Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
File: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json)
Hash identifier: BANCjtIuLO3G991bybfaEdr3GOSE4d7XQLWvN6zJdQU=
Subject key identifier: A0:22:35:8E:7E:E1:64:63:36:11:C6:7B:1E:D7:37:CF:52:47:A6:BF
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial: 019D2A049DF1508FE3FF9EECAB5F05922001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
Manifest number: 081D
Signing time: Thu 26 Mar 2026 12:00:38 +0000
Manifest this update: Thu 26 Mar 2026 12:00:38 +0000
Manifest next update: Fri 27 Mar 2026 12:00:38 +0000
Files and hashes: 1: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: yq6bG/JmqFvM+WV4Fv2OlPp1/dMLKQe8x6ANSSmQits=)
2: 5pjm21HKetM46w6qM9uy-i6WybY.roa (hash: 3eNVlKLJuRP0y0hZciHBdm9TPYgKCSF9C2o8FyAPzb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:9d:f1:50:8f:e3:ff:9e:ec:ab:5f:05:92:20:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Validity
Not Before: Mar 26 12:00:38 2026 GMT
Not After : Mar 27 12:00:38 2026 GMT
Subject: CN=a022358e7ee164633611c67b1ed737cf5247a6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:92:00:45:5b:d0:1f:3a:7f:2b:85:bf:e4:
b3:74:e5:c8:aa:ae:34:ad:2f:80:8d:54:09:14:48:
c1:c9:94:09:4a:7a:7f:cd:d1:81:11:8b:72:d8:1c:
0c:66:14:ba:c6:97:88:62:f8:34:d7:8b:99:fe:72:
cd:b2:4a:4c:98:71:cb:09:c7:5a:22:55:e2:cf:c6:
b4:25:cb:46:c5:0e:98:ee:ed:d9:2a:28:39:f7:7d:
b4:a5:93:47:7e:47:b9:df:87:f9:90:f4:d6:51:63:
2e:e4:78:07:4a:57:51:bf:c4:42:29:aa:d8:48:e3:
fa:9e:29:e1:51:f0:eb:1a:b6:af:95:f9:ef:f4:04:
bd:24:ef:fe:f0:dd:d2:ea:16:63:0d:eb:51:92:b8:
4d:94:5a:db:47:d2:a5:3a:fe:57:4d:46:17:91:39:
2b:ce:6c:98:0d:38:25:80:0f:26:27:8f:c9:a3:c1:
92:3c:fa:cf:27:49:13:36:bf:50:93:4c:c4:a1:09:
9d:88:29:17:29:e7:08:98:aa:ad:78:81:59:e1:9e:
a2:a5:13:7b:85:bb:87:13:b4:b8:12:45:c5:b3:a8:
a5:3f:ea:76:36:86:d3:3c:e9:2b:a4:fc:63:cc:40:
cf:57:72:69:3f:da:4b:4f:51:f6:2a:8d:3a:90:72:
4e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:22:35:8E:7E:E1:64:63:36:11:C6:7B:1E:D7:37:CF:52:47:A6:BF
X509v3 Authority Key Identifier:
keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:62:ad:b8:31:b3:13:08:a2:7a:b6:ad:24:46:41:6f:60:32:
e7:58:21:d0:bb:94:40:09:2c:ec:31:ef:fe:13:bf:4d:a6:55:
eb:68:96:90:73:db:6d:26:a4:d0:08:10:bf:49:a1:b3:15:1d:
cb:86:6e:e8:9b:20:56:f9:56:63:a4:06:94:08:c6:4e:55:53:
cd:b4:5f:60:2d:d5:77:89:5b:66:a0:4f:6a:c7:a4:2e:03:88:
90:d4:47:c1:81:44:fa:d2:01:b8:5a:5a:7b:c5:9c:db:d7:fe:
75:8d:d5:c1:71:82:37:27:8c:3a:d3:f1:7d:e7:cc:f1:cf:50:
62:31:8b:09:47:ba:14:52:1f:af:26:19:b4:25:31:64:ee:30:
d1:60:02:eb:a9:a7:75:50:ca:a2:cd:aa:15:31:07:cb:fa:8a:
4e:7c:e0:44:0b:a3:10:ee:b3:8b:04:44:54:ea:8c:cc:6d:13:
91:2d:cc:d6:0f:a3:2b:63:99:31:ca:1a:05:91:27:44:37:26:
2f:be:fc:94:cf:8f:6b:94:ce:7e:75:6e:09:1c:74:c3:55:0e:
3a:36:e7:24:62:9b:8e:2f:ed:cc:2b:d9:9a:b8:74:53:b5:2c:
6c:a6:66:2e:95:e1:8c:92:9f:36:2a:09:8b:c2:b8:af:1c:2a:
34:09:6a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:42:15 2026 by rpki-client