Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
File: 0mKOBpte2LRVk0O1tn9atPkiUf4.mft (raw, json)
Hash identifier: ZZfaQ35HbMS0VNkKfOQ0GHqLz3BKU0gfAuHqeyZjqnk=
Subject key identifier: 9F:62:E3:A3:10:7A:B7:18:C4:AC:E9:D0:45:C0:ED:DE:96:9D:D2:B8
Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Certificate issuer: /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Certificate serial: 01A0CFDAE2C118DEF72D11E3D7E8B7FD4DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
Manifest number: 05B7
Signing time: Wed 23 Sep 2026 20:00:23 +0000
Manifest this update: Wed 23 Sep 2026 20:00:23 +0000
Manifest next update: Thu 24 Sep 2026 20:00:23 +0000
Files and hashes: 1: 0mKOBpte2LRVk0O1tn9atPkiUf4.crl (hash: NW1DiNS2GxGZzyDZ5xGb5azS3s/rgTqwj+PNKtAI9q8=)
2: eypU5gakI37ZRxsTjD1X4DoOVfo.roa (hash: hM1K52QM5/jrbLf53wcNduMHGRDz/fwXSTlOlM9cG8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:e2:c1:18:de:f7:2d:11:e3:d7:e8:b7:fd:4d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Validity
Not Before: Sep 23 20:00:23 2026 GMT
Not After : Sep 24 20:00:23 2026 GMT
Subject: CN=9f62e3a3107ab718c4ace9d045c0edde969dd2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:28:e3:b8:01:3c:7e:68:f2:c5:b9:8f:19:
48:23:31:c3:e9:9c:b7:6d:9a:09:d8:7a:3c:7e:40:
3a:41:86:ec:29:a5:87:73:1c:29:21:da:18:d8:9c:
88:1c:69:ec:63:05:4d:0d:a3:6a:94:26:cf:f9:e5:
3c:62:33:86:23:79:42:1e:94:72:64:e3:d9:86:7c:
54:5a:5b:9a:9f:85:94:96:db:e2:8b:45:ce:e3:36:
bb:01:fb:71:88:42:e1:5d:8a:18:48:31:bc:4f:0c:
8a:6f:9b:62:e0:24:43:e9:1c:b3:49:f9:93:27:c2:
cb:b7:d9:85:5d:64:44:c5:6b:77:10:50:ec:8d:4f:
f6:58:a8:82:fd:44:34:f5:77:af:62:16:00:af:9d:
79:66:b4:79:8a:3a:0b:14:f3:d7:89:f7:f0:6a:03:
79:d1:7f:e0:53:fa:0a:a6:00:ce:9c:71:59:6f:eb:
41:3f:5b:2e:90:85:e1:40:36:ef:63:3b:ba:2f:99:
ac:41:a5:53:03:af:a7:09:c9:d2:27:de:d5:68:7a:
f1:67:06:0b:91:40:b4:6b:da:b2:73:b2:aa:12:27:
01:3a:7e:e1:9d:be:e0:8c:9c:87:7e:fc:a8:36:95:
28:c2:98:9f:a0:3c:cd:73:d4:41:e9:ab:9d:da:53:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:62:E3:A3:10:7A:B7:18:C4:AC:E9:D0:45:C0:ED:DE:96:9D:D2:B8
X509v3 Authority Key Identifier:
keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ab:25:d5:22:72:a7:a2:9d:7e:82:da:10:01:61:b5:b1:72:
f3:65:08:5b:80:f8:65:fd:17:40:45:13:42:46:1a:3f:f3:a1:
df:9c:5a:93:4a:3c:a9:42:59:e0:3c:da:14:30:fe:c3:f8:ec:
02:c4:d8:be:ba:e2:cb:a7:86:20:74:52:c9:78:9b:62:7d:45:
b8:ce:8a:6a:c6:72:b4:7a:b2:2f:b3:94:01:29:6a:fd:47:3c:
73:3a:6f:bd:4f:81:5a:f6:90:98:ff:fd:31:db:26:80:60:a7:
f9:16:8e:bc:1a:34:1b:1d:3f:57:d2:bb:6f:41:87:bc:a5:f2:
f8:ab:5f:61:95:27:d9:e1:01:2b:91:ef:28:31:e2:bb:15:cc:
7a:d7:cc:21:a9:4e:de:4b:ff:76:ca:c5:c2:8d:55:b7:0a:74:
47:ed:68:8e:b3:3c:f4:f5:4f:e1:30:15:21:69:56:3c:e2:9d:
7b:c8:de:92:48:c7:5c:43:87:23:10:f6:9c:48:41:80:8f:76:
80:8b:f0:c8:45:43:92:96:6e:da:36:51:1d:a9:a6:4f:53:98:
aa:d0:a1:2a:4c:75:e4:f2:ed:80:46:a7:b9:29:24:1e:cd:e9:
3e:2a:ca:2a:90:94:7e:80:5e:7f:96:59:e6:c6:93:70:6d:0b:
93:c4:bd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:53:42 2026 by rpki-client