Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
File: 0kvL9emk_kMp8iPBFFBykFOPnMI.mft (raw, json)
Hash identifier: 3yskr4KxY+CfIgYjR55JvydaVpJhQrd5s3r+XNnOO0I=
Subject key identifier: 3B:66:D5:D8:87:70:EF:EA:A6:C2:A9:C3:95:25:BD:6C:45:63:EE:51
Authority key identifier: D2:4B:CB:F5:E9:A4:FE:43:29:F2:23:C1:14:50:72:90:53:8F:9C:C2
Certificate issuer: /CN=d24bcbf5e9a4fe4329f223c114507290538f9cc2
Certificate serial: 01A0C7EA6C03259745616CA623FDD911A300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
Manifest number: 15B2
Signing time: Tue 22 Sep 2026 07:00:24 +0000
Manifest this update: Tue 22 Sep 2026 07:00:24 +0000
Manifest next update: Wed 23 Sep 2026 07:00:24 +0000
Files and hashes: 1: 0kvL9emk_kMp8iPBFFBykFOPnMI.crl (hash: bghXkgYv9m9S+CbTTKJNaShNkiR2ZcBW4jqadUy0bPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:6c:03:25:97:45:61:6c:a6:23:fd:d9:11:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24bcbf5e9a4fe4329f223c114507290538f9cc2
Validity
Not Before: Sep 22 07:00:24 2026 GMT
Not After : Sep 23 07:00:24 2026 GMT
Subject: CN=3b66d5d88770efeaa6c2a9c39525bd6c4563ee51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:e2:af:33:76:5e:bd:85:ae:e2:76:87:93:
42:11:b2:04:9f:97:cc:92:56:26:28:67:f2:40:f9:
73:bc:96:fc:e3:9d:61:7a:a6:de:3a:66:a9:b6:38:
67:30:87:b4:ee:01:d5:99:26:82:42:b6:8e:73:6c:
f7:b5:60:b1:28:cc:47:07:7d:11:9b:23:66:a3:97:
a0:c6:f2:4b:10:e9:5f:83:87:a2:82:27:3f:f4:f8:
cd:35:fd:cb:1a:0a:10:2f:eb:9f:3e:8c:dd:cd:71:
b4:70:a7:4a:51:30:72:8a:e5:9d:fd:dd:87:a3:57:
4c:7b:e9:fb:e4:a9:23:78:b1:db:d9:07:2b:5f:73:
8c:28:96:ff:1c:2d:6a:33:4c:4c:99:21:95:21:9e:
c0:e4:74:a4:f8:ad:3f:a5:21:aa:ab:0d:15:a3:c9:
6a:da:47:b0:be:98:ff:8c:81:05:0f:42:b1:bf:a5:
9d:db:f9:8c:9e:21:96:2c:37:4a:86:5c:7b:c4:b8:
0f:40:d7:3e:dd:fd:c4:45:f1:e5:94:18:55:6b:6d:
7c:a9:0b:f3:0c:ec:71:61:4f:cb:83:da:98:bb:10:
4a:9d:48:80:eb:18:07:ed:dd:2d:70:9d:28:85:2f:
d6:77:ff:54:08:37:d3:ea:a3:fb:e4:9f:5d:eb:6b:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:66:D5:D8:87:70:EF:EA:A6:C2:A9:C3:95:25:BD:6C:45:63:EE:51
X509v3 Authority Key Identifier:
keyid:D2:4B:CB:F5:E9:A4:FE:43:29:F2:23:C1:14:50:72:90:53:8F:9C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cc:d7:db:a3:72:19:87:9f:02:a8:d8:49:2a:ad:8c:22:ff:
ea:03:f9:52:25:b5:9d:33:e4:50:0c:fd:a4:c3:d6:4b:c6:05:
0c:c0:86:b9:2c:1e:0f:f0:4b:8b:5a:3e:5b:10:8f:b3:3e:4a:
a8:7e:b1:b5:82:2f:29:20:d9:bd:3a:7c:ae:12:48:97:ef:7b:
55:24:b1:61:73:a7:e4:e8:2d:4e:75:31:07:60:27:a8:e1:f2:
96:b8:13:cf:85:3d:f7:b2:02:f9:9a:00:92:1e:3d:0f:8a:b3:
ca:39:c5:c5:26:28:0b:44:a6:c7:dc:90:5d:f4:51:7c:63:b6:
d9:f8:57:e6:03:d5:6c:d2:61:97:60:2b:07:1f:f0:03:37:06:
a3:eb:8c:a2:a8:fc:73:dd:c5:c7:49:ee:35:3e:91:a3:dd:ce:
5d:ec:fa:2f:5a:27:4a:12:d6:1c:27:38:1f:79:cd:1c:c7:ab:
78:7f:19:22:e6:99:38:03:ce:0c:91:c5:fa:3b:f6:bd:ea:a1:
b5:ec:b6:83:0b:2c:b3:77:82:e3:c4:f1:0c:ef:aa:92:b7:58:
dc:ba:77:c9:4e:91:54:3d:6a:53:a9:f6:ee:0e:93:8d:cf:e0:
90:b7:e1:c7:69:b5:44:07:a4:1c:2f:cf:fb:5a:6c:77:fd:30:
5d:16:48:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:44:40 2026 by rpki-client