Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
File: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft (raw, json)
Hash identifier: IweOZyL6f3BF9Y6uUTUeGBSB7AuW0fUU3XHqYPisfQs=
Subject key identifier: 61:F1:0B:9D:52:AC:3E:BB:CE:89:86:20:65:6E:A1:68:25:0C:C3:E7
Authority key identifier: D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
Certificate issuer: /CN=d248185956e443b55b062200f964537bc10bc130
Certificate serial: 01A0CB59895DA49AB1975E33FCAA6E03F071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
Manifest number: 06DB
Signing time: Tue 22 Sep 2026 23:00:37 +0000
Manifest this update: Tue 22 Sep 2026 23:00:37 +0000
Manifest next update: Wed 23 Sep 2026 23:00:37 +0000
Files and hashes: 1: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl (hash: iEIMfqPJWFIIcZhquXBQT5Eq1vnDKjlW3w9DJ78utfE=)
2: 30rxoEVpWSXkeYOFsrzuW4wuGPQ.roa (hash: oZbCMBZPUvgToSoCiHyNVoP2atS7g7LnbwIeau6Z9sU=)
3: Xudz0hLe8s3SLmiPVONXMND3hRM.roa (hash: oORSmt43XgnSynXZgH2ISuQJ8Cm/DBrmnJwy75rrXHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:89:5d:a4:9a:b1:97:5e:33:fc:aa:6e:03:f0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d248185956e443b55b062200f964537bc10bc130
Validity
Not Before: Sep 22 23:00:37 2026 GMT
Not After : Sep 23 23:00:37 2026 GMT
Subject: CN=61f10b9d52ac3ebbce898620656ea168250cc3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:09:7d:be:67:93:50:15:ac:3f:13:e5:ae:fe:
5a:48:37:cd:c7:90:10:4f:47:03:48:68:3b:b3:b8:
6c:67:02:19:c9:fa:72:e1:ab:0d:e7:b4:e8:c2:68:
da:81:34:17:97:96:c7:eb:6b:73:76:3a:61:54:7e:
ba:6d:89:ed:99:29:64:da:c4:eb:67:86:da:73:46:
35:66:aa:c0:3e:26:f8:fc:33:73:88:fc:84:d8:85:
46:b7:62:cd:dc:c5:72:b8:2a:f9:13:90:4c:72:4c:
31:c3:cb:b7:29:ce:37:fe:11:89:e1:1f:0f:51:c1:
0f:bb:ec:8f:6b:23:d5:9c:29:ef:a4:c4:db:57:d0:
4c:21:90:c9:0f:0b:39:1f:8e:9e:f5:7d:9c:f9:c1:
72:63:ec:dd:38:17:c2:7d:32:59:73:bb:44:ad:d0:
dd:7d:b8:28:f4:29:18:ae:ef:a2:b5:e3:98:2e:b4:
91:e4:b2:9b:b3:31:e3:91:50:5e:49:d0:67:67:b6:
da:f5:ec:33:bb:75:f3:95:29:28:dd:a5:e8:d4:1c:
58:30:96:cf:9c:5e:2a:1d:c3:1d:f1:09:59:94:25:
bf:fd:f0:20:18:56:64:d2:05:97:35:bd:50:1d:80:
cb:4e:42:e3:f4:fb:9f:fa:44:82:0d:3d:c2:f4:0d:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F1:0B:9D:52:AC:3E:BB:CE:89:86:20:65:6E:A1:68:25:0C:C3:E7
X509v3 Authority Key Identifier:
keyid:D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ff:14:0d:39:d4:c3:be:b7:9d:32:02:e1:09:4c:8f:42:c4:
61:26:b4:e6:19:0b:1c:92:d3:7f:29:50:b0:80:65:2a:a5:0e:
e5:bf:7f:29:b0:64:17:2d:5d:cf:8e:6b:41:81:98:70:64:11:
02:04:b9:02:b0:81:52:31:a7:d8:6b:63:12:70:fc:45:fc:4b:
b7:0a:37:7a:a3:97:b8:73:72:7d:15:52:d1:41:59:39:41:75:
db:7d:91:1d:e6:4e:d2:64:c0:e4:a5:44:0c:14:9a:8a:e1:4e:
a4:69:ab:c5:b0:cf:26:bc:56:ac:88:7b:5f:d8:f2:25:c3:9a:
59:2e:7c:bf:00:5f:aa:a7:d3:ab:ac:a4:f3:76:47:38:94:46:
fa:fa:3e:8a:43:73:7d:ea:2c:cd:07:0e:43:be:7c:3c:de:af:
13:74:9f:40:45:76:a9:9d:86:4b:cb:60:09:cf:d5:f8:d9:90:
2b:33:1a:55:22:ba:f6:13:3a:35:7f:fb:0a:b2:c8:1b:5f:22:
cc:f6:2d:81:eb:35:cc:46:c4:c8:e9:91:a0:70:78:00:4c:09:
09:ea:6a:cd:69:4d:3a:64:29:63:63:50:d6:e8:c4:c8:17:42:
89:1d:4d:1d:16:a5:e8:eb:7a:e6:61:73:60:9e:bc:27:25:5a:
9b:6b:fd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:32:47 2026 by rpki-client