Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
File: RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json)
Hash identifier: noj9nOH6bMF8G0r84gaI9bAiZxI1HlV+Wmzy0oTnAu0=
Subject key identifier: 9A:C5:56:57:E5:36:22:27:3F:DD:33:82:A8:11:B7:43:C4:2C:AE:8C
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 01A0EC65A8CAE02F1C5CC5B559F67CCC2BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
Manifest number: 1A7F
Signing time: Tue 29 Sep 2026 09:01:20 +0000
Manifest this update: Tue 29 Sep 2026 09:01:20 +0000
Manifest next update: Wed 30 Sep 2026 09:01:20 +0000
Files and hashes: 1: AEfnrK6ix3lgbRrsMfPKWVRCzjE.roa (hash: qwyfmOqhQfxk+SJv3YNNgHlxe2wh96nicliB7SifUfM=)
2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: BW1nVaMU9PbmNoNxYvpy6EIESYE2XZF2Cde9++6y6wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:65:a8:ca:e0:2f:1c:5c:c5:b5:59:f6:7c:cc:2b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: Sep 29 09:01:20 2026 GMT
Not After : Sep 30 09:01:20 2026 GMT
Subject: CN=9ac55657e53622273fdd3382a811b743c42cae8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:62:b2:fb:62:83:0f:26:ff:c3:75:fa:e9:fb:
cb:82:56:45:38:41:b5:3f:e4:94:d6:1e:22:1d:2c:
56:5c:81:f0:01:c9:20:71:87:bd:62:6a:cf:b5:e1:
a1:dc:2a:79:74:a5:1a:6e:5a:d1:6f:f0:e7:a8:29:
d5:a7:53:69:50:b5:51:29:cb:74:46:11:c5:9c:35:
a6:2b:48:b2:83:9e:35:13:8c:1e:b4:73:fb:8f:cd:
7d:55:63:97:8f:6f:b4:c1:8c:64:2f:53:59:1b:c8:
39:16:29:dc:26:c4:9a:4a:a8:c0:33:f5:fb:f8:05:
01:1b:53:8b:0d:af:c5:09:d1:a6:91:ee:0d:55:a2:
2f:e5:a3:98:b9:93:47:68:94:1a:53:aa:ee:f4:6e:
8b:90:25:1b:5e:c8:92:d8:b1:e7:0c:1c:bc:b3:ae:
e1:a1:87:d6:f6:3e:a0:f5:0e:6a:88:da:da:b7:97:
62:02:7c:1c:2f:d1:ab:e8:c4:92:13:c9:55:d9:c2:
dd:39:d7:93:5f:33:75:e3:5e:2a:1d:f2:d8:d8:3c:
64:98:3d:b1:f1:1c:1b:72:76:55:9e:43:a3:13:9a:
95:a1:15:5d:a5:fc:01:f9:cf:04:87:b2:82:de:e2:
db:d3:b8:93:3d:1b:ed:9e:10:6c:bd:79:ca:40:2d:
09:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C5:56:57:E5:36:22:27:3F:DD:33:82:A8:11:B7:43:C4:2C:AE:8C
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:17:5d:1a:e9:3e:cb:ba:77:d3:0d:21:4f:09:e8:6e:74:15:
64:3f:96:19:9b:c1:7e:5f:2f:93:ea:a7:27:89:99:38:a1:e3:
63:f0:0b:03:e8:b4:4e:f1:33:ff:db:b3:36:7d:d3:ee:59:6f:
7b:6d:23:03:61:df:66:a6:da:c0:81:6a:c2:46:50:4d:80:80:
48:ce:21:3f:2c:6b:4b:73:f7:18:9c:54:17:8e:d6:70:fd:9f:
f5:16:c0:af:75:af:40:8a:3e:53:2d:c5:6a:bc:e8:37:02:6b:
65:be:8f:d3:d6:0c:a9:e9:ff:d4:02:2b:92:d2:85:91:b4:7e:
b6:23:1d:80:f2:4e:ec:a8:65:dc:0e:a1:31:95:61:d1:05:52:
89:20:1a:5c:b1:79:b5:89:38:dd:da:79:18:33:fe:92:87:df:
e3:bd:ee:08:22:b0:e7:eb:06:e9:09:14:d5:cf:57:64:0a:5a:
03:1f:2c:39:27:35:d6:e0:de:e0:8a:53:16:d8:67:d1:12:38:
d4:15:3d:4f:d9:36:27:00:80:33:c9:c1:ea:08:59:55:0c:1e:
7d:d8:68:51:1b:0e:11:ef:c5:f9:14:84:d4:36:4b:7e:63:8a:
b5:ad:e2:38:88:39:ca:9f:79:dd:72:8e:da:dd:0f:64:0e:03:
2b:22:33:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:51:14 2026 by rpki-client