Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
File: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json)
Hash identifier: +cBMw431SWQl54Hb4Ky/ib8fYtgEhvpYQFYp7GdEpeg=
Subject key identifier: 6B:D0:68:C1:6B:A5:48:4F:8A:ED:75:94:8B:22:3F:91:7C:66:4E:B9
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial: 019D9A07397B81929F485D431EE7A9D5729C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
Manifest number: 0857
Signing time: Fri 17 Apr 2026 06:00:57 +0000
Manifest this update: Fri 17 Apr 2026 06:00:57 +0000
Manifest next update: Sat 18 Apr 2026 06:00:57 +0000
Files and hashes: 1: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: +sljbYXGcUI3mPD9Q79tOkgboXXzMhRN0j/YXIJ3iuU=)
2: 5pjm21HKetM46w6qM9uy-i6WybY.roa (hash: 3eNVlKLJuRP0y0hZciHBdm9TPYgKCSF9C2o8FyAPzb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:39:7b:81:92:9f:48:5d:43:1e:e7:a9:d5:72:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Validity
Not Before: Apr 17 06:00:57 2026 GMT
Not After : Apr 18 06:00:57 2026 GMT
Subject: CN=6bd068c16ba5484f8aed75948b223f917c664eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:03:25:24:a6:0d:49:ad:67:a0:e8:db:b8:4a:
fa:7a:d9:6a:99:78:8a:8b:a2:06:ef:a3:2a:c7:23:
88:a0:43:cf:ec:00:ad:a0:09:87:12:00:ff:5a:7a:
00:df:b5:37:25:61:b8:53:bc:77:e4:97:b3:55:bb:
8d:e3:78:ea:1c:29:8b:60:98:ba:9e:6d:3e:15:94:
a0:0c:76:30:c4:80:4e:9a:12:c3:5f:45:5b:af:25:
38:e3:d6:07:de:c7:03:43:29:45:25:2f:8d:38:a3:
3c:a6:84:fa:21:d3:bf:a3:ce:d8:3c:19:39:40:82:
02:2c:86:4e:8a:70:bb:38:48:26:46:8e:cc:f9:64:
6a:64:04:d3:bf:02:94:ee:b4:03:5c:21:4e:bf:7a:
52:ca:1e:7a:52:24:ce:9a:89:f2:fb:9c:f6:b4:fd:
b4:bb:ab:25:3b:06:70:29:36:62:73:a6:b6:a2:e5:
f4:54:8e:de:5a:1a:3f:fe:f6:01:7f:0f:d6:cb:71:
a6:52:2c:1e:d8:99:ec:5a:52:6c:99:43:c6:d3:8d:
f3:c9:52:51:1b:86:2c:8e:20:db:b8:57:a1:c1:05:
bc:b0:17:8b:e9:26:17:86:a2:c0:23:7a:c3:ab:30:
11:d7:88:5f:1c:6e:3d:e5:a8:85:8e:61:09:31:85:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D0:68:C1:6B:A5:48:4F:8A:ED:75:94:8B:22:3F:91:7C:66:4E:B9
X509v3 Authority Key Identifier:
keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b8:83:85:5b:04:30:c1:a2:f2:4d:0e:9b:93:2d:30:db:bf:
c3:ad:58:be:b1:d6:de:d2:25:2e:2d:c9:63:07:08:e1:5b:c9:
86:92:1f:3c:b3:12:ea:c8:46:bf:66:08:4e:d2:12:20:db:07:
44:e7:cf:7e:cd:5c:52:74:12:a9:f0:ef:63:1b:a9:0b:aa:a2:
78:28:f8:46:ae:df:56:40:3c:0f:c7:4b:55:bb:8a:39:6d:4f:
47:f3:cc:7f:fa:cf:f4:13:89:6a:4d:6e:62:7d:f4:82:6b:6b:
f4:5e:a5:ce:05:c5:32:9c:e8:1b:0d:9c:2b:2a:1e:c7:be:9e:
91:d8:71:23:fd:70:16:d6:3a:10:e5:0c:21:07:3d:b2:5c:79:
55:ea:13:0c:35:f0:15:40:2e:9e:7d:f9:44:fb:17:08:b5:d2:
7f:34:9a:ea:84:bc:cc:bc:49:86:90:59:d6:8c:c4:97:12:0a:
db:60:77:28:82:34:2c:71:8b:61:33:da:56:bb:fb:36:fd:70:
3a:c5:dd:75:b0:b5:26:f9:ed:66:fa:42:89:2a:67:16:48:32:
81:f3:38:88:d7:14:f7:12:60:cf:9c:76:34:36:ab:20:cd:13:
74:3d:3a:c0:c3:75:2b:3d:d9:c0:e1:db:85:2c:50:92:be:88:
0c:82:f0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:09:03 2026 by rpki-client