Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
File: 0kSCMx_jdh3lOpm9N8j9am-foAc.mft (raw, json)
Hash identifier: fqlgqz5hRaDKB5ra8kWCL1PGuP7brCbtkl6M2/80w1c=
Subject key identifier: E0:F1:46:B6:BD:E5:37:A0:83:5A:01:9E:97:9E:89:5A:E3:02:9D:4E
Authority key identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
Certificate issuer: /CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Certificate serial: 019EE8C586946386B351DE7A05D9E20D252E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
Manifest number: 03A2
Signing time: Sun 21 Jun 2026 06:01:59 +0000
Manifest this update: Sun 21 Jun 2026 06:01:59 +0000
Manifest next update: Mon 22 Jun 2026 06:01:59 +0000
Files and hashes: 1: 0kSCMx_jdh3lOpm9N8j9am-foAc.crl (hash: BEOGnTUWo23I1YoQ0XRfpuNSxsQXSz4bofDWuRbthtY=)
2: iEJQwLdxS0IxuOaEeOzSHydGpSo.roa (hash: Xj6y/UERT3eVvhXQlqkmNoZn9cVGobnGl6x9D/dBts8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:c5:86:94:63:86:b3:51:de:7a:05:d9:e2:0d:25:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Validity
Not Before: Jun 21 06:01:59 2026 GMT
Not After : Jun 22 06:01:59 2026 GMT
Subject: CN=e0f146b6bde537a0835a019e979e895ae3029d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:e3:79:d9:73:68:ca:a4:a2:6d:d0:d5:d3:
a7:f5:b1:a9:e2:5b:60:56:6c:25:dd:c8:68:64:4d:
e4:f8:1e:c2:fe:05:19:7e:32:af:9f:00:37:e9:2c:
3a:19:3e:ed:a6:0b:0a:26:be:4f:cf:f5:1e:0a:0b:
b4:f3:58:22:64:67:c5:17:ce:d5:9a:52:8f:e0:b2:
80:26:f5:12:c0:41:e4:14:a5:74:37:47:a7:59:2f:
e9:4c:d3:39:a7:79:d2:a1:35:c8:5a:2f:c9:0c:d2:
c8:97:d0:6d:62:6e:7d:cf:ba:99:20:17:a4:0f:6b:
2b:db:34:89:aa:59:c3:c4:b2:b0:2c:c5:7c:6a:15:
1d:aa:31:59:b5:03:bb:c7:1f:95:7b:63:f5:7d:81:
51:6f:67:47:32:eb:34:c0:ad:75:c1:57:5c:3c:54:
9c:1f:63:dd:1c:dc:d2:07:d6:59:95:73:20:1f:98:
ac:45:9b:3a:5b:04:ba:88:a9:c0:ac:f9:4c:f4:78:
20:ef:2d:43:bc:48:84:77:65:17:3f:b5:bd:ef:cf:
c4:a9:b9:fc:25:c0:ae:69:7b:54:1a:39:5d:68:f2:
dd:e8:30:0d:50:fe:4f:77:e1:91:52:ed:ce:bf:b4:
70:02:77:ad:7f:5b:94:49:0c:90:a3:79:b1:2c:47:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F1:46:B6:BD:E5:37:A0:83:5A:01:9E:97:9E:89:5A:E3:02:9D:4E
X509v3 Authority Key Identifier:
keyid:D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b9:9a:ad:da:4d:40:1e:21:ef:98:e5:87:f1:88:77:b0:7e:
6d:f2:b4:92:5d:bc:07:c7:72:ef:43:8a:b6:ad:40:08:d4:16:
57:1f:45:12:3c:a2:56:eb:c3:fe:fb:7a:27:88:7d:50:6c:db:
79:a3:ed:0d:79:fc:23:64:dc:fc:46:94:d1:e6:f8:03:5e:04:
52:94:55:e4:3f:94:1b:84:2a:81:70:d4:ec:ed:1d:02:65:6e:
2b:ba:95:24:23:49:e0:13:2e:f5:f1:e3:54:fb:f6:18:d8:c1:
f1:51:8c:a5:76:25:e3:69:25:62:fb:7e:a1:86:d2:9a:99:70:
e2:24:36:08:ce:9b:12:8f:b7:da:39:d6:e8:42:d3:25:fa:c1:
af:9d:f6:f6:24:38:5c:eb:31:bd:2d:36:5b:78:f8:ad:a9:7f:
58:fc:f5:01:55:60:3c:37:38:bb:b6:80:4a:67:fe:60:c8:77:
fc:5f:dd:0c:31:2e:96:11:66:62:20:a9:2a:3b:9f:07:5c:b3:
20:b4:f2:d5:e4:50:89:91:50:a8:cf:f5:e5:b7:03:ee:c9:58:
0f:d5:f5:5b:dc:c3:fd:c7:cb:e6:b0:10:05:39:37:12:e0:5f:
55:3b:b1:da:8a:7b:75:12:1d:2a:77:1e:4f:e8:93:26:d2:ae:
f3:23:4d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:23:32 2026 by rpki-client