Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
File: K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft (raw, json)
Hash identifier: liHyVpo4SvyIQGshipjXwzI9TtNaEqOWOj+nwxWRCU4=
Subject key identifier: 5B:9B:92:0F:34:36:46:EC:64:A9:C9:37:28:FB:6A:B4:B1:08:EA:9D
Authority key identifier: 2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
Certificate issuer: /CN=2b4989fe3caca3f30443c54a902f6912110d9195
Certificate serial: 019CAC10358C68C4D00A118BBBA25DCB8A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
Manifest number: 0A6F
Signing time: Mon 02 Mar 2026 01:01:09 +0000
Manifest this update: Mon 02 Mar 2026 01:01:09 +0000
Manifest next update: Tue 03 Mar 2026 01:01:09 +0000
Files and hashes: 1: K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl (hash: 9SW04+m4VxPJz1wJvTW4XyvWL3RBzbV+g+K49QSoyzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:35:8c:68:c4:d0:0a:11:8b:bb:a2:5d:cb:8a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4989fe3caca3f30443c54a902f6912110d9195
Validity
Not Before: Mar 2 01:01:09 2026 GMT
Not After : Mar 3 01:01:09 2026 GMT
Subject: CN=5b9b920f343646ec64a9c93728fb6ab4b108ea9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:e4:15:68:ed:d0:1c:07:4e:91:68:84:09:
ee:71:7a:43:b2:48:c2:00:ea:7b:a6:df:47:65:c3:
53:48:49:8a:4a:87:50:bd:3a:6d:c2:85:85:32:4c:
5f:a5:cb:f9:fa:5e:2e:27:2b:96:8a:07:96:66:78:
74:db:38:72:e9:94:82:87:21:21:1c:75:86:42:43:
84:0f:09:fc:ad:c6:ff:43:75:7b:2f:c1:00:2b:c5:
32:71:e3:03:1e:b9:70:2c:d5:61:7c:ad:85:0f:aa:
8b:69:91:e8:ee:9b:eb:e5:e9:eb:c7:83:25:56:87:
0b:b0:73:cb:7b:4f:b5:b7:84:6f:68:0f:b2:b9:76:
6e:b0:3b:06:d9:f9:49:ef:a9:eb:65:52:97:55:62:
ca:18:fb:93:3d:fd:29:a4:e2:d8:7b:fc:f8:36:9b:
9a:9b:18:07:c3:aa:ce:1c:07:bd:5c:80:9a:00:0a:
32:4b:e7:4e:55:27:88:38:90:97:b1:b2:56:3e:e5:
8c:55:40:fc:5d:ab:6e:c4:16:52:bc:f3:c2:27:f9:
6e:57:90:b1:fe:4c:4f:7a:c2:94:23:61:25:e9:77:
f9:98:f0:52:1e:aa:92:39:1f:d4:14:b7:30:c4:1f:
21:e9:6a:c7:44:d3:4e:89:03:d1:0e:7b:e7:33:13:
b5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9B:92:0F:34:36:46:EC:64:A9:C9:37:28:FB:6A:B4:B1:08:EA:9D
X509v3 Authority Key Identifier:
keyid:2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3e:1c:82:42:42:d2:6d:ef:87:1f:e1:bb:b1:df:52:e3:bb:
e5:91:04:c9:26:d7:96:99:cd:11:c8:c5:53:6a:84:19:03:eb:
69:c2:e2:24:b5:54:5d:9c:8f:84:36:3a:5b:c2:5b:50:f7:1e:
23:61:93:dc:af:89:ec:fa:97:e7:d3:55:8c:5a:9b:e1:d2:d9:
30:da:f4:ed:bd:33:85:86:ba:a3:ed:fe:3e:07:53:ea:45:9a:
bb:d0:98:95:2d:e6:64:38:95:be:0c:46:53:17:bb:bb:09:16:
ca:c9:2d:ae:16:f6:61:89:b7:4d:c5:6f:5d:f6:18:92:76:85:
87:64:cd:61:c6:85:7c:f0:4b:d9:c0:52:61:16:14:87:96:ec:
b2:6a:56:0c:d5:6e:a4:f3:7e:8c:07:43:a3:2d:4e:37:83:71:
99:44:bd:8f:eb:01:90:63:0d:90:4a:f5:0a:a3:38:d0:66:8d:
e5:ff:5b:3d:60:3d:6d:80:e6:ba:a5:5a:20:50:e9:06:e4:51:
5e:ec:8c:bf:03:b6:c7:63:2b:9c:12:76:ef:63:12:3a:d6:48:
b2:cb:35:66:4b:97:c7:ac:31:01:6a:32:e9:c8:08:38:da:f9:
0e:a5:72:53:a1:60:cd:53:6b:b2:9a:9e:a8:ee:ec:6a:58:3c:
36:98:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:43 2026 by rpki-client