Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
File: kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft (raw, json)
Hash identifier: 0ew8OquoZJxpyl4FliY10Ldaz88/HSyY61Kd1AAMJ84=
Subject key identifier: B7:09:AD:47:F0:17:A6:C0:6D:CC:DC:1C:52:19:5D:9F:F0:11:C1:04
Authority key identifier: 91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C
Certificate issuer: /CN=91dd0e48d9011adf376665ad4d62cf31ce63058c
Certificate serial: 019D26CD40CE61EE185F1390398F06F83EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
Manifest number: 0FA7
Signing time: Wed 25 Mar 2026 21:01:18 +0000
Manifest this update: Wed 25 Mar 2026 21:01:18 +0000
Manifest next update: Thu 26 Mar 2026 21:01:18 +0000
Files and hashes: 1: kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl (hash: uzgGW2QngXpQKF8yPVGhKv6jeGAuPUy7+am7yHND2u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:40:ce:61:ee:18:5f:13:90:39:8f:06:f8:3e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91dd0e48d9011adf376665ad4d62cf31ce63058c
Validity
Not Before: Mar 25 21:01:18 2026 GMT
Not After : Mar 26 21:01:18 2026 GMT
Subject: CN=b709ad47f017a6c06dccdc1c52195d9ff011c104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:af:8e:ff:bc:61:14:57:48:68:4b:82:0c:
77:79:36:67:12:07:7a:82:13:88:4f:f8:dd:50:09:
4c:e0:65:85:c3:49:a7:f6:62:38:19:ad:fb:00:2f:
44:89:19:bd:d2:3d:83:24:9c:e8:5b:d3:c8:4e:be:
53:24:b9:37:91:87:07:cd:bb:07:0c:35:4c:92:64:
79:78:75:4c:bc:17:9d:0c:03:f1:07:7d:54:e5:9e:
3c:2c:55:5b:df:c3:83:cf:26:10:64:5f:81:02:77:
bb:96:55:77:2a:90:88:ea:7c:f9:1d:bb:09:ef:a2:
0f:1a:e3:ee:79:0c:80:f3:cb:66:b2:3e:ec:7a:3f:
ae:91:ab:49:a5:54:3a:78:bd:54:e9:1e:90:fb:01:
9c:95:e6:52:9e:2a:0f:45:a6:13:0b:f9:7f:c0:43:
63:16:1a:6a:36:2f:4a:21:93:62:e1:ac:0a:8d:61:
d6:4a:0e:c0:89:a5:bf:b9:25:da:73:44:0a:dc:d0:
99:10:72:51:db:6b:af:94:4a:82:49:c9:aa:bb:3b:
d7:4c:bb:54:28:e2:bc:b8:92:a2:b9:4c:83:59:67:
84:f1:a3:0e:bb:77:dc:14:63:23:44:2e:ff:1e:f5:
96:d5:9c:68:d7:17:f9:9c:91:51:8b:97:d4:e3:70:
6b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:09:AD:47:F0:17:A6:C0:6D:CC:DC:1C:52:19:5D:9F:F0:11:C1:04
X509v3 Authority Key Identifier:
keyid:91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:87:35:14:f4:a8:fb:6f:df:f4:63:ba:3d:b1:75:9c:56:40:
00:e0:90:24:39:30:8d:01:0c:eb:ce:16:c7:60:23:29:60:a8:
8b:39:70:d9:80:17:bf:46:bb:4f:48:95:14:8c:8c:a3:63:8d:
6f:4b:00:ae:59:96:c0:46:81:1a:4c:cc:d0:88:95:ff:e5:be:
cf:fd:39:ee:b0:80:71:92:a4:6b:ff:bb:03:55:45:28:db:1b:
f4:d8:78:f5:46:b0:dd:fa:87:7b:cf:96:8a:77:be:15:86:07:
7c:31:72:d3:62:f1:fc:71:33:33:3e:85:f6:ad:62:2d:6d:9b:
6c:e0:33:c6:2f:ac:2f:30:36:87:e6:b9:05:5d:93:71:26:56:
6f:b5:bf:5b:2f:57:00:9d:f0:9e:da:27:77:e3:4b:c7:f0:c3:
1f:a4:5d:12:a5:2e:bf:cb:c8:a6:68:cd:98:8c:32:28:4c:1d:
ca:8b:64:8e:85:30:3b:05:be:c1:47:d2:8f:40:52:94:64:7d:
24:9a:ca:b3:28:8b:63:94:e7:ea:28:c1:06:66:9a:7b:83:43:
d4:a5:5a:54:4d:3c:0d:92:c7:88:60:92:e7:2d:a5:ac:1b:f0:
5a:54:d0:f4:bc:ca:ee:59:da:43:c7:e6:1a:fb:19:b2:88:3f:
94:bb:9d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:07 2026 by rpki-client