Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
File: 0kSCMx_jdh3lOpm9N8j9am-foAc.mft (raw, json)
Hash identifier: 9aZZJq5yd5TTnJTbaBv6mbsyqpej6NyI4W23qAb8GTg=
Subject key identifier: 24:1A:B7:3F:1D:AD:7C:B1:50:C3:0E:D9:F0:9C:C8:24:C7:08:AE:1D
Authority key identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
Certificate issuer: /CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Certificate serial: 019CAD225F8EB3D30CE9262D7C6E93D1B22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
Manifest number: 027A
Signing time: Mon 02 Mar 2026 06:00:36 +0000
Manifest this update: Mon 02 Mar 2026 06:00:36 +0000
Manifest next update: Tue 03 Mar 2026 06:00:36 +0000
Files and hashes: 1: 0kSCMx_jdh3lOpm9N8j9am-foAc.crl (hash: 4BKd6IQng512Bc1PqW3nRyOIP2Rj8prQLraTii4NFyQ=)
2: iEJQwLdxS0IxuOaEeOzSHydGpSo.roa (hash: Xj6y/UERT3eVvhXQlqkmNoZn9cVGobnGl6x9D/dBts8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:5f:8e:b3:d3:0c:e9:26:2d:7c:6e:93:d1:b2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Validity
Not Before: Mar 2 06:00:36 2026 GMT
Not After : Mar 3 06:00:36 2026 GMT
Subject: CN=241ab73f1dad7cb150c30ed9f09cc824c708ae1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:d4:9f:69:f7:ba:71:af:65:13:f1:4f:9c:
b1:45:f9:b8:e0:99:8f:cd:da:67:44:34:37:b4:60:
3b:39:9d:15:3a:06:f8:11:2e:d2:e1:48:d4:8e:b0:
10:78:48:1c:8a:8a:45:0d:bf:6f:5f:75:40:09:e0:
3f:9c:61:73:38:f5:71:db:d8:05:91:9e:92:30:24:
d1:ab:f0:19:90:37:cf:d8:51:60:f8:e6:de:ea:0c:
99:2c:73:6d:68:6b:7b:13:0c:49:20:19:b9:30:ed:
f5:e9:13:9b:1f:d7:88:44:02:89:c9:0d:64:c2:4d:
3a:32:e3:fd:8f:ce:94:bc:ac:ce:d3:99:9b:22:42:
21:26:dd:89:e2:b9:89:2f:ad:b0:c9:fb:f0:6f:bf:
18:1c:cc:a8:35:35:89:27:c4:dd:1d:7a:36:7f:88:
a7:6c:ed:b5:77:f8:b3:bf:a1:14:32:79:f9:dc:44:
dc:d2:ed:99:7b:97:c5:98:1c:b3:06:81:d7:4b:d9:
9d:1d:99:75:d4:a3:94:81:a6:35:4f:0b:12:39:7b:
db:23:8a:87:e3:bd:ff:e3:2c:6e:ca:4e:af:ff:02:
5f:2a:29:85:d7:44:13:a7:9b:d6:3b:ea:44:2f:74:
c9:be:92:5e:8d:a1:20:6b:34:67:f2:8b:8f:d7:76:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1A:B7:3F:1D:AD:7C:B1:50:C3:0E:D9:F0:9C:C8:24:C7:08:AE:1D
X509v3 Authority Key Identifier:
keyid:D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:16:92:27:5a:99:81:d0:c4:e5:0b:0e:fc:34:46:dd:cc:9c:
d8:b7:95:7d:88:e8:4e:48:c5:50:31:f3:31:62:d4:2a:d4:77:
3e:9d:bb:33:67:11:5a:e0:6c:ff:a8:c2:8e:b3:b5:82:02:d8:
a5:a9:62:e7:b6:f8:08:9f:d6:f4:97:63:44:92:61:0c:33:e2:
27:fb:bd:e7:74:e6:3c:18:59:2f:9f:9d:05:04:91:4f:6f:2f:
74:aa:70:4c:a5:00:66:16:0a:ad:2e:38:e0:b9:4d:ce:18:b4:
cd:10:6a:66:d7:65:ec:ea:d5:66:39:39:c2:12:79:9f:56:2c:
31:23:d4:5e:0c:22:83:0e:bd:4c:ad:db:9d:e4:7a:9e:35:86:
33:d9:66:89:57:41:a0:c5:1b:5c:db:82:09:82:ed:90:e5:16:
5a:a6:ab:1d:f4:6a:01:4f:8c:bd:4d:37:f3:52:ad:9b:04:c6:
66:49:c3:30:f6:bf:dc:33:af:c7:36:fc:f3:9b:06:82:56:98:
6f:c8:e9:53:73:03:4f:37:8a:53:d1:b2:a8:bd:27:6e:a7:5b:
4e:11:da:c8:00:08:26:3c:01:69:1f:43:f1:da:fc:3b:a3:39:
29:8f:5e:51:8c:8d:51:b5:f2:93:77:6a:f6:a9:1b:17:e6:fd:
46:06:b7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:37:05 2026 by rpki-client