Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
File: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft (raw, json)
Hash identifier: 60XAlH//1UPn48fdz9vrThk8JYtgoHhUJCU6k15QIIQ=
Subject key identifier: D6:DE:1D:DF:41:71:CA:2F:7F:F0:1B:0F:16:45:15:44:3E:74:55:9B
Authority key identifier: D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
Certificate issuer: /CN=d248185956e443b55b062200f964537bc10bc130
Certificate serial: 01A0C77CB27433D2C29DF02D47F6569A07C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
Manifest number: 06D9
Signing time: Tue 22 Sep 2026 05:00:33 +0000
Manifest this update: Tue 22 Sep 2026 05:00:33 +0000
Manifest next update: Wed 23 Sep 2026 05:00:33 +0000
Files and hashes: 1: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl (hash: 59mttc/Gangs3/XbJY1o1pffqEK7zlRqba8B1bx4HIc=)
2: 30rxoEVpWSXkeYOFsrzuW4wuGPQ.roa (hash: oZbCMBZPUvgToSoCiHyNVoP2atS7g7LnbwIeau6Z9sU=)
3: Xudz0hLe8s3SLmiPVONXMND3hRM.roa (hash: oORSmt43XgnSynXZgH2ISuQJ8Cm/DBrmnJwy75rrXHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:b2:74:33:d2:c2:9d:f0:2d:47:f6:56:9a:07:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d248185956e443b55b062200f964537bc10bc130
Validity
Not Before: Sep 22 05:00:33 2026 GMT
Not After : Sep 23 05:00:33 2026 GMT
Subject: CN=d6de1ddf4171ca2f7ff01b0f164515443e74559b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:f9:c3:d9:5e:8c:4d:47:d5:f9:28:a9:e1:
f8:72:91:91:91:7a:61:5e:ff:7d:9f:ca:02:e8:27:
65:0f:5c:f1:7d:bf:79:4f:ab:38:86:77:cc:3b:9d:
20:c7:6d:d7:79:3b:ca:59:09:c7:1a:1a:ce:0f:83:
74:cf:e8:b8:93:6c:5f:63:3f:4b:83:d1:19:72:9e:
91:e4:70:53:33:d5:91:7c:8a:d7:5e:fa:0d:81:12:
ac:11:06:13:c2:82:a0:c6:49:d9:e8:70:85:a3:7c:
5a:ec:10:17:e3:d1:23:c3:84:88:59:15:b6:96:b7:
e3:72:0c:e3:af:ed:c0:a0:2c:b9:52:61:b1:ee:87:
9d:36:2d:3b:31:ce:0d:03:6a:0b:5f:62:55:0e:f5:
e7:2e:9b:56:ef:f5:55:f9:cc:a9:2f:65:04:0e:78:
35:9e:4d:18:90:83:19:17:76:58:77:c3:bf:d6:6a:
55:b7:0a:79:99:35:a0:88:80:34:cf:fc:65:34:2f:
52:44:9f:e7:bd:18:9d:42:ba:80:40:7b:87:06:b3:
f0:4b:14:f5:b2:09:20:e5:3a:19:9b:aa:75:36:f3:
41:c8:12:53:9a:72:bb:48:a3:ba:16:b4:20:c6:8a:
f3:14:a6:5a:40:e5:0b:35:0d:ac:94:7b:c7:6c:87:
8d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DE:1D:DF:41:71:CA:2F:7F:F0:1B:0F:16:45:15:44:3E:74:55:9B
X509v3 Authority Key Identifier:
keyid:D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f2:3e:c3:75:05:5a:c8:5d:8f:dd:8f:f1:50:9c:db:bc:a6:
d6:3f:e8:3c:c2:27:7b:1f:ce:2f:26:84:c4:50:ca:3a:ac:90:
5f:4c:63:64:d3:11:7c:e5:8b:c1:9d:6e:6e:e7:d8:2e:6b:c1:
e1:68:e1:08:0a:ac:cc:0d:55:ba:cd:47:6d:69:c6:2b:59:ec:
06:34:72:1e:7e:25:68:b0:15:32:59:66:bb:41:44:5a:c6:30:
53:b6:03:e4:20:c4:2f:02:4b:8f:c8:e8:0e:c6:35:78:b0:08:
e7:25:2d:29:ed:35:60:aa:53:a1:e4:7d:e6:f6:16:57:e7:ba:
da:28:3b:c5:25:65:f4:1e:ee:ed:70:fe:2c:e2:a0:61:40:ec:
78:01:a3:09:be:49:e5:e7:9b:83:71:df:4f:1a:b0:2f:af:b5:
7e:22:96:ce:ea:41:f2:c7:b6:cb:06:69:cc:c6:b4:19:12:bb:
1a:53:4d:01:cd:13:18:74:ea:b9:c5:c3:e8:1c:81:81:ea:95:
7d:52:41:60:05:31:3b:11:57:41:8c:f8:b6:cf:42:1e:d2:a8:
0d:1e:42:97:42:a1:b1:b5:d2:d9:8d:82:a3:68:c3:e2:1c:52:
e4:fb:4c:e8:ce:b4:a9:ff:c0:53:97:3a:be:7c:d0:6e:09:c5:
73:2b:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:11:16 2026 by rpki-client