Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: p3AnSHUk8OUhzF80NtzP7jwiRO6ZQ8GcxGr0BymP5MU=
Subject key identifier: 43:61:E2:2D:CF:C6:FE:18:C2:0C:B9:E9:69:AF:9C:D9:69:00:F7:CC
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 019FA975601B85EFBA95A419429A571F505C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 1964
Signing time: Tue 28 Jul 2026 16:01:09 +0000
Manifest this update: Tue 28 Jul 2026 16:01:09 +0000
Manifest next update: Wed 29 Jul 2026 16:01:09 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: tlXxZZmR9GlX5MJWreidkEv9Xi4rPegBOQK6ZyGm1RA=)
2: MqEYcGP28yZryUtdD_3wTNGTAVc.roa (hash: p6r4IvQhkyRHVWZ8dRkzEjBjRhq65iPcj75XjeJcHaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:60:1b:85:ef:ba:95:a4:19:42:9a:57:1f:50:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Jul 28 16:01:09 2026 GMT
Not After : Jul 29 16:01:09 2026 GMT
Subject: CN=4361e22dcfc6fe18c20cb9e969af9cd96900f7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:da:b3:84:14:02:be:85:41:45:98:3e:23:b1:
35:66:22:c3:a3:98:45:95:10:36:da:8f:6b:80:31:
90:ff:f5:cb:7e:43:aa:1e:fa:11:c5:cf:47:5c:7f:
8a:f1:d3:ea:43:be:0c:2e:b9:d6:35:b1:c2:cd:bb:
fd:16:00:dd:76:98:b2:fd:12:f9:3c:f6:3c:1e:70:
54:8e:59:03:b5:f1:96:72:bd:0f:36:02:f3:6f:d3:
64:53:d2:86:ee:97:0e:36:56:11:73:0c:e2:96:57:
ea:00:e7:5e:a4:01:19:55:c9:ff:15:db:c4:9c:a2:
c7:f1:19:0a:fa:f8:5b:8b:c2:68:b7:3e:bd:c3:7b:
1f:e4:b2:d3:72:f3:4e:f9:22:f5:66:e2:14:3b:e9:
83:45:fa:55:a6:3d:ce:34:51:de:7e:34:26:a7:d0:
ab:47:ed:0d:e4:98:76:44:b2:b2:77:8d:d8:7d:57:
78:24:b5:55:da:b7:ec:63:d9:28:5e:22:e8:c6:25:
14:13:f7:f5:36:0d:1a:a4:4e:90:26:0d:ba:ae:05:
2f:5d:4c:4d:3c:12:df:21:86:2a:77:18:e5:d4:0c:
33:67:a8:96:b9:0e:f8:c4:b3:4c:da:8b:99:be:11:
1f:e6:5f:23:89:85:8d:55:6d:b0:d1:93:61:38:37:
df:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:61:E2:2D:CF:C6:FE:18:C2:0C:B9:E9:69:AF:9C:D9:69:00:F7:CC
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:41:19:be:c6:99:08:f4:44:11:ce:f7:3a:e9:b9:6b:ce:96:
d4:a8:8b:17:22:7e:91:1b:85:13:d3:f2:8c:5d:c6:bd:d5:e3:
8c:05:7d:2d:33:a5:2a:94:48:1b:50:0d:18:0c:27:7a:78:e7:
12:2c:c3:0c:6a:8e:3a:b3:12:6a:f9:bd:5e:fb:ec:f4:48:04:
75:bb:41:0d:d1:8f:71:99:c2:63:bd:cf:42:d9:80:68:93:3e:
6f:87:89:57:36:33:21:59:be:d9:1e:2c:59:91:cc:47:a0:a9:
53:a6:9a:3b:bf:e0:1e:f0:e9:e6:ce:5f:e4:82:a8:d2:cb:c4:
4c:52:f5:e2:05:6a:ee:7e:77:07:81:31:74:7d:66:db:76:de:
91:0b:7b:3a:6b:31:14:34:19:da:d8:8b:ef:31:8a:52:30:32:
df:45:b3:e4:f9:17:62:0e:c3:97:67:4c:e3:4d:f3:e7:77:aa:
26:b7:dc:57:39:da:74:93:32:10:43:e1:73:56:1e:fe:db:4b:
d2:ee:a3:96:94:b6:46:11:1e:04:50:fb:93:1b:fb:26:4a:d7:
0a:e8:81:03:d2:32:ba:f8:13:61:27:66:c4:97:1b:ed:e1:d2:
95:82:b2:a6:b1:dc:33:6a:50:2a:10:d6:9a:f7:10:8c:f4:83:
12:e1:e8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:41 2026 by rpki-client