd:5d:db:d9:ff:9b:54:e5:c5:6e:42:
1a:63:da:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PENf+ZdRhDuesjmnmrsxQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNGJjYmY1ZTlhNGZlNDMyOWYyMjNjMTE0NTA3MjkwNTM4
ZjljYzIwHhcNMjYwNzIzMTMwMTEzWhcNMjYwNzI0MTMwMTEzWjAzMTEwLwYDVQQD
Eyg5Y2IwOWZiNjk3NzE0N2RhMGI3NWMzODA1ZjdlYTc0MjRmMDVjNDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoArbXndrX7qDCQAjb4PiKlZ2Ewz
FYnwrOyW8146C8fzuLFH2Eevsy74acgDZgkzy+7cBPfDwCFIU7Ynkjp2wI2We8Ek
ej6qIqJXarWPrefCNIW3ionjPI+It5BvGxU8TMdRfnDlX5z1uqYFpxbYDmQbwtG7
yNoTWjCjivpyC+kLeq3DJWJksXBB/Afg8FyBN2wcRJ1WatuZxyf1RGOb7FkRGOZj
7bVjTkW0pcT4TWiAxSwJuA+9wJv2+g2TTyW4TRWLaNcdv89R3Yrg4ceBOFSMIxF3
YT/YyPoJqafikpJQH3ynMYdVlBWenzIEzhoo21SPm+c7AinSsV7js/LIkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJywn7aXcUfaC3XDgF9+p0JPBcQqMB8GA1UdIwQY
MBaAFNJLy/XppP5DKfIjwRRQcpBTj5zCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGt2TDllbWtfa01wOGlQQkZGQnlrRk9Qbk1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iYzQxYTQtZmM5MS00OTZmLWEyMjUt
MmU2ZTVlNWY1ZDliLzEvMGt2TDllbWtfa01wOGlQQkZGQnlrRk9Qbk1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iYzQxYTQtZmM5MS00OTZmLWEyMjUtMmU2ZTVlNWY1ZDli
LzEvMGt2TDllbWtfa01wOGlQQkZGQnlrRk9Qbk1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJG5/Ljwd
nlEHVsHhofebwIIz1yDWaQAH8wd2G5SskXI6gDORNGGM8yuUBiQKAF01Qk9YQPdk
969TcFLSfiGLZ4fwrXMwXnJVvyEhwNfj8kUm89NrjHA61KfGTRUcN2ciY7IHbAxB
NZpZd+Io22dN7yyXVE3F2/glNgpTGF1qGBg2sTPPcHpUM8AtAopaUXBWad9cWv+n
M+Xf2P/rye0ghdYezOoQ0IRKL9L0Og07f74XawVSGNeJP3sCleMUndn8gEvccL9t
+JTlmNCh080kZ5aAxV3dbaacJIZKs5WpIHsyAH2gQUf2HaKVQ5VGC9DnRs1d29n/
m1TlxW5CGmPaWQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:38 2026 by rpki-client