Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: 6xyLkItqjdFmEsDGld9NAGNyRugpe+FsP6tEbRd0Z9Y=
Subject key identifier: 0E:E4:B2:15:20:A6:9D:81:6F:99:3D:B7:24:99:72:5E:CF:47:DF:17
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 01A0D538EA906BD3B23DA8C16466FDE09D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 185E
Signing time: Thu 24 Sep 2026 21:01:12 +0000
Manifest this update: Thu 24 Sep 2026 21:01:12 +0000
Manifest next update: Fri 25 Sep 2026 21:01:12 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: SppuJTmngfpkf3urXhfdGXnv13pDLRdmTUKcT1lTq0o=)
2: GoeVKkXV9KennXFFcSaLbR3SUT4.asa (hash: +e3JEyEvlmDvyKfQ88OWzaojqU5e4fHq1z//PA0aN/4=)
3: yq5Siwl4i3jmM8YcRC0pxHMIUlk.roa (hash: nGkz7j5CjWTfBWr6c+S9Cs2//HPjWw5q8jEucRFb/jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:38:ea:90:6b:d3:b2:3d:a8:c1:64:66:fd:e0:9d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Sep 24 21:01:12 2026 GMT
Not After : Sep 25 21:01:12 2026 GMT
Subject: CN=0ee4b21520a69d816f993db72499725ecf47df17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:55:69:42:25:e1:47:eb:13:d2:29:46:d9:ea:
54:a0:44:ad:1d:88:38:f3:1a:09:7c:62:40:ae:0d:
98:75:78:c6:e7:1b:d4:db:9d:a3:5b:a4:ae:0b:84:
8f:78:5c:bd:43:42:e0:19:44:65:af:a9:f1:ce:8e:
d8:0e:1e:80:58:49:31:0a:d1:8d:c8:6b:92:22:80:
b7:16:8c:e5:ba:81:30:c6:f6:99:fd:1d:06:4b:5d:
e5:e6:2f:5f:ee:51:78:6c:c6:57:2d:3b:92:1a:2d:
70:69:c5:74:c3:0a:11:0d:ff:f6:39:d2:28:3d:d6:
4b:b8:43:dc:80:28:74:cc:d5:69:1f:fd:c7:26:19:
0a:f7:f9:83:8d:77:bc:07:6a:12:ad:0f:ed:fe:4a:
06:6d:f1:58:d5:be:57:ee:28:12:eb:6f:5e:21:60:
8c:71:5f:5c:40:7d:87:8f:5d:bc:7f:57:39:02:82:
5b:02:c9:55:78:91:76:3e:29:a2:19:58:2d:39:eb:
f4:87:ff:ea:1a:4c:8f:dc:9e:8f:aa:2b:dd:0b:ef:
72:5d:35:73:33:d8:0f:13:1d:74:61:fa:fc:cd:01:
55:99:1f:99:3a:43:c6:dc:c1:65:75:8a:ff:82:81:
00:8b:99:a9:9d:3a:32:b9:bd:c2:8f:c8:0e:af:a1:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E4:B2:15:20:A6:9D:81:6F:99:3D:B7:24:99:72:5E:CF:47:DF:17
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e0:69:6c:7a:68:cf:e4:61:e7:96:43:58:c2:fb:16:9b:1d:
f1:fe:2a:c4:31:5c:14:73:60:80:5a:49:cb:a3:f0:93:08:79:
9c:e0:96:ab:ec:8e:e3:ca:83:2a:f5:30:29:04:cd:79:d8:11:
fe:75:27:cc:e7:18:58:e6:ac:7a:2d:d2:f0:c6:a1:ab:21:f9:
f3:d2:7c:3b:5b:8a:17:b7:54:6e:7a:2a:7f:20:9d:a9:fa:ab:
e2:e3:12:fb:a0:5d:24:1f:99:5b:6e:ec:1c:09:63:74:ed:e6:
95:66:2b:c7:62:35:a2:6e:99:39:0e:58:3d:b1:c9:38:40:f3:
03:ec:1a:ce:46:1c:c5:60:5b:42:74:fd:2b:16:6e:46:03:38:
fb:5d:6f:24:14:e6:3e:09:e9:6b:26:39:20:ad:81:ce:b7:a0:
4a:01:e8:41:bb:b1:06:d6:9c:d1:91:c3:3d:28:3f:a3:a5:0a:
4d:eb:d9:f1:e6:f3:ea:2f:d5:52:93:50:79:37:6e:29:d0:b0:
76:a8:e0:09:80:f7:20:63:2d:ed:bf:27:8b:9a:ee:c1:49:d4:
75:26:1c:27:20:6a:5a:f7:da:da:d9:7f:5a:b8:a3:fb:cf:98:
b1:e4:04:31:01:f4:10:04:6a:01:e0:07:be:1f:42:2d:5f:6f:
cd:cf:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:08:09 2026 by rpki-client