Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
File: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json)
Hash identifier: tGV5kpdA1FBx1wc3CEm/lsN2d8dMT+tQA+sodxrkNIQ=
Subject key identifier: D2:8E:6E:8B:E8:B4:9E:17:34:E4:CE:A6:5D:00:D9:F4:B6:FC:BE:34
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial: 01A0CCDA4DBB2CE171027F48D501E9226D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
Manifest number: 09FF
Signing time: Wed 23 Sep 2026 06:00:53 +0000
Manifest this update: Wed 23 Sep 2026 06:00:53 +0000
Manifest next update: Thu 24 Sep 2026 06:00:53 +0000
Files and hashes: 1: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: E2vntinnTDQvdbmsxxDZFOyJgdhZhIlVLhyai92DdT0=)
2: 5pjm21HKetM46w6qM9uy-i6WybY.roa (hash: 3eNVlKLJuRP0y0hZciHBdm9TPYgKCSF9C2o8FyAPzb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:4d:bb:2c:e1:71:02:7f:48:d5:01:e9:22:6d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Validity
Not Before: Sep 23 06:00:53 2026 GMT
Not After : Sep 24 06:00:53 2026 GMT
Subject: CN=d28e6e8be8b49e1734e4cea65d00d9f4b6fcbe34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:d1:6c:7c:d4:de:57:07:6f:63:f1:72:47:
8f:e2:93:5e:4f:2e:ee:80:db:31:53:5a:8c:a4:db:
e2:3c:c2:f4:c0:c9:92:bc:2e:a2:3b:ff:05:f6:bd:
4f:2c:30:59:6f:f5:da:3c:9e:0b:28:a0:03:40:8a:
4a:ad:99:6d:14:7d:60:12:d4:f5:61:b6:20:d6:74:
73:7c:08:34:55:3f:56:cb:03:c6:a7:29:00:45:de:
b7:4d:e3:ca:41:c9:50:02:a2:63:19:90:55:35:63:
60:7a:b3:9f:ae:3d:91:bf:a1:4d:1f:f5:7e:2f:b0:
94:a7:46:3d:3a:cd:2b:31:84:61:1d:e2:ee:16:ae:
36:d5:56:51:70:fd:99:26:d8:08:06:99:14:48:32:
2e:33:54:f2:8f:09:cf:74:fa:fe:6c:08:83:59:fd:
d6:9d:98:5b:5e:e8:41:ce:a7:dc:6f:91:ca:2e:3c:
dc:9b:62:49:a1:f3:2e:db:d4:53:19:b2:82:1c:f7:
00:54:b4:13:8e:13:7b:93:18:18:3c:05:8e:26:96:
a0:c6:d9:a0:87:fa:c9:d4:81:47:f0:1c:6b:d6:b5:
f9:d2:10:b8:c8:e9:b3:07:3b:3a:c3:b7:c3:46:0a:
01:e0:0c:94:37:c3:6d:ba:c6:81:46:e6:cd:04:cd:
58:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8E:6E:8B:E8:B4:9E:17:34:E4:CE:A6:5D:00:D9:F4:B6:FC:BE:34
X509v3 Authority Key Identifier:
keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:02:71:48:d4:2d:7d:f2:12:36:b9:1a:6b:24:6e:98:c2:4f:
ea:23:2c:4f:03:a4:67:ce:21:ac:9b:f0:82:8a:44:23:c7:01:
0b:06:06:03:ce:34:21:47:4c:61:63:59:be:6d:1e:d0:13:9b:
f2:d3:23:9d:cf:d3:60:70:df:c4:43:3d:a3:e0:ba:76:1e:0d:
c8:c8:7e:3f:af:56:eb:31:a4:a2:0a:0a:32:4d:ec:4a:3d:c0:
1b:44:87:a6:ea:7b:52:0b:54:c2:6f:92:18:61:80:f2:37:f9:
f8:fa:d7:b8:f3:95:e4:be:bf:a5:6a:1a:c4:7a:59:85:74:95:
14:e6:71:be:68:9a:44:55:80:4c:ca:d7:f4:ce:30:4d:bc:0f:
dd:1c:b3:79:b3:3a:86:01:37:0a:e6:ad:7a:b2:de:20:95:c2:
dc:58:fb:a2:29:c3:45:a8:a9:f5:1d:83:37:38:77:3f:dd:f8:
44:fb:eb:13:2b:d0:9a:77:02:23:0e:1a:53:0a:c1:9e:5f:76:
61:d7:f7:af:3c:e3:90:d0:fa:76:28:0f:7d:18:28:f8:56:4f:
5d:83:c0:17:98:d4:ea:f8:b8:97:76:9d:6a:cd:ce:63:80:6b:
f4:ad:06:8c:40:a7:09:3a:5c:6b:b7:b1:3f:3b:05:72:d6:7c:
0e:45:e9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:57:41 2026 by rpki-client