Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: A+OylwKC0MdzHxm27htriR2jXkc4lgRoJYklTV+5h18=
Subject key identifier: 15:CE:EE:73:C3:22:7C:2E:8C:F3:8A:12:D4:BE:03:11:FA:95:6E:F6
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 01A0C8C5E888676B6F61EFDC1C2DCA92A4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 0936
Signing time: Tue 22 Sep 2026 11:00:08 +0000
Manifest this update: Tue 22 Sep 2026 11:00:08 +0000
Manifest next update: Wed 23 Sep 2026 11:00:08 +0000
Files and hashes: 1: 1-tLVitbsqbSKVEQ2dFBLuCdh7PI.roa (hash: mFsYmiYvbugA9l1v9qdWs+r1g9tuI2h/8V/87vP1YVk=)
2: CC8k9O_ROG109gqz07ePs2zJr_g.roa (hash: ODgIyKnPZolVDV4mj5mKuHL26y7ruknh2XQIWUfCBW4=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: z6oDmdbBqKaDZ85hO8In4SCGUQxctw7NOKecyMGHsNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c5:e8:88:67:6b:6f:61:ef:dc:1c:2d:ca:92:a4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Sep 22 11:00:08 2026 GMT
Not After : Sep 23 11:00:08 2026 GMT
Subject: CN=15ceee73c3227c2e8cf38a12d4be0311fa956ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f6:63:8f:43:c7:05:64:61:ea:19:5a:37:a7:
ae:45:c3:c5:44:74:0e:36:31:f3:67:a4:12:25:28:
ad:b3:dc:f3:f0:c7:dc:6c:89:a9:25:9e:88:f8:24:
1d:22:16:42:10:a3:7c:be:70:bc:24:cb:5a:c1:a3:
78:ec:cd:37:20:d2:24:c0:f4:33:6d:5e:42:75:d6:
28:4b:f2:dc:45:cf:03:a8:88:ae:1b:db:68:57:2a:
db:1f:7a:3f:6b:59:cd:2b:12:c7:76:6e:53:68:2f:
77:a5:5f:29:34:c7:fe:71:77:27:ba:1f:ea:bb:d1:
69:53:41:a8:45:77:5c:a8:a9:0b:f1:72:06:26:cc:
0b:c7:75:2d:a9:a3:37:11:85:67:d0:83:54:b5:d4:
52:1b:3a:79:33:ff:46:bd:e6:bb:19:51:c9:16:82:
46:cd:93:c5:81:25:1b:3e:81:55:5b:6d:13:79:57:
12:84:a7:09:e6:75:df:fb:9c:77:a5:58:ed:0b:15:
7b:26:40:15:bc:da:ff:00:74:5e:1a:24:6f:34:c0:
8e:07:93:ca:5d:0c:95:03:f2:91:cc:d7:06:b6:07:
98:58:18:79:50:8e:6d:a1:84:e3:a1:ad:62:a9:dd:
ec:50:f1:14:49:79:4e:a8:39:02:61:b4:ea:14:ba:
5a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CE:EE:73:C3:22:7C:2E:8C:F3:8A:12:D4:BE:03:11:FA:95:6E:F6
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b8:5f:43:07:2f:38:c5:96:90:af:41:f5:3b:c3:c6:9a:20:
6a:22:5a:78:e4:70:2f:a7:f8:9a:7c:3d:43:25:22:2b:8f:aa:
23:8b:70:37:15:5c:4c:78:0e:a1:96:d0:3f:29:d4:75:0b:04:
c5:25:a7:a5:c4:bb:fd:7b:12:f7:04:cf:0e:91:b9:cb:12:c4:
27:b4:e3:fd:49:25:39:7a:3e:02:8a:af:42:7d:b2:e0:f7:70:
29:56:18:41:40:5f:88:73:b0:a9:c9:82:61:e2:cd:29:42:74:
26:fd:d8:68:ff:d1:bc:7c:1c:d0:2d:4d:f7:0c:ba:ae:72:6d:
c7:32:25:4d:f0:be:bb:9f:36:4e:49:e0:df:b2:5c:cf:55:ac:
9a:d9:80:2e:f9:6b:38:7b:3f:94:6f:53:40:36:dc:4e:59:d7:
49:61:f7:3a:53:1f:7a:b9:6a:19:03:7d:59:53:d6:d6:96:14:
ea:75:f9:ca:00:5b:49:cd:97:43:c0:de:5c:cc:74:3d:aa:24:
e3:01:60:be:9f:d3:29:b4:e5:24:1c:37:b0:b3:8d:d4:63:e5:
4b:89:0b:3f:59:c3:d6:06:2e:96:20:0a:96:1f:e3:5f:a2:7d:
62:8c:75:75:ab:99:c8:2c:34:c2:f3:c5:29:d9:2f:5f:96:48:
59:92:b7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:53:23 2026 by rpki-client