Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
File: 0kSCMx_jdh3lOpm9N8j9am-foAc.mft (raw, json)
Hash identifier: YvKXvMlEkRDJZpdDmqiBDkCslEb/C5BfX3ucw5qDadE=
Subject key identifier: 6B:3B:94:D4:ED:0B:86:B5:50:16:24:BC:A8:B4:FA:33:38:DA:E9:0C
Authority key identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
Certificate issuer: /CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Certificate serial: 01A13B92B58FAB8752487283B35EBA2DAA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
Manifest number: 04D6
Signing time: Wed 14 Oct 2026 18:00:32 +0000
Manifest this update: Wed 14 Oct 2026 18:00:32 +0000
Manifest next update: Thu 15 Oct 2026 18:00:32 +0000
Files and hashes: 1: 0kSCMx_jdh3lOpm9N8j9am-foAc.crl (hash: bYxYwEtci4SyVIitjg9AkzneruIa4PiZKHoIAS/nz1Y=)
2: iEJQwLdxS0IxuOaEeOzSHydGpSo.roa (hash: Xj6y/UERT3eVvhXQlqkmNoZn9cVGobnGl6x9D/dBts8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:92:b5:8f:ab:87:52:48:72:83:b3:5e:ba:2d:aa:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Validity
Not Before: Oct 14 18:00:32 2026 GMT
Not After : Oct 15 18:00:32 2026 GMT
Subject: CN=6b3b94d4ed0b86b5501624bca8b4fa3338dae90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b2:7a:d4:2b:28:a1:2b:a8:1a:75:62:8d:f0:
b9:24:b7:96:c6:81:28:09:6b:bc:18:7a:ba:22:c6:
21:c4:17:b8:92:1b:6a:1f:42:9e:61:eb:1e:a9:3a:
56:9f:1c:30:cb:aa:ca:fc:3d:73:b7:c8:8e:3f:0d:
82:8e:37:69:46:7b:eb:79:4d:30:e4:c8:a0:07:f4:
47:b1:d0:03:9f:75:8d:b1:ab:e2:fb:72:c6:c7:b9:
df:ca:04:f5:29:e4:cb:c3:ea:c4:3b:71:fd:1c:3b:
5b:5b:17:53:c4:a3:d9:a2:2d:4b:e4:4e:8c:97:03:
3e:c8:99:56:08:9a:3f:5a:a7:c1:a1:c3:15:60:0b:
ad:26:a6:ad:e8:4e:2c:29:f0:ce:63:11:e0:7a:7f:
74:0f:ac:86:79:ab:f7:f4:99:ac:a0:b6:75:46:42:
38:d2:cf:de:ec:73:3e:b3:70:87:b9:c0:e1:f2:33:
c1:9c:f1:2b:0e:87:c4:93:9b:f2:c0:68:af:47:cd:
82:0d:04:b0:8e:99:c6:f1:02:d5:c9:ef:3d:21:b6:
b3:4a:49:02:75:03:77:23:17:f3:f1:fa:03:d0:60:
52:a8:0f:3a:81:30:f6:40:58:33:aa:a5:f1:d8:e1:
5e:70:ad:ed:10:92:8a:db:28:69:57:d4:4b:fd:0f:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3B:94:D4:ED:0B:86:B5:50:16:24:BC:A8:B4:FA:33:38:DA:E9:0C
X509v3 Authority Key Identifier:
keyid:D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:81:26:de:ed:ce:25:25:b2:df:67:46:63:92:57:e5:e3:1a:
19:16:e7:66:53:6b:d3:27:a3:cb:14:a9:47:dc:4a:83:74:12:
81:81:22:1f:12:03:49:57:85:c5:e5:a8:83:89:f6:ab:6d:03:
88:98:62:9a:aa:75:39:da:fc:41:04:30:c9:9b:58:d0:07:f7:
92:cf:24:4c:b3:2a:bd:5d:1d:23:47:a5:cd:a9:fb:97:bc:38:
5a:3e:dc:2f:db:2e:f8:ee:ca:c3:d7:58:1b:ba:03:01:18:9f:
fb:92:68:79:0d:2b:a4:d4:02:8e:be:eb:ed:82:2f:dc:e4:dc:
a4:66:f5:05:8c:9e:fe:0b:e7:b9:df:c3:c6:75:f6:c2:ad:78:
04:15:4f:25:38:c7:b7:4e:53:8e:c9:a1:3c:fe:78:44:d3:10:
33:90:24:fa:1e:dc:27:45:53:51:09:6d:b0:04:ec:24:ba:b5:
33:f7:72:21:96:b3:29:8c:23:c9:6f:20:af:c1:da:21:c9:7a:
23:f6:8f:d1:5a:2b:3e:50:4f:24:f8:fe:16:d3:ea:23:21:36:
d6:df:d0:28:5c:e8:15:1b:f5:22:f3:39:09:4d:8b:ed:72:ea:
17:c6:13:35:ec:eb:c7:a9:32:eb:b8:ff:fe:66:ef:4f:96:64:
61:67:c4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:02:18 2026 by rpki-client