Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
File: 0kkXcM6bZjACp5RULZiG0aLOY6s.mft (raw, json)
Hash identifier: 8rS7ucshg1R068DQKp6tu2J07TKbG4wtNcvLUfLceE8=
Subject key identifier: A4:FF:54:C2:9A:26:E6:BD:D5:D5:9D:17:15:86:1B:E2:90:C7:C6:94
Authority key identifier: D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
Certificate issuer: /CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Certificate serial: 019E1FB554957D78C4ACBABC8F90B493F125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
Manifest number: 0B6A
Signing time: Wed 13 May 2026 05:00:37 +0000
Manifest this update: Wed 13 May 2026 05:00:37 +0000
Manifest next update: Thu 14 May 2026 05:00:37 +0000
Files and hashes: 1: 0kkXcM6bZjACp5RULZiG0aLOY6s.crl (hash: 9b1/IIzPao8fcu4U7BwvfcV1ATudWg239Qjp5dXs2Nk=)
2: bHXHREeiIlZobWnv85pxED889VM.roa (hash: h0DRcaf7usOPw3gm22x0Kelqp60qYrawYYvGluccU04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:54:95:7d:78:c4:ac:ba:bc:8f:90:b4:93:f1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Validity
Not Before: May 13 05:00:37 2026 GMT
Not After : May 14 05:00:37 2026 GMT
Subject: CN=a4ff54c29a26e6bdd5d59d1715861be290c7c694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e1:bf:60:df:0a:32:bc:93:11:c3:3d:e0:30:
a5:fc:31:3e:0e:5f:a9:06:90:06:32:52:f0:ac:6d:
cd:ee:cb:cf:69:ed:af:22:1d:d3:d6:28:04:84:5b:
40:6c:ff:19:82:5f:af:ce:ad:9e:71:e8:cf:67:28:
1c:37:fb:71:c7:68:16:f1:d7:66:e7:2a:63:37:c2:
10:cc:ad:54:e0:9d:86:ae:21:c7:2e:17:38:bb:ac:
de:1f:a1:f4:8d:28:9f:51:54:92:fa:7e:78:f6:d0:
54:a5:1a:25:0e:40:8a:f7:af:a1:da:f6:27:a8:70:
72:1b:cd:58:aa:31:af:07:71:d2:aa:1c:c9:e2:f3:
17:dd:bf:3c:d6:24:37:59:25:09:bc:1b:b1:1e:eb:
db:77:ce:3b:64:27:a6:3a:ac:f9:89:fd:08:75:db:
7d:c4:10:02:ea:ee:aa:13:17:41:19:6f:b2:7e:a0:
f5:42:11:11:6d:dd:eb:24:e3:61:da:8a:8b:53:b7:
64:00:3d:fb:af:f0:90:78:d5:64:af:76:21:59:c2:
c1:e5:fb:b5:0f:45:6a:9d:8f:44:a4:81:fc:e9:c5:
c1:82:7f:91:79:38:4e:e4:2e:dd:63:2d:0c:bd:2e:
5d:f5:88:e5:99:28:f3:04:b3:89:0e:ce:08:d4:76:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FF:54:C2:9A:26:E6:BD:D5:D5:9D:17:15:86:1B:E2:90:C7:C6:94
X509v3 Authority Key Identifier:
keyid:D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:79:f4:44:82:99:52:08:3b:41:21:bf:56:60:ac:eb:2d:1b:
47:7f:f2:3d:a2:c3:d2:37:3c:bd:b8:d3:fb:48:bd:33:5a:4d:
fa:3e:2a:cd:0f:02:ef:8d:c5:29:8a:bc:23:4b:2b:b1:30:52:
5e:63:65:8a:cd:47:64:2e:7e:13:73:51:c0:ad:6f:50:6c:6f:
cb:77:77:c7:b8:40:11:96:ed:28:a0:37:17:6b:fe:c3:4d:fe:
b0:4f:70:f3:bf:6d:06:8d:b9:70:e3:f1:60:c7:3b:29:b2:84:
9c:ef:c9:12:7f:ea:8b:ac:13:3e:c6:7b:25:6f:2f:05:af:9b:
c0:84:77:a8:80:e0:85:45:8e:6b:1e:24:55:10:1a:1c:a8:3d:
ae:f7:62:e7:e2:f4:57:70:64:eb:7d:cc:e1:af:5f:c8:ba:77:
89:0c:08:70:a8:0d:4a:c2:ea:8c:ed:13:39:9f:34:9c:4d:51:
de:ea:4f:aa:31:bb:dc:bf:d6:5e:e1:5f:9d:38:b7:21:bd:02:
e9:c3:69:f0:2e:ed:51:6f:45:b9:51:1e:40:51:d0:fa:2c:53:
4d:66:8c:f5:f4:17:88:89:0b:8a:36:08:56:cb:a3:80:30:26:
01:62:bd:d8:17:d9:88:9c:72:a1:5c:23:43:57:76:b2:29:43:
3c:bb:dc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:53:19 2026 by rpki-client