Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
File: 0mKOBpte2LRVk0O1tn9atPkiUf4.mft (raw, json)
Hash identifier: XJc4zy2fi8Ofyp6YhjfYVF7b/WajD2PBo5FyZDwyklw=
Subject key identifier: 23:EF:EF:2F:D4:F9:A4:54:10:E2:FE:F9:A5:21:3D:15:22:0A:1B:AE
Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Certificate issuer: /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Certificate serial: 01A0D9835A28483C282C0450BA90F3DF8000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
Manifest number: 05BC
Signing time: Fri 25 Sep 2026 17:00:59 +0000
Manifest this update: Fri 25 Sep 2026 17:00:59 +0000
Manifest next update: Sat 26 Sep 2026 17:00:59 +0000
Files and hashes: 1: 0mKOBpte2LRVk0O1tn9atPkiUf4.crl (hash: V5fcfGwVu8XO56HtlX8ntIdBI1WDaNLRgfxD7BFZ0pg=)
2: eypU5gakI37ZRxsTjD1X4DoOVfo.roa (hash: hM1K52QM5/jrbLf53wcNduMHGRDz/fwXSTlOlM9cG8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:5a:28:48:3c:28:2c:04:50:ba:90:f3:df:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Validity
Not Before: Sep 25 17:00:59 2026 GMT
Not After : Sep 26 17:00:59 2026 GMT
Subject: CN=23efef2fd4f9a45410e2fef9a5213d15220a1bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:19:f0:a8:be:72:c2:31:54:75:62:21:31:44:
ab:84:ca:0d:b0:97:a2:83:6c:08:58:3d:33:08:49:
6d:2d:bd:5a:5c:9b:21:c7:ed:5b:a7:21:d3:2f:01:
f1:4f:f8:23:6c:ad:ca:3d:34:87:be:88:ec:20:c2:
d5:37:ce:8e:e8:3e:f2:90:57:39:16:8c:30:ff:e5:
2a:2b:09:b8:d2:27:d1:6f:aa:48:a0:63:00:ce:c8:
f1:17:2b:85:db:1d:c9:d4:7d:55:60:37:8e:b6:f6:
fa:91:55:79:26:af:54:f3:2f:d4:78:7b:6a:73:34:
ec:fd:e6:1a:37:59:34:62:8e:ba:30:1f:07:9a:ce:
2f:e1:98:c3:7c:4b:32:33:39:d9:4d:38:50:74:f2:
4d:54:9b:4b:33:06:d1:49:a7:e0:73:47:93:3f:2a:
bf:f6:88:ae:ca:44:b9:7f:fe:53:ce:58:7b:83:79:
f3:3d:90:2b:68:99:5e:0a:c9:2c:49:5f:8d:1a:6c:
d3:31:b6:70:df:8b:3c:2f:f6:79:b5:52:58:fa:84:
c0:d6:5c:c6:92:28:ed:4a:31:8b:22:cf:6a:ac:d0:
b6:83:1c:86:fd:36:ed:5d:1b:ed:84:09:2a:0d:a7:
c7:0f:d0:c3:fe:23:02:55:94:99:84:78:e2:3b:7e:
4e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EF:EF:2F:D4:F9:A4:54:10:E2:FE:F9:A5:21:3D:15:22:0A:1B:AE
X509v3 Authority Key Identifier:
keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:91:0b:f7:83:3e:cc:5f:05:59:f1:a4:a7:21:62:8c:da:69:
b0:21:fe:f4:b6:98:94:16:7b:cd:14:a5:8b:54:a7:61:71:e1:
0c:e3:29:2f:fd:b0:ac:5c:05:2f:22:7e:75:5e:e5:38:4b:8d:
07:51:6b:c2:d0:68:f1:f7:e8:9c:c8:a3:a2:2a:67:7b:27:e9:
91:f6:7c:bd:4b:0d:5b:9d:78:e8:84:20:d8:7b:75:ba:1a:dd:
95:63:f2:22:94:99:6f:ad:d6:63:b7:59:16:c4:6d:40:72:4c:
03:96:1a:86:d9:da:5a:bb:9f:36:b3:1d:f0:8b:b5:df:9d:02:
c5:eb:72:2a:67:d2:ce:9a:77:ce:5f:ec:12:3b:8d:d4:4d:86:
f4:af:f9:ea:43:40:c0:36:95:35:2a:a1:46:12:b0:eb:86:39:
b9:1f:e2:b5:22:2a:b2:fa:e1:ab:e7:3e:07:83:d5:69:da:a4:
42:34:79:48:4a:c2:1a:30:98:a2:c4:b5:55:0e:37:e3:33:bc:
e5:10:35:71:12:35:bc:bf:6b:da:12:e0:77:b9:9c:2c:e1:7b:
f3:90:45:dc:5f:70:ac:1f:80:a6:40:8a:21:04:23:ea:52:9d:
55:45:4a:a3:75:69:98:66:32:a5:8c:db:bc:e5:45:1f:44:1e:
fb:5b:f6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:36:07 2026 by rpki-client