Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
File: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json)
Hash identifier: cTYv4/qJ2SvF86BLmeNNwtDzqqefMy4auJXYYFULek8=
Subject key identifier: 0F:B9:0F:9F:9E:3F:71:58:73:D9:67:CB:AA:92:73:17:8B:9A:49:24
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial: 019E1F47BFDA7D07C8FD148FD8B9DDC982EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
Manifest number: 089C
Signing time: Wed 13 May 2026 03:00:56 +0000
Manifest this update: Wed 13 May 2026 03:00:56 +0000
Manifest next update: Thu 14 May 2026 03:00:56 +0000
Files and hashes: 1: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: XSj5Ai8MYmX22oWvoRV7lN5ynb79sRjZdb4znvOYm6w=)
2: 5pjm21HKetM46w6qM9uy-i6WybY.roa (hash: 3eNVlKLJuRP0y0hZciHBdm9TPYgKCSF9C2o8FyAPzb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:bf:da:7d:07:c8:fd:14:8f:d8:b9:dd:c9:82:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Validity
Not Before: May 13 03:00:56 2026 GMT
Not After : May 14 03:00:56 2026 GMT
Subject: CN=0fb90f9f9e3f715873d967cbaa9273178b9a4924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:4c:a5:08:fd:5c:b5:ab:99:f7:02:91:56:
ae:39:79:ee:c3:96:1a:de:3f:99:6c:b9:d7:5c:38:
2a:c1:b9:5f:b4:f6:25:fd:38:54:6a:82:da:04:81:
11:9a:9d:7e:31:29:25:36:e6:47:2b:76:1d:d7:42:
29:06:cf:4f:e5:c2:63:bd:c4:2b:3e:90:6c:a2:c7:
91:ee:a6:36:a8:2b:c4:a0:d5:14:03:ca:72:e3:cd:
28:4d:96:77:a5:d2:74:58:9b:f9:91:db:41:2e:7a:
1b:8d:b8:34:e9:eb:f2:64:0c:73:fd:30:d2:f0:92:
1e:62:2b:6d:d2:fd:57:39:c9:b0:87:95:8e:0b:26:
73:6b:db:43:f9:56:34:d3:ff:23:ee:be:bb:f2:2d:
03:7a:09:96:42:3f:1f:6f:1f:b0:c2:5a:e1:eb:1c:
55:e3:6c:86:b5:c6:5a:f1:01:9f:01:61:a6:34:f8:
61:c4:52:bd:c7:07:e3:93:ff:3a:ff:d2:a6:68:80:
bd:22:ad:2e:a8:f6:09:5b:67:cc:92:33:9f:b3:bf:
6b:c5:5f:fa:45:cc:93:b0:32:ff:a6:77:99:29:66:
5c:13:ae:a3:6c:d4:2c:52:13:e1:9f:9e:df:cd:97:
7a:fe:ea:bb:ba:21:6a:d6:96:e5:1d:81:b5:ca:0d:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B9:0F:9F:9E:3F:71:58:73:D9:67:CB:AA:92:73:17:8B:9A:49:24
X509v3 Authority Key Identifier:
keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:65:c7:01:b8:9e:dc:ec:09:10:1d:1a:21:e9:0f:25:9b:af:
ff:55:89:28:f9:a6:e0:29:a2:b5:0c:9e:37:40:61:0f:f3:fe:
56:89:93:16:d8:76:76:00:db:3a:94:85:0f:9b:85:9b:37:6a:
21:61:83:37:8f:12:9c:17:d9:a1:ec:be:01:74:aa:ca:4d:92:
34:a2:53:b6:36:e6:22:71:79:1f:42:29:0b:61:bd:25:10:aa:
9f:95:1d:95:24:66:58:f9:5c:fc:43:83:38:68:26:41:40:63:
0f:3c:65:c0:32:48:d1:4e:a7:5f:4e:70:18:c1:cf:0b:21:ed:
88:e4:29:d5:58:da:46:4f:64:67:05:46:14:b4:64:3e:1d:ba:
c6:ce:aa:61:f0:c1:43:0d:a9:1e:aa:ec:3e:b4:93:a4:8e:30:
17:83:ce:ae:5b:14:a3:7b:b5:cd:03:d3:54:74:ef:80:26:c3:
25:cf:0e:67:5c:fc:96:ee:89:ee:46:6c:21:54:c5:a5:e6:11:
16:d1:cf:cc:ed:42:01:8b:67:c3:07:d3:26:80:79:c7:0a:3a:
9f:c8:5f:40:dd:a3:89:89:6d:68:a0:a1:4d:52:08:9d:8a:1c:
33:bd:3a:e4:5c:3a:4a:4e:a1:dd:42:5b:10:b1:8d:a4:40:fb:
8f:e5:31:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:45:38 2026 by rpki-client