Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: xz9tTfx0+Cl5UZZ+JgwSjRQxvbwlVxRXJ3ZbjfWsjo4=
Subject key identifier: 86:A1:DC:7E:58:B2:9D:E2:C7:72:9F:DE:26:19:B5:4A:51:3D:D1:7B
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 01A0CEFFBFB6860971A58D76DD329AA9646F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 19FC
Signing time: Wed 23 Sep 2026 16:01:02 +0000
Manifest this update: Wed 23 Sep 2026 16:01:02 +0000
Manifest next update: Thu 24 Sep 2026 16:01:02 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: uq+hreWFBuXBg0N8lsq8A5/EklWjaeYJzMc8cjhE+/U=)
2: MqEYcGP28yZryUtdD_3wTNGTAVc.roa (hash: p6r4IvQhkyRHVWZ8dRkzEjBjRhq65iPcj75XjeJcHaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:bf:b6:86:09:71:a5:8d:76:dd:32:9a:a9:64:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Sep 23 16:01:02 2026 GMT
Not After : Sep 24 16:01:02 2026 GMT
Subject: CN=86a1dc7e58b29de2c7729fde2619b54a513dd17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:02:95:47:fd:17:8c:01:ff:95:26:bd:30:
95:2e:59:51:74:df:03:dc:56:94:95:94:ec:c9:9a:
aa:5b:f7:71:6a:60:91:15:68:30:1e:e6:f4:4e:93:
b4:34:ef:c7:af:e4:6b:a6:67:20:35:85:36:d0:e2:
0e:33:88:17:42:c8:67:8f:8c:09:71:95:90:b8:d9:
af:01:7a:41:af:94:4f:5d:12:7f:e5:48:56:10:ae:
62:24:cd:05:b8:e3:69:9c:fc:4d:95:ac:c8:5e:4e:
3d:d2:8c:b5:9c:d1:4d:7f:c0:55:0b:6a:f5:e4:92:
ef:37:b5:b1:a8:5f:7e:9a:26:46:ee:17:be:41:a3:
c5:0f:88:e9:ce:ca:fc:d3:fe:a2:28:9a:b5:08:98:
ce:74:bd:9a:72:0a:8f:30:2c:b7:fb:90:65:c6:0a:
af:2d:9b:7a:cd:72:98:d1:d9:8a:15:d0:48:86:43:
40:b1:21:2b:55:21:4a:b3:ba:5f:f0:9a:c5:91:90:
56:0b:86:26:6f:ac:83:65:73:a6:5c:84:e9:06:aa:
92:7b:ab:e9:99:de:14:d4:d6:6b:96:5f:01:08:54:
3e:27:b4:cb:87:0f:29:4c:f7:19:f4:46:b3:7b:9b:
4c:cb:02:f9:c2:87:9d:f6:13:dc:b3:1b:84:32:49:
d9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A1:DC:7E:58:B2:9D:E2:C7:72:9F:DE:26:19:B5:4A:51:3D:D1:7B
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:91:ba:f6:56:15:7b:ca:64:82:5c:14:a6:6d:48:e6:ad:67:
86:0c:e6:00:a1:50:cb:be:f0:cb:a5:f7:ff:11:5f:22:aa:35:
43:7f:e4:c5:8e:cb:25:fe:8b:8c:4d:df:24:a5:68:cf:16:73:
03:91:e4:a3:da:9e:30:29:36:be:f4:e0:63:53:4c:9f:82:a3:
1e:cc:e2:72:58:a8:45:bc:3e:8d:67:9f:2b:59:ce:a8:32:95:
4b:ee:18:ff:91:0a:d1:f3:39:b8:be:3d:77:ce:67:96:f5:e6:
bd:96:0d:92:b6:7a:52:c4:6b:e5:25:6a:d0:0d:75:f5:54:01:
88:b9:1c:5a:4b:56:54:46:05:98:16:62:4a:bb:07:8c:04:96:
38:6f:6a:dd:bb:2f:2a:07:53:d6:70:44:d9:6d:2a:3b:09:aa:
f8:6c:c0:46:7f:6d:d8:c6:fc:3e:cc:ec:86:e1:bb:fe:ba:58:
ef:2c:7b:96:ad:08:c4:d4:1e:b7:7a:d1:cf:b6:97:19:38:29:
70:10:c7:89:5c:38:c3:fa:89:b4:d2:73:d2:0e:20:61:3e:f8:
92:8e:2c:0f:df:c2:f7:b9:20:4c:a5:8a:cf:8e:b1:2e:ea:8b:
5d:53:46:e2:7d:16:46:97:16:e1:1c:6e:44:42:be:20:20:ad:
fc:09:e7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:57:49 2026 by rpki-client