Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: nMQLEYxLCMgayKyYXz/+MmYFXjpnDarKbDdIaiHxu8Y=
Subject key identifier: 13:44:5E:19:DA:E2:13:C1:9D:BC:EE:77:FC:4C:23:E1:1D:59:0B:A4
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 01A0E73FF18876CA8E43B5F6C57C7291DD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 1A78
Signing time: Mon 28 Sep 2026 09:02:02 +0000
Manifest this update: Mon 28 Sep 2026 09:02:02 +0000
Manifest next update: Tue 29 Sep 2026 09:02:02 +0000
Files and hashes: 1: FQ8IH5cBqg-duSc2imKOt1dr3gc.roa (hash: zLx5O2JcZIf3WeCO72jwVB0rL1h+cp1I4W0w1x3rEC8=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: rT1wlKm7ejFrSaAZxMLm+6nDo8G60M1lX0OMPclvipU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:f1:88:76:ca:8e:43:b5:f6:c5:7c:72:91:dd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Sep 28 09:02:02 2026 GMT
Not After : Sep 29 09:02:02 2026 GMT
Subject: CN=13445e19dae213c19dbcee77fc4c23e11d590ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:30:36:5d:bc:94:0b:98:51:58:cc:73:4e:
91:28:40:a8:ce:bd:ac:3b:1e:c7:86:c4:fc:a8:e6:
98:8c:3d:1d:16:4d:e8:e5:95:ff:a3:df:55:fa:b3:
f4:1e:b4:2f:09:0d:73:46:c1:82:41:a1:86:40:25:
d2:59:b1:9e:56:7f:6b:49:aa:36:33:ac:88:df:e7:
1d:16:4f:c5:65:0a:43:aa:ed:91:d1:91:6a:d5:b6:
02:d3:de:f6:37:83:95:7a:b2:12:58:43:de:4d:d2:
bc:0b:bf:87:ce:16:6b:67:b7:43:b8:c6:c0:70:de:
82:02:a4:92:a7:9d:d6:0e:43:04:1b:d8:7a:f2:cb:
67:ed:eb:76:48:fe:1b:ba:d7:d5:78:21:c6:8e:18:
21:d5:c4:18:94:83:ba:63:12:c3:8c:44:b1:73:a0:
05:9a:3c:1e:52:6e:97:1e:2c:c1:b1:cf:58:90:4f:
f8:bd:b9:b6:87:ba:4c:33:35:ac:36:fa:d1:4f:82:
99:ac:27:71:5b:25:c8:db:54:8e:76:88:ca:12:4e:
46:e8:b8:32:90:1c:4d:03:be:db:e7:21:65:5e:3b:
78:67:95:22:ea:2d:62:ba:b9:e3:0a:02:75:32:e3:
82:3c:bd:ca:9f:d7:6c:40:91:07:54:44:e2:5e:70:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:5E:19:DA:E2:13:C1:9D:BC:EE:77:FC:4C:23:E1:1D:59:0B:A4
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d0:9d:8e:1c:72:7c:9b:bd:ea:d3:5b:37:85:70:61:aa:a5:
d4:e7:55:af:0d:7e:80:b4:9e:94:a0:b1:13:58:20:1e:cd:67:
eb:99:94:3e:00:0e:3e:13:f2:c5:8c:a8:11:1b:15:14:95:fd:
11:69:a0:f5:b3:46:15:99:18:49:ff:ef:2c:ff:3b:ef:33:a1:
cb:f3:2b:a0:e9:48:64:f2:21:e1:d4:c1:14:d6:0c:3e:5a:53:
ad:d8:3b:d1:01:28:e8:5e:ef:53:44:b2:0a:19:65:3b:17:07:
cc:aa:32:1c:86:97:f6:61:38:1f:38:1f:b4:cd:57:ea:1e:8b:
4a:8e:bc:f3:9c:69:02:24:30:5b:43:47:46:2d:74:94:0f:7d:
fc:d5:ab:ad:2b:90:e0:b7:ac:16:9c:a9:e7:6c:0d:4e:38:26:
20:a7:73:0c:4f:79:91:2a:f9:16:2e:20:df:53:d9:02:08:66:
bf:2d:a0:66:4e:53:02:de:bc:33:0a:af:00:da:da:e6:23:1b:
40:94:b4:b1:49:58:d7:76:75:82:28:45:ef:a7:19:08:58:22:
aa:b2:68:be:0c:6a:ec:ad:2a:d2:fb:16:86:57:46:f5:dc:66:
d3:ef:07:75:99:9b:65:b0:f0:00:75:db:37:57:47:44:2f:e7:
6f:d5:18:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:26:02 2026 by rpki-client