Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: RCerMmkIRdm81OsZY8OSPORMvN02q381BKTZwhNIyGQ=
Subject key identifier: A6:EA:61:D4:61:8F:90:A1:08:95:A3:51:E1:5D:02:1C:8F:C6:1D:E1
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 01A0C745A2E279EE3B555AA8D0CE6D61193E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 19F8
Signing time: Tue 22 Sep 2026 04:00:24 +0000
Manifest this update: Tue 22 Sep 2026 04:00:24 +0000
Manifest next update: Wed 23 Sep 2026 04:00:24 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: vER6suT2ygOY7oTEHolatr9uNmhfC/fj6Nne3RfY5BE=)
2: MqEYcGP28yZryUtdD_3wTNGTAVc.roa (hash: p6r4IvQhkyRHVWZ8dRkzEjBjRhq65iPcj75XjeJcHaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:45:a2:e2:79:ee:3b:55:5a:a8:d0:ce:6d:61:19:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Sep 22 04:00:24 2026 GMT
Not After : Sep 23 04:00:24 2026 GMT
Subject: CN=a6ea61d4618f90a10895a351e15d021c8fc61de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:cb:4f:88:1b:92:14:1f:4f:ef:52:a0:46:
fc:87:59:2c:a5:c3:aa:56:9a:df:ae:4a:fc:b1:91:
5b:ca:c6:aa:8c:68:85:73:3b:8a:f3:29:76:a4:0e:
bc:07:a9:de:1b:32:38:39:1c:fb:75:19:92:47:fb:
ed:99:00:b9:62:be:b0:16:1b:e1:05:46:6e:23:f5:
66:19:8b:b1:95:72:d9:88:e6:b6:50:fc:94:bd:12:
d6:da:32:a3:58:84:8c:5c:47:fb:ec:cb:9c:4e:15:
1c:c9:aa:e9:db:66:75:cf:3e:b0:21:f8:67:a9:71:
e9:38:cc:e6:e0:3d:32:b2:b1:b6:95:5f:aa:77:97:
2c:6e:29:f2:2f:00:3a:d1:85:43:10:91:0a:81:af:
5a:6a:76:59:64:5e:bf:d5:be:79:33:1d:54:76:d1:
57:ec:35:87:30:7b:52:93:5c:74:a1:28:af:b8:01:
c9:8a:23:40:46:ae:8c:ab:b6:58:45:22:03:da:e8:
74:fc:85:a1:cb:75:6c:48:13:e6:b3:60:30:71:7b:
7d:e7:cd:1c:c7:3a:75:26:d7:1f:a0:fc:cc:fa:48:
31:95:bb:e4:ba:32:6a:5a:3a:2b:ce:fa:e6:7b:29:
c3:13:86:dd:3e:6c:2c:d5:89:8e:a3:21:e0:eb:83:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EA:61:D4:61:8F:90:A1:08:95:A3:51:E1:5D:02:1C:8F:C6:1D:E1
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:d4:53:6f:21:76:43:18:64:fa:fb:c1:c9:dc:f5:60:95:9a:
85:0d:c0:cb:d8:88:3d:84:55:3b:18:05:21:c3:c3:6b:4e:b3:
07:14:31:52:0d:20:9e:bc:fe:a5:4b:65:ec:2b:3f:41:17:c0:
cb:21:c4:30:c0:de:e5:cc:1a:ee:c7:ee:bf:bf:11:1f:d5:59:
f9:7b:c1:0f:ca:11:37:e9:67:ec:65:c7:a6:b5:48:61:d0:60:
f5:eb:60:ff:77:20:eb:1b:c3:80:85:a1:28:8d:0e:b5:e7:af:
61:ab:5f:69:48:f2:e6:a2:6e:fd:eb:0b:2f:3e:3f:f8:40:08:
8d:3e:72:58:18:fb:12:71:5a:36:df:d0:3f:ec:86:5b:80:12:
de:2a:7f:78:f2:b4:b2:85:54:2a:d6:18:6e:c0:b2:79:ec:53:
2a:55:0a:51:02:51:e9:26:16:d6:1c:a6:5f:15:f3:40:23:c5:
53:5b:5f:92:09:5b:c4:98:c0:f8:d3:c4:ab:d2:a6:c3:a6:94:
df:b9:47:af:74:63:f2:06:cf:05:e5:cf:6b:5f:38:89:b1:b6:
c8:f3:b3:26:e9:1c:90:58:51:21:7d:ce:6d:d0:49:28:4a:74:
7b:8d:19:43:e5:97:a8:0c:e5:5a:ff:4c:1c:46:96:86:6f:19:
a1:c6:4f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:23:54 2026 by rpki-client