Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
File: RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json)
Hash identifier: 0LcLHlKe+7ag0RNoDjBM0bZ64qDIb/X+5k2GqEfLnEk=
Subject key identifier: 1D:BB:2E:71:A4:B5:19:C9:27:E9:1B:17:9C:ED:B6:02:9A:CE:DE:1A
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 01A0EE543CCF7E638FF851E6F4ADF832D20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
Manifest number: 1A80
Signing time: Tue 29 Sep 2026 18:01:33 +0000
Manifest this update: Tue 29 Sep 2026 18:01:33 +0000
Manifest next update: Wed 30 Sep 2026 18:01:33 +0000
Files and hashes: 1: AEfnrK6ix3lgbRrsMfPKWVRCzjE.roa (hash: qwyfmOqhQfxk+SJv3YNNgHlxe2wh96nicliB7SifUfM=)
2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: joHxJiZjzXo2NBV9MbHjfBRJsHpNXkak/EALo2JfF7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:54:3c:cf:7e:63:8f:f8:51:e6:f4:ad:f8:32:d2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: Sep 29 18:01:33 2026 GMT
Not After : Sep 30 18:01:33 2026 GMT
Subject: CN=1dbb2e71a4b519c927e91b179cedb6029acede1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:a6:0f:4f:d7:16:73:e3:1d:f4:08:72:b3:
a0:44:15:b2:ec:df:ce:a6:83:67:6b:cd:cb:94:fe:
1e:58:7f:d3:e0:7b:26:8d:fb:07:ef:92:41:fb:6a:
bc:3c:dc:30:36:bf:ba:c3:40:f0:53:55:b6:f3:8e:
01:26:a5:62:12:48:38:18:8c:59:c5:56:99:d5:f7:
a7:87:b4:1d:50:37:28:56:9c:e1:00:d4:93:1a:ae:
17:2c:5a:2c:a4:6d:86:b3:4c:ad:40:ab:16:af:88:
6e:f2:2d:ce:59:f4:bf:b0:20:f4:de:39:26:04:b8:
47:c9:60:7e:f8:77:33:9f:2c:d8:64:c7:55:a9:40:
c6:93:26:47:d2:ce:7f:c1:b8:5e:4b:7d:a8:61:35:
f6:23:cd:81:93:0d:4c:46:cd:0d:6f:11:37:aa:31:
0b:9e:be:07:dc:22:bd:4e:d1:80:4a:3f:1a:29:dc:
5e:56:d3:ad:82:44:c5:92:0c:b8:16:1c:eb:4c:ad:
65:20:b4:fd:ad:bc:95:05:22:ca:f1:18:2d:07:bb:
e3:74:2c:84:65:6e:29:f8:5c:9d:31:04:93:7c:ae:
f9:70:71:bd:34:b5:4c:57:3b:a7:c6:35:09:a9:b7:
bd:cb:33:81:46:66:d3:27:cf:15:dd:1d:53:db:67:
1b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BB:2E:71:A4:B5:19:C9:27:E9:1B:17:9C:ED:B6:02:9A:CE:DE:1A
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e3:14:1f:14:24:7b:7f:b1:8f:55:c1:b5:84:16:e8:15:73:
45:1e:da:be:ff:43:eb:c9:61:be:c2:c9:bd:51:bc:89:7e:f1:
79:5e:06:45:39:fc:76:20:7e:1c:37:f2:c8:1a:1e:7a:c3:9f:
2b:bd:44:44:bc:a0:08:60:5e:1b:6f:f0:5d:01:a9:3e:71:a7:
2c:9c:8e:a5:3b:d4:e3:08:08:79:1d:89:b9:bb:2b:ee:5f:f3:
5b:47:d9:e5:4e:93:bf:4c:96:42:71:09:ce:69:11:eb:11:3d:
45:f6:0a:f8:83:d0:67:db:42:01:0e:e6:df:62:b0:61:d2:d6:
3f:fe:6c:07:3f:23:bb:d7:11:25:42:87:87:db:fe:b3:7b:12:
7c:2f:ba:cc:40:c8:63:7a:0f:93:b3:c5:8b:67:7f:72:66:e5:
f9:6a:86:9b:f3:3e:cc:ad:47:1e:fa:9f:40:92:6f:1e:88:ed:
db:9e:3b:3d:7d:d8:d9:db:dc:49:4e:59:11:f8:40:cf:14:3f:
6e:57:ab:fb:a0:47:81:88:65:db:e7:73:19:2e:4e:da:9a:02:
fd:f3:22:ec:5b:ea:4b:7c:99:87:9c:31:67:bc:03:63:ba:ca:
55:08:89:8b:85:bb:f9:53:c7:df:31:5d:b9:fa:02:e5:0e:37:
4e:cb:70:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 23:23:07 2026 by rpki-client