Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
File: 0kvL9emk_kMp8iPBFFBykFOPnMI.mft (raw, json)
Hash identifier: bVSu7luEKyJeNPYAx1eWiQS12foSLWAPWIhqlBLLE6w=
Subject key identifier: 1D:B4:1E:65:B9:8F:7A:BC:3E:EF:32:90:60:44:47:90:71:3C:3C:19
Authority key identifier: D2:4B:CB:F5:E9:A4:FE:43:29:F2:23:C1:14:50:72:90:53:8F:9C:C2
Certificate issuer: /CN=d24bcbf5e9a4fe4329f223c114507290538f9cc2
Certificate serial: 019FAA1A7734E5D003B7CC23080FDCFB8E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
Manifest number: 151E
Signing time: Tue 28 Jul 2026 19:01:28 +0000
Manifest this update: Tue 28 Jul 2026 19:01:28 +0000
Manifest next update: Wed 29 Jul 2026 19:01:28 +0000
Files and hashes: 1: 0kvL9emk_kMp8iPBFFBykFOPnMI.crl (hash: qNsSGsryOFHIUheXwvmcZwkmHrc2KYnoBgG0wXk2Y9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:77:34:e5:d0:03:b7:cc:23:08:0f:dc:fb:8e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24bcbf5e9a4fe4329f223c114507290538f9cc2
Validity
Not Before: Jul 28 19:01:28 2026 GMT
Not After : Jul 29 19:01:28 2026 GMT
Subject: CN=1db41e65b98f7abc3eef329060444790713c3c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:37:25:54:aa:af:fd:7a:62:4b:10:4e:bd:
b5:0d:67:a7:30:71:de:df:7e:e6:b1:25:64:11:c1:
54:1c:9c:6c:f7:3b:8a:75:0e:94:99:d7:ee:e0:bb:
4e:d8:66:e0:b8:e6:d4:49:ce:30:37:32:d6:4c:20:
cc:a1:41:7a:1a:59:78:31:3e:e4:c5:ad:91:39:8e:
54:0a:1b:65:c5:27:48:db:02:de:fc:3b:5a:2a:9d:
65:d8:3a:94:33:d8:37:bd:74:bf:db:0a:f0:18:f2:
54:e7:e6:53:7d:ec:e4:c8:c5:25:7c:94:2c:57:75:
e7:0a:9c:10:61:46:0e:33:cd:3e:5d:5e:65:39:b6:
be:89:c2:42:fe:57:99:35:a8:c7:52:6c:9b:26:11:
9a:6d:4c:8f:62:e7:0c:c1:95:24:de:aa:8d:d5:39:
53:d4:97:5a:bb:cd:84:66:ea:73:5a:20:9b:fc:f2:
3c:11:91:df:af:81:26:c5:9d:d4:d7:e0:dd:7e:f0:
35:51:22:cb:db:8f:a3:63:f7:88:cb:a2:83:6a:e3:
42:97:55:b9:db:01:13:f8:e7:4a:6a:27:78:a7:05:
8b:2f:25:b8:3b:bf:df:6e:8b:b9:7d:7d:c6:45:96:
d7:10:a3:e8:39:59:76:f3:77:d0:de:c0:6f:97:2e:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B4:1E:65:B9:8F:7A:BC:3E:EF:32:90:60:44:47:90:71:3C:3C:19
X509v3 Authority Key Identifier:
keyid:D2:4B:CB:F5:E9:A4:FE:43:29:F2:23:C1:14:50:72:90:53:8F:9C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f3:f4:cb:b7:04:0f:2a:ef:b3:fc:2a:3e:d3:78:09:72:56:
f9:8b:1e:5b:e4:cb:76:78:3a:ff:dc:62:9f:60:a2:a8:ab:d7:
79:31:2d:97:93:e3:9d:92:46:2a:90:19:0a:ff:93:f5:ce:ce:
5a:89:a1:28:26:3a:f0:f1:b1:50:9f:f9:c1:50:a8:dd:ba:71:
0e:20:89:61:c4:d9:3a:09:67:05:7e:89:32:36:cb:78:70:8f:
56:20:25:b5:89:65:92:a4:4b:7a:63:b3:cd:7f:f5:51:4e:4c:
20:6b:ef:be:81:fe:ec:76:eb:17:88:55:bb:ba:45:37:e7:0c:
e5:f9:c3:ba:cf:7c:2c:37:71:69:b1:c5:3c:bf:92:39:86:e4:
77:ab:2a:3d:d8:0a:d8:13:80:79:f2:21:72:56:1a:c2:4c:03:
b2:07:b4:6f:14:cd:13:80:f9:77:9e:68:27:9b:9e:87:d2:af:
e8:9f:1c:f6:f5:1c:17:7e:1c:0a:b9:b5:c7:26:55:8d:e1:1b:
e3:c8:85:36:eb:f6:9b:8b:3e:96:e7:14:33:33:43:3a:6a:aa:
ce:bb:45:8b:84:6c:50:74:d6:e9:21:de:3f:3b:43:96:84:32:
ec:3a:ae:81:44:5c:dc:36:06:5c:92:21:50:e7:62:ee:7b:e4:
5f:fa:79:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:28:21 2026 by rpki-client