Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json)
Hash identifier: sY5sDMi60eV/PgJJd0tqBL1af7TUBV/PVBM+h66kiL8=
Subject key identifier: 94:22:21:BF:06:7C:D4:F9:FF:1B:E9:9B:38:DF:B1:3B:ED:9D:52:F9
Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Certificate serial: 01A0C9A25FE80B909F75727E117283B1A9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 15:00:56 +0000
Manifest this update: Tue 22 Sep 2026 15:00:56 +0000
Manifest next update: Wed 23 Sep 2026 15:00:56 +0000
Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: Xj4gXc+JHwNToBjjpZgI3Z6uzulz9VQkcazytEfW8fo=)
2: m-OH61lf9VVgWjii0PINezzjttE.roa (hash: 2GsJyhthbzFVpryryMCfZ+0hcAAlxYfWmqigOWWbj9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:5f:e8:0b:90:9f:75:72:7e:11:72:83:b1:a9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Validity
Not Before: Sep 22 15:00:56 2026 GMT
Not After : Sep 23 15:00:56 2026 GMT
Subject: CN=942221bf067cd4f9ff1be99b38dfb13bed9d52f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3e:00:00:2a:aa:9c:7d:66:39:83:00:10:0d:
39:b6:f8:d6:c7:01:e4:5d:67:34:c3:ee:c5:4e:3e:
5d:79:57:44:e4:5b:24:b8:b2:52:4d:f8:62:4f:c6:
92:77:53:49:d1:14:d2:76:e7:2f:5c:62:f1:1b:97:
65:11:e8:38:92:09:5b:79:82:ff:b5:d3:95:c6:67:
25:b6:95:86:c6:de:90:75:03:51:87:28:a4:e7:e2:
c9:50:45:0f:c7:53:fc:d7:6b:1c:90:57:f9:a6:57:
0d:bb:d5:61:24:0c:b4:09:24:fb:ab:08:18:99:d6:
83:0d:2f:a4:58:3e:a2:a3:df:48:36:d3:ef:4b:4f:
c0:e0:d3:ec:62:90:8e:36:42:e9:49:f4:86:24:93:
81:19:09:b7:1a:9f:98:72:8e:b1:65:0a:21:9e:b2:
f7:6c:fb:6a:9c:a6:14:3b:aa:80:0b:59:a9:6d:81:
48:5f:16:de:a8:d6:65:d5:ff:f7:41:92:22:11:33:
0b:1d:3b:90:1f:8f:63:09:df:38:03:9e:32:ef:88:
af:e0:cb:f8:9a:bf:ea:4b:42:e4:34:20:8a:b1:72:
2b:9a:c6:70:15:b5:8e:7a:18:f4:32:c1:bc:7a:77:
d7:c1:eb:cc:ee:49:ee:39:05:55:9b:a8:bb:bd:76:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:22:21:BF:06:7C:D4:F9:FF:1B:E9:9B:38:DF:B1:3B:ED:9D:52:F9
X509v3 Authority Key Identifier:
keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3a:80:b0:2c:27:3e:86:cd:95:1b:ab:e5:f0:38:7e:29:39:
60:13:56:77:1f:ac:57:4b:98:3f:4a:3e:80:ee:0a:72:e6:94:
40:6b:f5:f2:73:8c:f8:57:1e:4f:8f:cd:46:4c:10:99:72:03:
3f:e8:34:7c:39:70:4c:23:c6:be:96:dd:b8:f2:8f:08:9f:08:
47:31:0f:98:db:4f:1c:59:f8:6f:fe:c2:43:55:29:3d:3d:f5:
55:83:cb:38:95:e6:2d:68:e0:19:97:03:ab:8f:4a:b2:0d:32:
51:45:1d:ce:33:5b:e4:04:83:8c:f0:cf:c3:70:27:d3:e7:88:
89:f8:cc:f4:ea:d1:f5:79:70:94:36:4b:05:a1:84:42:78:cd:
26:a3:75:da:ce:ca:35:ff:64:24:3a:50:0c:d3:f7:b6:d9:dc:
f9:21:e5:50:3f:47:62:11:b2:14:5f:3e:49:14:1e:57:82:0e:
9f:38:ae:a7:b7:0f:8b:ce:a9:4e:ae:73:81:f8:d8:8f:29:7a:
70:92:5f:f6:88:ab:3f:08:d3:dc:a8:34:50:ad:91:10:dd:d2:
63:46:33:00:f4:5c:4c:0a:33:e4:4d:52:64:31:1b:4a:c3:47:
fa:56:79:ba:8d:32:0d:a4:a9:92:c8:5f:89:eb:80:0b:a7:8d:
39:8b:15:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:23:57 2026 by rpki-client