Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
File: 0kSCMx_jdh3lOpm9N8j9am-foAc.mft (raw, json)
Hash identifier: jnZJt5ajcnjSRSmj9GS7WFZB+kFckTn1FGddPT3nt3I=
Subject key identifier: D1:1D:D4:59:C1:B9:86:4F:D8:3A:1E:11:72:54:D5:9C:A9:DA:EE:EB
Authority key identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
Certificate issuer: /CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Certificate serial: 019F92B6941120AA732666C25C329503C5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
Manifest number: 03FA
Signing time: Fri 24 Jul 2026 06:01:06 +0000
Manifest this update: Fri 24 Jul 2026 06:01:06 +0000
Manifest next update: Sat 25 Jul 2026 06:01:06 +0000
Files and hashes: 1: 0kSCMx_jdh3lOpm9N8j9am-foAc.crl (hash: Gx3JRjzd+c3HqcZnZGN0N6tQ6d5AWrpGQKE9X9MgbyQ=)
2: iEJQwLdxS0IxuOaEeOzSHydGpSo.roa (hash: Xj6y/UERT3eVvhXQlqkmNoZn9cVGobnGl6x9D/dBts8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:94:11:20:aa:73:26:66:c2:5c:32:95:03:c5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Validity
Not Before: Jul 24 06:01:06 2026 GMT
Not After : Jul 25 06:01:06 2026 GMT
Subject: CN=d11dd459c1b9864fd83a1e117254d59ca9daeeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:66:0b:2f:eb:05:cb:15:7f:10:4e:bf:be:
fc:73:04:15:76:d4:dc:d2:2b:1b:65:bc:84:8a:00:
ff:1d:be:b7:00:d8:f9:a1:b5:f5:d8:4f:c2:c7:e8:
32:a8:63:9a:ce:f5:51:69:5e:4d:1d:a4:ae:fa:4f:
69:84:7e:c4:b4:3e:4e:ce:e2:9f:b9:e9:d2:3c:ce:
8f:b0:8b:87:85:ff:5f:b4:ab:86:8b:ed:29:4f:82:
2a:ca:0e:e7:10:47:06:cd:34:d9:24:e8:49:68:16:
ff:f9:e0:da:ab:99:a9:14:d5:71:e7:6d:cc:05:36:
dd:94:29:e6:4e:70:48:3b:c3:3d:84:43:00:0e:62:
02:6e:80:b0:66:be:c7:2f:a7:d7:3f:cb:2e:95:50:
26:89:28:47:91:8a:1b:c4:96:aa:fd:cf:e3:59:4b:
30:75:a2:e9:ae:18:55:ce:9a:ae:a2:fb:f1:60:ed:
28:07:62:ce:70:4f:6d:50:c6:93:90:83:13:c7:6e:
c4:1d:28:f8:53:87:32:22:e3:65:fb:0b:17:7a:66:
7e:11:4e:46:a9:eb:d4:2a:32:9b:5b:88:e4:90:39:
53:7d:7a:d6:54:2d:cb:68:ac:80:3d:c4:05:ba:8a:
af:ff:5c:3e:2d:e4:cb:45:51:de:1a:89:33:b6:1d:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1D:D4:59:C1:B9:86:4F:D8:3A:1E:11:72:54:D5:9C:A9:DA:EE:EB
X509v3 Authority Key Identifier:
keyid:D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:31:3b:23:fe:56:2b:51:7f:36:5f:84:53:7d:d9:50:3f:0f:
fc:03:b1:df:af:96:d0:29:0c:a4:f8:91:8a:33:72:cc:18:c0:
3f:a8:62:3c:1d:14:09:19:44:10:fe:4a:a6:1e:45:5f:7b:6e:
9c:b3:e0:22:a7:4c:d7:16:2d:a8:95:53:2c:dc:4c:59:54:b5:
10:b5:b3:30:ee:a3:0e:31:aa:ee:1e:60:17:09:c0:e1:58:5a:
20:bf:0a:37:e5:72:48:27:5f:c2:c9:e9:de:f9:7b:54:8e:9b:
2a:5e:ab:87:de:a7:77:90:c0:c4:5d:8f:ab:56:fa:18:ad:60:
71:20:89:8d:0c:09:9a:59:77:cb:5b:52:6b:e0:ff:5f:88:a3:
a2:9e:66:ae:cb:cb:38:f3:6e:6a:42:9f:47:57:a2:1b:bd:0e:
71:4a:c7:14:4a:9a:82:63:95:9a:6f:06:77:82:7d:78:94:15:
a1:a5:88:32:bf:71:e6:42:d8:26:bd:dc:b7:3e:43:a8:ac:b8:
3c:58:20:4c:9d:d7:42:a9:d5:ff:e9:1b:2d:4c:90:5a:bd:f0:
d4:92:15:4a:43:54:f5:d1:e3:35:15:1c:8c:43:03:9f:ca:34:
5b:ac:3e:bc:68:fd:fb:1f:29:d8:e0:77:0d:bf:e0:a6:02:a0:
f9:d1:b4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:08:48 2026 by rpki-client