Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
File: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft (raw, json)
Hash identifier: ZETq1kAEhw7UG3LCC8qp1tgIGUYfyfmOAvLBmH2h/fM=
Subject key identifier: E9:9C:25:DA:71:F1:C8:A5:95:B5:F1:E6:0B:AA:C0:0B:7A:35:E6:ED
Authority key identifier: D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
Certificate issuer: /CN=d248185956e443b55b062200f964537bc10bc130
Certificate serial: 019FA8D08E6FD1DA6095D78BA6DCBD343C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
Manifest number: 0642
Signing time: Tue 28 Jul 2026 13:01:07 +0000
Manifest this update: Tue 28 Jul 2026 13:01:07 +0000
Manifest next update: Wed 29 Jul 2026 13:01:07 +0000
Files and hashes: 1: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl (hash: hfybJXOkbscsu6p9HlrrebGAN59YI12gRUZf9PD0H8s=)
2: Xudz0hLe8s3SLmiPVONXMND3hRM.roa (hash: oORSmt43XgnSynXZgH2ISuQJ8Cm/DBrmnJwy75rrXHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:8e:6f:d1:da:60:95:d7:8b:a6:dc:bd:34:3c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d248185956e443b55b062200f964537bc10bc130
Validity
Not Before: Jul 28 13:01:07 2026 GMT
Not After : Jul 29 13:01:07 2026 GMT
Subject: CN=e99c25da71f1c8a595b5f1e60baac00b7a35e6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:1c:b6:c2:41:75:fb:ec:1a:f5:7d:04:00:
04:73:bc:b9:b2:76:8a:1c:bc:79:9c:a2:7e:2e:45:
a7:40:1c:12:26:62:a2:a0:64:3c:7f:30:74:ba:bf:
a6:33:e9:f0:28:e6:58:eb:c9:ab:26:27:3d:8c:8a:
be:43:6c:62:39:ac:75:0f:a0:b4:7a:b7:61:69:b7:
28:1c:f7:fd:2a:a4:cc:c4:ff:e8:ce:1e:22:6a:b0:
89:af:7c:b7:4f:3e:e6:7e:74:1e:bb:84:39:4e:37:
89:58:58:ac:05:1a:70:48:9f:35:c3:2a:2c:b5:44:
38:d4:a1:2e:61:ff:30:e1:a0:96:45:e8:40:30:83:
80:39:fe:85:f1:ea:36:7f:0f:f5:fc:be:1a:b7:d1:
3a:63:9b:d3:ae:cc:1b:9e:39:76:f7:29:b7:b0:56:
84:41:45:36:7a:e9:75:83:5e:9e:9a:69:ae:60:38:
1a:3f:e9:e4:f2:c8:30:4e:ee:53:ad:f4:96:4a:b6:
41:e5:67:3e:bf:00:d3:c0:90:14:e4:3a:85:08:b5:
eb:e6:b1:b4:63:98:bf:ef:70:fb:28:6e:c4:8a:c2:
4c:0d:02:60:db:40:eb:fa:eb:bb:19:7e:39:cd:15:
3d:5f:49:8c:a6:42:3e:1a:eb:88:45:d9:24:80:36:
32:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9C:25:DA:71:F1:C8:A5:95:B5:F1:E6:0B:AA:C0:0B:7A:35:E6:ED
X509v3 Authority Key Identifier:
keyid:D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ca:3f:85:f7:21:ba:ab:41:f7:1f:25:3d:0d:87:c0:58:73:
21:f8:dd:e2:85:a5:af:92:68:56:b5:b1:95:c6:f4:a5:89:50:
16:3d:c0:7e:b4:41:9c:b7:c9:dd:6e:33:61:8b:68:1a:84:ef:
df:81:a9:b8:9e:a2:71:ab:bd:83:88:df:83:8a:f2:21:8e:e4:
ca:b0:4f:89:ee:ba:fb:05:b5:3f:01:88:57:dc:72:ba:a3:31:
94:dc:6b:87:39:e5:5a:ee:4f:f1:b0:9c:19:42:b4:48:5d:c0:
17:27:70:e5:31:98:9e:0e:a0:20:9b:0a:9c:e2:11:e3:f8:76:
8b:e5:11:35:77:3d:db:bf:b1:a3:59:83:7f:04:74:e8:c5:4d:
39:fc:ee:1a:86:02:3d:9d:0f:6e:10:08:d9:60:62:10:d6:cb:
0b:0b:5d:0c:bb:b5:4e:f3:b9:e0:f8:50:5b:e9:3f:e7:45:ee:
c8:e7:0e:4f:6a:57:7e:17:11:53:2c:67:56:9d:d8:01:e7:96:
31:c3:33:c3:16:2e:3a:21:78:be:fa:37:87:12:47:91:cf:af:
80:ec:24:05:06:f1:2a:eb:26:c4:86:a1:12:81:be:5a:b3:25:
47:b9:26:d1:5c:90:5a:2e:96:00:9f:18:87:10:54:5c:c5:a2:
dc:36:b9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:05 2026 by rpki-client