Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
File: 0KpKGno60j-q4q6un6YZTwISgSk.mft (raw, json)
Hash identifier: oH42O0AXNRYxUQ5DFB0EAyKiGSFyrdYjN1l8uIw2b6I=
Subject key identifier: DB:5E:A9:9E:85:6B:5D:44:73:1D:99:F6:C9:83:91:23:46:0F:7B:F5
Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
Certificate issuer: /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Certificate serial: 01A0C8211CFBC89C93EF110FB13660289A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
Manifest number: 0683
Signing time: Tue 22 Sep 2026 08:00:08 +0000
Manifest this update: Tue 22 Sep 2026 08:00:08 +0000
Manifest next update: Wed 23 Sep 2026 08:00:08 +0000
Files and hashes: 1: 0KpKGno60j-q4q6un6YZTwISgSk.crl (hash: +HIHFgGOVLju6wJFiKaWLdZJAc8NOB2rt2xSRancxyY=)
2: 0r4BvsnJAN2Pz40prPoUEy6WvzU.roa (hash: AamdQ0j/vjkbuVtweF8p9JDSZ2i84cCde/Gwvcvf218=)
3: 5bf5CwJmQOVXufa2Bw359AZEO9s.roa (hash: vE+kqAcM+EoC006Mvnftc/u8n7NMMiAT3ni4cuysV1M=)
4: epNTET6BvQ6zhUMoLdSPzHjbIWE.roa (hash: qxvi55+BDN0SED0a/Y9HgRfeWegI7IGQUucmOAr178Y=)
5: ncOZbEMiJNqjiscavpDBkZeriIg.roa (hash: KP4yleOLVWJhJdzAKqGM+QLwSbZEncnkoAH1TNTBzJs=)
6: oS9h716veeRY1y9kuFn-MIGUEBg.roa (hash: KS+2BIj/1oDD8HcECr/uPYIsA+2SUgLQkBkCEiNQnZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:1c:fb:c8:9c:93:ef:11:0f:b1:36:60:28:9a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Validity
Not Before: Sep 22 08:00:08 2026 GMT
Not After : Sep 23 08:00:08 2026 GMT
Subject: CN=db5ea99e856b5d44731d99f6c9839123460f7bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:c3:11:c3:74:8b:1d:62:12:c7:17:8e:8b:
94:2d:06:43:fc:8e:ec:68:67:50:0b:17:5a:eb:fa:
c3:ce:7d:96:18:de:6f:b1:82:26:22:01:45:39:e6:
6c:d4:1f:ea:17:31:d1:94:b5:d8:cb:33:80:48:fd:
1a:f1:6b:bf:8f:94:36:f6:e8:3f:82:7e:3a:44:e4:
85:26:7f:49:c9:a2:b4:2f:69:7c:4c:6b:f4:e4:cc:
cb:bb:5d:fe:89:f7:f7:ce:11:40:fe:43:dc:88:ee:
ad:c2:66:52:9c:b3:9d:8d:7b:ed:8f:67:63:17:c9:
6f:fd:db:d1:21:64:ac:0d:0e:c2:2c:d3:e3:ee:53:
d9:87:45:b8:65:02:f9:7d:ed:f0:98:cc:cb:2b:2b:
05:92:8e:81:69:4e:68:cc:fc:0d:ef:64:47:f2:6a:
e2:2a:c2:d4:a0:c2:2b:58:e9:57:66:a1:b3:aa:ea:
7e:61:3c:80:de:d3:4f:23:5c:f7:f1:01:40:14:bd:
8c:4f:f5:57:ba:a9:ad:e2:97:a0:ae:32:3a:b5:0c:
53:91:07:66:60:6c:19:58:13:d8:19:c5:ab:a6:78:
94:fb:b3:68:8b:bb:c8:de:05:34:99:d6:b8:15:50:
e6:e5:1b:f8:dc:08:85:6f:6e:ba:26:e4:fd:7b:9a:
33:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5E:A9:9E:85:6B:5D:44:73:1D:99:F6:C9:83:91:23:46:0F:7B:F5
X509v3 Authority Key Identifier:
keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:51:49:2e:8d:dc:fa:cc:ac:51:94:41:e7:df:d7:c9:54:f0:
ae:20:c0:e7:a6:54:af:8b:53:1d:c8:31:0a:6d:1a:03:a6:2c:
f8:d6:b2:b3:9a:f3:ba:e1:1e:ab:d9:49:eb:2b:aa:6a:5c:44:
4d:8f:34:df:40:31:3e:8b:8a:44:bc:5b:15:9d:2b:11:14:b8:
3c:6d:21:13:af:7a:61:e4:9a:a4:d1:df:71:25:c4:de:99:27:
a3:65:8e:a1:46:de:b6:f4:3b:25:1c:b4:31:3a:dd:de:08:47:
80:fe:2b:2f:f6:b7:b7:8e:85:f2:71:43:bb:54:a8:32:1c:9d:
34:9c:c6:46:00:72:bf:8b:af:b1:9b:b5:6e:25:f5:7b:9e:ac:
94:e4:01:56:84:ef:15:26:fe:cb:7d:1d:87:d1:86:76:d0:cc:
5f:82:04:3c:41:3a:98:08:15:aa:7a:d7:87:85:06:f6:f3:3d:
a9:44:f4:d2:3d:a9:5a:a4:b8:70:54:cf:e9:ab:8c:62:25:3d:
2d:41:e5:9d:26:5c:85:e8:eb:79:a2:d1:82:d5:b4:21:50:49:
ac:9e:66:3d:df:d3:b7:db:2b:f8:c5:99:99:27:f5:7b:85:7e:
46:97:c0:f7:8c:53:b2:f6:e8:43:0d:0c:3b:73:43:a3:66:29:
d2:39:f6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:31:32 2026 by rpki-client