Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
File: 0kSCMx_jdh3lOpm9N8j9am-foAc.mft (raw, json)
Hash identifier: jkaF9DPVXol/HWlWTZ7zaC7Da+moko7wHhyOYK308dg=
Subject key identifier: 69:40:E9:9D:57:1A:70:BA:80:49:EA:00:40:AC:3F:27:18:09:C8:A7
Authority key identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
Certificate issuer: /CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Certificate serial: 019D9E884B0EDD9591588CF2E8E0736B2CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
Manifest number: 02F7
Signing time: Sat 18 Apr 2026 03:00:25 +0000
Manifest this update: Sat 18 Apr 2026 03:00:25 +0000
Manifest next update: Sun 19 Apr 2026 03:00:25 +0000
Files and hashes: 1: 0kSCMx_jdh3lOpm9N8j9am-foAc.crl (hash: 1aeWbAPjhC44AQOc7LQaMGybBtpiIvoBEPrXm7OUync=)
2: iEJQwLdxS0IxuOaEeOzSHydGpSo.roa (hash: Xj6y/UERT3eVvhXQlqkmNoZn9cVGobnGl6x9D/dBts8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:88:4b:0e:dd:95:91:58:8c:f2:e8:e0:73:6b:2c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Validity
Not Before: Apr 18 03:00:25 2026 GMT
Not After : Apr 19 03:00:25 2026 GMT
Subject: CN=6940e99d571a70ba8049ea0040ac3f271809c8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a1:f4:1b:c9:be:7c:08:cd:54:8c:40:65:82:
b2:b3:ed:34:8a:e8:fc:ab:9f:7b:6d:12:24:5b:5b:
9a:9b:6d:98:be:36:3c:e4:58:18:2d:74:41:14:22:
3b:cd:64:19:40:27:4a:f4:19:95:0a:5c:a9:dd:d8:
96:29:fa:e7:e7:64:63:c4:9b:1f:d1:3d:c3:c9:41:
64:ab:7d:b7:56:7e:ab:3e:41:00:8c:8e:db:11:55:
9d:f7:b5:05:06:d3:e7:36:1f:7c:6e:f0:d9:1c:b4:
bf:5f:4f:db:c4:34:e8:76:78:40:8b:86:18:06:18:
f2:19:f5:82:10:9e:fa:57:4c:c9:5f:5b:87:64:ba:
8a:11:c0:fd:88:2d:3a:16:db:af:d9:78:0c:5f:74:
25:25:13:c0:3e:5f:d4:5a:52:be:ef:9c:42:9b:30:
c7:dc:5d:cf:78:39:e5:e2:5c:63:72:b7:cc:c2:08:
e1:d5:6f:54:2b:63:94:38:d2:65:82:25:fa:f6:5a:
86:34:27:1f:b4:2f:2a:53:09:0e:7d:55:96:4c:ff:
93:f3:84:31:03:13:f7:04:f6:b1:a5:12:17:00:c6:
a2:bf:8e:9e:5c:7c:0b:4f:dc:b3:1d:55:c2:45:74:
a9:15:fd:d8:6e:0e:c7:d0:df:62:13:17:8a:37:60:
90:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:40:E9:9D:57:1A:70:BA:80:49:EA:00:40:AC:3F:27:18:09:C8:A7
X509v3 Authority Key Identifier:
keyid:D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ae:83:c4:ae:9a:a7:ee:a7:b6:26:47:ca:db:a0:01:63:df:
0f:4e:58:2e:22:f7:e6:56:2c:67:68:2e:e8:b9:13:f8:84:fd:
9d:14:cd:76:e9:1f:cd:a1:6d:c9:56:59:73:23:8d:dd:18:37:
40:73:4d:88:b7:09:6e:cf:e7:a5:95:8a:91:fe:99:4d:fb:30:
04:3f:b7:fc:3c:42:b0:ea:f6:6d:64:9f:0c:71:a7:d3:4d:56:
0d:2d:f3:66:27:32:86:2a:b5:90:7a:25:cd:f1:70:28:f0:4d:
6f:d9:48:b5:0c:c9:e8:f5:e2:b8:a6:8f:26:cc:f3:29:d7:b8:
ac:4e:63:52:bd:b1:60:fd:8d:1b:19:04:c7:fd:38:7e:75:d2:
62:ca:94:3a:9e:2a:bc:37:95:05:19:1a:ee:22:6b:67:3c:2f:
c6:be:54:36:4a:bb:40:47:5a:4f:45:26:27:e0:6f:c7:7c:ea:
ce:0c:85:10:7c:66:75:ec:31:14:fe:9f:50:2c:1b:ef:16:58:
64:43:58:0e:f1:aa:f1:55:c8:de:71:c5:0e:86:db:72:3d:2f:
bd:10:e9:ac:56:e8:8b:26:00:a6:8c:53:18:da:ee:6c:23:92:
5e:b5:af:78:22:96:a7:fa:c2:76:56:5b:fb:f5:5c:36:88:cc:
f5:1f:76:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:12:26 2026 by rpki-client