Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
File: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json)
Hash identifier: l8Ih7mocT1vW5Zt16LOg4x1H6cbah3Rj/HHg3jP3acY=
Subject key identifier: BB:9D:9B:3C:1E:C4:2A:02:B7:86:17:44:3A:76:80:2C:53:E0:2E:29
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial: 01A0C70EF06380C45CE55BD744CF58809094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
Manifest number: 09FC
Signing time: Tue 22 Sep 2026 03:00:39 +0000
Manifest this update: Tue 22 Sep 2026 03:00:39 +0000
Manifest next update: Wed 23 Sep 2026 03:00:39 +0000
Files and hashes: 1: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: RoplOAn6yWyfd0vpnQ3osnlu7itxcCkowsEjxaPgHz8=)
2: 5pjm21HKetM46w6qM9uy-i6WybY.roa (hash: 3eNVlKLJuRP0y0hZciHBdm9TPYgKCSF9C2o8FyAPzb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:f0:63:80:c4:5c:e5:5b:d7:44:cf:58:80:90:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Validity
Not Before: Sep 22 03:00:39 2026 GMT
Not After : Sep 23 03:00:39 2026 GMT
Subject: CN=bb9d9b3c1ec42a02b78617443a76802c53e02e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:45:f2:3b:67:44:64:3e:94:3c:c4:de:60:37:
8b:99:2a:5e:bc:e8:af:fd:45:f0:06:27:3e:f8:85:
f4:3a:16:d7:11:98:99:e9:4f:ae:a2:55:0c:8f:58:
aa:98:0d:e5:f1:a9:64:e2:08:a4:68:ce:c2:b7:2f:
aa:29:ef:c9:79:98:c5:c9:ba:3c:31:46:e4:d5:26:
7c:59:8e:86:16:7e:df:e0:06:8d:04:7c:d6:38:19:
99:46:7a:d3:78:69:4a:ff:55:fb:07:12:d4:5b:4a:
29:63:a3:b6:b0:c0:4b:b5:22:34:ae:44:77:4f:9c:
67:41:90:35:a1:29:93:73:f0:2d:5e:a4:24:3e:98:
1f:33:33:39:08:3b:c2:67:36:b4:63:8c:d2:ae:f6:
98:67:da:10:40:e7:88:26:53:da:58:c4:91:0e:6d:
fe:32:cd:fc:d7:f7:97:29:89:6f:89:a0:11:6d:46:
7e:fd:5f:47:c1:2a:62:89:fa:7a:e7:11:00:44:76:
4b:d0:71:1d:8c:df:3c:c5:20:15:3e:90:3f:f1:4f:
d5:f6:05:9f:eb:b3:30:f8:dd:ff:8d:36:e3:a9:17:
1e:6c:7d:4d:65:db:16:a1:00:9b:4c:ef:cb:e0:da:
ec:f1:59:56:81:56:ab:bf:29:aa:9b:1f:79:4b:1e:
68:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9D:9B:3C:1E:C4:2A:02:B7:86:17:44:3A:76:80:2C:53:E0:2E:29
X509v3 Authority Key Identifier:
keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5c:af:92:82:54:ee:96:c7:19:cf:3c:ed:af:ee:ee:87:7d:
cd:3c:d9:14:e5:48:1c:bf:28:b7:da:96:f9:b3:3b:18:77:50:
c8:5d:64:cf:f3:4b:db:65:49:0e:1a:e6:15:57:d4:48:0e:dc:
08:db:22:54:8f:d7:b1:a7:d2:8d:51:ce:46:ad:05:95:74:c7:
d5:0e:9d:15:58:18:e3:cd:4a:5b:56:9b:c6:65:20:06:b6:78:
5a:6e:63:6a:10:22:6b:d3:ef:89:f9:a0:59:84:9e:01:af:05:
5c:28:28:2b:48:03:89:e9:a2:cb:90:06:72:ff:10:0a:9f:e4:
de:f4:d6:0c:45:c0:ba:94:a0:e2:b5:06:ad:e6:38:23:47:97:
7a:ca:e0:7b:d9:62:7e:0a:06:c8:f5:9f:03:c8:e2:bc:87:04:
c1:ee:00:09:82:44:4e:eb:10:3b:0a:f3:42:d0:55:15:02:c0:
93:e2:87:89:cf:0c:50:70:a0:4c:6b:84:90:76:c0:a7:15:cf:
84:da:09:2f:f0:99:ea:63:74:81:0c:84:81:22:19:59:43:0a:
51:0c:a9:1f:aa:fc:c1:83:c3:a4:d5:ae:4f:5b:08:f5:c3:be:
39:46:97:46:c0:c9:4a:a3:c4:fb:0e:4f:b8:7d:41:69:82:7c:
64:30:91:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:38:44 2026 by rpki-client