Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
File: 0krezYS7F0i9NbmezqRncuAeyTU.mft (raw, json)
Hash identifier: NUZGXHq77sTV7r05vms3zb9Ad/quXBVeWQl+yYUm01U=
Subject key identifier: A8:71:80:01:8B:B6:24:1D:FC:18:AE:6A:F5:CA:DB:20:91:59:A9:6D
Authority key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
Certificate issuer: /CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Certificate serial: 01A0C40E1B05037A262C9CEF285352DD0A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 13:00:53 +0000
Manifest this update: Mon 21 Sep 2026 13:00:53 +0000
Manifest next update: Tue 22 Sep 2026 13:00:53 +0000
Files and hashes: 1: 0krezYS7F0i9NbmezqRncuAeyTU.crl (hash: HGQgt82t3n9ZVyWdAbeR1BrnsxAV2D088pRoyCvC7fU=)
2: q2viQQxnb5hv9cHSi6k5fpuWvhk.roa (hash: moDWR3w9AS8vgQ6/NXNmyaldf5yTsoXdPMVWWQQURXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:1b:05:03:7a:26:2c:9c:ef:28:53:52:dd:0a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Validity
Not Before: Sep 21 13:00:53 2026 GMT
Not After : Sep 22 13:00:53 2026 GMT
Subject: CN=a87180018bb6241dfc18ae6af5cadb209159a96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:5c:15:c0:95:e6:2d:14:24:57:cd:0d:cb:
b4:b6:0e:92:84:f3:6e:e7:0d:d4:51:5c:27:5e:7c:
f5:3e:a2:ad:9f:7e:28:74:fd:27:6a:75:e5:95:5e:
17:d2:b1:b4:7e:7c:49:6c:91:f5:c5:79:3c:8b:dc:
e1:95:e7:dc:c2:4e:a9:f1:14:a3:a1:87:4a:39:4b:
d7:28:fa:69:4b:62:6e:40:48:e7:37:f5:72:12:71:
40:16:47:98:00:d8:0a:02:f3:8c:ff:a6:29:ca:38:
db:7e:50:cd:d9:23:65:84:4f:ea:0e:c9:5f:36:e3:
f4:1d:f0:45:10:97:fc:8d:3a:8d:87:21:2a:d2:d1:
99:63:b8:c4:8c:84:5c:32:bc:df:4b:8f:68:19:74:
a8:53:6d:a0:99:27:55:56:33:dd:50:28:8d:19:59:
d6:3d:1d:af:b2:25:6a:eb:72:60:67:4b:0e:3e:c0:
01:9f:9b:36:8f:12:86:87:2f:73:48:4f:87:38:9a:
cf:fa:88:45:5f:ef:9c:3d:09:7c:1f:36:37:d6:07:
8a:db:77:6a:2b:61:87:eb:2c:13:b2:fb:77:9b:4b:
f2:2d:eb:d1:e6:f0:af:9c:4e:11:9e:b0:59:0b:98:
90:17:8c:f4:a3:20:38:59:2d:28:97:f3:03:34:2f:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:71:80:01:8B:B6:24:1D:FC:18:AE:6A:F5:CA:DB:20:91:59:A9:6D
X509v3 Authority Key Identifier:
keyid:D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d5:26:9e:11:8f:5c:ee:e6:77:ae:bc:81:14:c1:4a:d3:1d:
eb:28:82:db:84:8a:8a:75:d8:df:d2:2c:c0:d7:d8:93:f6:a1:
23:67:3c:f1:d8:90:e8:3f:52:79:f3:80:5f:f3:e3:37:3b:9f:
24:f4:f7:01:7a:b3:df:2c:90:7f:b0:b3:bc:f0:7b:e7:bc:e2:
b6:55:d5:a8:a8:86:b5:f3:6f:4d:e8:e1:3e:1f:c1:fc:2c:10:
7e:a5:b6:69:88:8f:2c:9f:3e:e3:4d:c3:37:ca:19:c8:84:fc:
c0:86:4f:22:3f:c1:07:14:f6:69:e3:f7:36:74:96:c2:f3:40:
26:7e:2c:9c:28:b9:82:6f:22:81:2d:00:fb:79:f0:44:7a:ee:
d7:f0:f9:ac:2a:e2:77:5a:94:ef:a5:91:73:a9:64:05:e4:05:
4b:96:28:85:a0:78:43:bb:64:d7:81:e6:db:79:93:94:51:92:
0c:64:b6:08:bf:b2:ff:4a:74:bc:4a:d8:ff:98:8c:cb:b3:03:
df:f6:ff:55:f9:47:be:e4:7a:c6:fa:63:df:3e:6d:98:f4:ff:
83:b9:2e:00:fc:20:97:c0:93:fd:69:22:14:55:88:07:22:e4:
80:02:cb:c1:33:5a:f6:1f:5c:8a:cd:99:79:b7:b3:02:ee:98:
59:e0:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:01:15 2026 by rpki-client