Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
File: koDT5GcpaPhuiVXbYgy3ZdudcUI.mft (raw, json)
Hash identifier: vUMhHLNBrCusWUPuJPaX6LA52qnAR7rUNP1P5wmrRa8=
Subject key identifier: 30:D9:C1:AB:DE:52:D8:81:EC:0E:F9:81:C6:07:63:EE:C4:E7:C6:47
Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
Certificate issuer: /CN=9280d3e4672968f86e8955db620cb765db9d7142
Certificate serial: 01A11B63BD9C58578D4FF22759CDC68F89FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
Manifest number: 0EC2
Signing time: Thu 08 Oct 2026 12:01:23 +0000
Manifest this update: Thu 08 Oct 2026 12:01:23 +0000
Manifest next update: Fri 09 Oct 2026 12:01:23 +0000
Files and hashes: 1: koDT5GcpaPhuiVXbYgy3ZdudcUI.crl (hash: WT4yp8tUDjMzOQh8shMM/+7gf/1YAsNpJR/gO2Uqhjw=)
2: lDc3tS_p7tCgEhrNKf_-eSIcLqg.roa (hash: kzElkKos01LmCGpTnk/MyVTZjZ5HsnG3CnANkjfIhL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:63:bd:9c:58:57:8d:4f:f2:27:59:cd:c6:8f:89:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142
Validity
Not Before: Oct 8 12:01:23 2026 GMT
Not After : Oct 9 12:01:23 2026 GMT
Subject: CN=30d9c1abde52d881ec0ef981c60763eec4e7c647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:52:0f:14:42:89:08:68:48:29:48:1d:39:
9c:05:4c:1c:29:13:66:52:d9:54:87:46:f3:a8:73:
9b:cf:90:d7:cc:50:c9:f8:77:2f:63:15:79:bf:02:
14:60:bb:e7:04:cc:49:ff:62:99:22:72:fc:09:82:
78:24:14:ef:38:e2:69:83:c6:8e:b6:aa:c6:45:64:
23:27:5e:c1:0a:f0:80:33:52:25:1c:76:fa:56:0b:
93:e1:d3:8c:1c:05:67:82:33:84:45:d8:79:d4:d5:
3f:24:6d:4a:51:95:47:94:ee:09:8b:67:a0:4e:c7:
c7:bf:a8:57:4b:2c:6c:6c:06:7c:ee:d7:3b:73:dd:
5c:05:8c:81:6a:b8:75:a3:c9:a6:b6:95:91:73:2b:
dc:60:08:3c:dc:f6:6c:c5:56:82:1c:ea:e9:07:9a:
d1:80:fe:12:c3:7c:f8:24:b5:5f:67:d5:e8:51:0e:
0c:73:37:6d:86:a8:59:d3:7b:09:ab:70:91:b4:04:
29:69:72:39:51:3a:c6:0d:b8:47:67:ff:9c:4b:30:
e5:0c:1e:e7:a4:94:ce:5b:fc:06:f4:f8:35:a0:ef:
36:98:ef:6a:6a:c0:a1:93:d6:d5:3b:9d:2a:ce:09:
21:a9:30:6e:8c:7c:c5:60:e8:75:06:23:9b:7f:4d:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D9:C1:AB:DE:52:D8:81:EC:0E:F9:81:C6:07:63:EE:C4:E7:C6:47
X509v3 Authority Key Identifier:
keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ea:79:0f:ba:ec:b8:f5:2d:53:8c:0e:97:cb:6b:10:2b:44:
b7:0a:d3:d4:f0:5d:8c:b8:e0:2d:50:ff:63:48:cf:28:ed:2c:
99:aa:4b:ad:9e:4d:84:d6:73:cd:9d:71:17:e1:4a:4c:96:b8:
46:f7:cb:97:e8:fd:19:fd:26:b3:8d:67:25:f6:ac:50:c0:44:
ed:20:1c:d0:75:57:d3:cb:60:47:69:f2:a6:87:79:9b:b8:0a:
1c:6d:e6:29:44:fa:04:f7:bd:d6:bd:18:79:64:f7:bc:d7:77:
da:38:e5:83:dd:92:16:0b:25:d2:a5:74:dc:5e:22:aa:88:11:
47:8b:14:30:5b:8c:b7:82:5c:3c:88:23:2b:33:b5:dc:c9:e7:
77:95:2d:da:d3:07:f5:43:cc:2d:22:6c:ed:31:69:79:35:14:
38:57:d0:70:22:6f:ca:51:32:fc:da:77:35:da:3e:e9:4e:14:
f5:00:08:96:2d:f4:64:0e:8b:f8:44:c3:44:ed:25:28:a1:33:
27:8b:8b:86:27:eb:9b:26:cb:97:8b:e4:02:bb:c5:83:82:9f:
81:4c:82:f2:a3:67:f5:70:a5:53:34:41:1d:de:9f:31:ef:47:
3d:46:a8:da:19:c6:6a:e9:22:73:6d:b0:55:a8:38:42:cf:fe:
66:52:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:25:55 2026 by rpki-client