Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
File: 0kSCMx_jdh3lOpm9N8j9am-foAc.mft (raw, json)
Hash identifier: OHtihCBEsmbOSbibZwYrYdkcNR8/OyYwUmuO5XDwoCc=
Subject key identifier: 41:4D:D8:82:03:C9:1E:CF:9D:E7:60:17:31:19:7F:CC:F0:D3:E8:35
Authority key identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
Certificate issuer: /CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Certificate serial: 01A0D72755BA1D75511BE48086EBC65E48CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
Manifest number: 04A2
Signing time: Fri 25 Sep 2026 06:01:14 +0000
Manifest this update: Fri 25 Sep 2026 06:01:14 +0000
Manifest next update: Sat 26 Sep 2026 06:01:14 +0000
Files and hashes: 1: 0kSCMx_jdh3lOpm9N8j9am-foAc.crl (hash: gtt9p5TpNhaZRQZikhvXHqOlCkOm4IKg5rhVkPNVapo=)
2: iEJQwLdxS0IxuOaEeOzSHydGpSo.roa (hash: Xj6y/UERT3eVvhXQlqkmNoZn9cVGobnGl6x9D/dBts8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:55:ba:1d:75:51:1b:e4:80:86:eb:c6:5e:48:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Validity
Not Before: Sep 25 06:01:14 2026 GMT
Not After : Sep 26 06:01:14 2026 GMT
Subject: CN=414dd88203c91ecf9de7601731197fccf0d3e835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b8:49:46:2b:6b:8d:d7:1a:75:db:27:2b:c0:
c2:2d:07:0f:f0:b7:3f:e3:70:61:b2:cf:5a:b1:9d:
6b:0f:29:3d:d3:6f:a3:05:65:6c:37:61:fe:a1:d6:
c9:7e:76:31:db:6a:90:3a:b6:42:3d:8d:a8:cd:73:
9d:ae:b0:62:2e:de:5f:60:da:e2:2b:eb:86:17:05:
29:80:dc:49:68:5e:89:a3:2b:7e:83:38:51:fe:2f:
fb:c9:c0:4c:1d:64:a3:de:23:4c:b4:41:d0:08:3d:
73:8f:20:96:f5:34:67:fe:66:b1:36:92:00:d6:30:
85:a5:27:ee:4a:98:8c:2a:57:59:4a:16:e0:4e:5e:
ec:ba:ea:71:1d:8a:18:c9:41:b8:ac:63:36:29:5b:
16:98:4d:2c:64:0b:d7:55:6d:8a:3e:b9:3e:ba:84:
ad:7b:53:c2:34:40:f6:9b:4b:fd:05:f5:32:cb:b1:
4b:4c:2e:f8:d4:d4:30:06:bd:fc:2d:a5:ce:50:09:
b9:d7:ec:fc:9b:e7:1a:08:57:7c:2c:19:1d:1b:75:
0a:27:32:0d:ed:47:05:4a:42:6a:d5:a9:24:b3:ab:
eb:00:2f:57:a0:e4:01:18:e9:3d:4d:44:c9:0e:45:
ad:6c:a3:96:e4:b2:e6:97:13:b6:6d:41:19:f9:4c:
68:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4D:D8:82:03:C9:1E:CF:9D:E7:60:17:31:19:7F:CC:F0:D3:E8:35
X509v3 Authority Key Identifier:
keyid:D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d8:c1:4a:aa:48:9d:e7:89:3d:f8:31:61:02:30:d2:a9:5c:
46:4e:e2:d0:33:03:b3:da:e0:b6:19:9d:99:e4:36:ff:94:0e:
b2:98:34:1b:3a:6c:26:0a:9e:24:c7:b4:d6:be:12:4e:96:5c:
83:71:9e:6f:2c:78:9e:4e:a9:4f:b8:0a:69:6b:f4:26:08:e5:
d0:e2:23:f0:54:3d:c3:c8:40:2b:c6:a0:1f:c1:21:95:7c:81:
73:4f:f6:27:1c:61:e4:b0:43:62:db:2d:d6:2a:0a:90:b0:92:
b9:77:1e:c2:80:2a:0c:e3:02:a8:b4:d2:fc:37:05:d1:93:92:
11:58:e1:b0:97:fe:14:54:9a:03:f3:92:b2:c1:8f:d9:7e:37:
a0:3a:7b:b7:58:46:16:5f:1b:06:be:16:c4:31:e5:c3:58:25:
9e:f9:15:59:28:32:5c:7d:42:e2:75:55:ba:bf:8c:5e:64:60:
63:66:3d:68:9b:ba:ac:f7:26:9e:5d:1b:5d:23:66:46:6a:9d:
32:dd:22:15:5d:71:ef:63:b9:b7:2a:14:da:35:70:ed:29:1c:
00:7e:c4:a6:f0:54:63:ec:ff:2c:69:1b:a6:91:99:14:7e:93:
ec:e7:b2:09:55:0c:dd:a8:73:e6:09:1f:6e:9f:e7:a4:b9:86:
42:f3:a9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:06:18 2026 by rpki-client