Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
File: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft (raw, json)
Hash identifier: pphYZR/potzZe6Rc74UiUZ4tTww/oJ0WuNmV/WX5gw0=
Subject key identifier: 4A:9E:C2:AF:2A:E2:97:71:3E:3E:09:04:B7:EC:0A:EB:A4:CA:24:F8
Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Certificate issuer: /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Certificate serial: 01A0D8DE99C0BFDE6845DE409F664264D205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
Manifest number: 117B
Signing time: Fri 25 Sep 2026 14:01:01 +0000
Manifest this update: Fri 25 Sep 2026 14:01:01 +0000
Manifest next update: Sat 26 Sep 2026 14:01:01 +0000
Files and hashes: 1: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl (hash: eple917+yKBlcgiCMuNW47B8zG4ltHvTQh4apxyVNMo=)
2: VM-fKezFR4SnE_FueP0yvublPPU.roa (hash: NLdH6ARZYMD17vttDtKMAsBhjz+U3ES+mnznmPgNe9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:99:c0:bf:de:68:45:de:40:9f:66:42:64:d2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Validity
Not Before: Sep 25 14:01:01 2026 GMT
Not After : Sep 26 14:01:01 2026 GMT
Subject: CN=4a9ec2af2ae297713e3e0904b7ec0aeba4ca24f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:6f:44:eb:f8:dc:e0:f8:5a:df:f0:ba:9f:
b1:58:a8:bd:89:b4:2e:77:1c:4b:12:2b:02:2b:33:
94:fe:56:50:6f:b6:b4:f4:ef:e6:43:59:55:dc:6e:
20:67:eb:61:17:2f:7b:51:cf:d7:0c:b5:4f:1b:cb:
06:57:8f:9b:01:20:14:78:14:40:b9:8c:cd:49:9a:
96:d8:67:21:d4:ef:dd:83:bc:93:91:bb:e2:6e:6f:
96:58:60:86:49:39:ff:7e:dc:94:9e:7a:99:d1:e1:
25:6e:2b:e4:97:25:7a:30:e5:d0:ab:ea:22:37:d0:
b7:e5:84:5c:cc:80:02:59:8d:2e:c7:21:31:c0:dd:
6b:2a:e9:91:9c:2c:42:95:4a:05:f9:91:aa:4e:9d:
46:67:c8:ee:92:90:93:85:aa:17:4e:0e:34:28:b6:
98:5d:1e:21:b7:c0:b9:88:49:e6:b8:79:15:15:03:
db:ce:ec:d3:2c:c6:6f:96:7e:de:28:c1:c1:6e:65:
53:9c:fa:7f:be:d7:7d:87:94:41:72:51:12:2d:1b:
77:b0:c9:ce:41:7c:65:2e:dc:f1:71:a0:bc:7b:f0:
38:d8:5b:cb:ab:29:1a:51:d3:56:a5:83:2b:81:ab:
c3:9c:8b:6e:9e:1a:8a:6f:58:6f:2c:eb:0c:66:9c:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9E:C2:AF:2A:E2:97:71:3E:3E:09:04:B7:EC:0A:EB:A4:CA:24:F8
X509v3 Authority Key Identifier:
keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c9:6b:00:12:8c:ea:95:c9:8c:cb:62:2e:32:e7:53:d3:ec:
2f:26:4a:ce:2a:52:01:4e:88:c7:ed:82:a3:b0:73:29:f2:be:
01:ed:aa:21:f8:b5:a1:ac:46:07:7f:51:73:d9:54:10:ec:99:
bc:50:51:c0:63:62:7a:65:4a:bb:de:db:0c:df:0c:01:68:09:
65:01:91:98:63:68:ad:dd:e4:79:a9:4d:56:ce:42:08:ea:67:
d3:6d:54:ce:aa:a0:13:39:b7:63:10:5a:4c:1d:4a:45:ce:b4:
12:a5:07:ee:7a:73:81:bc:0b:4f:f8:83:a4:4b:17:ef:01:24:
07:87:f6:fe:8a:29:86:d4:c1:4a:75:c6:e4:fd:1f:42:dc:df:
d6:5b:24:85:32:47:b6:06:11:23:c4:5e:60:ea:08:67:b9:43:
bf:26:ca:2a:c3:63:31:3f:9d:52:ac:21:53:ab:c9:69:6e:7e:
05:4a:7a:b4:bc:96:3c:90:88:f0:29:56:4c:a7:19:fd:0a:a1:
26:8a:f5:1c:06:b8:4d:2c:e1:eb:10:33:34:6d:97:7b:3c:4b:
2c:74:99:f7:f0:67:99:9a:d1:fe:dc:43:98:b4:74:de:8a:68:
c2:1b:5d:5e:52:ca:73:ad:ce:e7:48:17:23:52:57:45:a4:73:
45:e5:69:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:15:05 2026 by rpki-client