Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
File: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json)
Hash identifier: D2WLIl3lGNBx54V/ELfl0qHgh/X6XYGj/GZtRSiVJuc=
Subject key identifier: C4:6E:11:C6:BB:96:31:AE:44:A8:EA:65:E2:0A:56:63:29:D4:3F:A2
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial: 019CAA8F9E39A7FC2BE256C9FBC983ACA0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
Manifest number: 07DB
Signing time: Sun 01 Mar 2026 18:01:04 +0000
Manifest this update: Sun 01 Mar 2026 18:01:04 +0000
Manifest next update: Mon 02 Mar 2026 18:01:04 +0000
Files and hashes: 1: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: 1E2hlnOqxs1/n9k03MzQWPXTguzxl8P64k4QVbjgwfI=)
2: 5pjm21HKetM46w6qM9uy-i6WybY.roa (hash: 3eNVlKLJuRP0y0hZciHBdm9TPYgKCSF9C2o8FyAPzb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:9e:39:a7:fc:2b:e2:56:c9:fb:c9:83:ac:a0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Validity
Not Before: Mar 1 18:01:04 2026 GMT
Not After : Mar 2 18:01:04 2026 GMT
Subject: CN=c46e11c6bb9631ae44a8ea65e20a566329d43fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:74:b0:49:1d:2f:bb:17:0d:4f:ab:35:95:
d5:4e:71:9b:cc:17:92:28:c5:33:a0:4a:a8:6e:c8:
28:3e:62:cc:14:ae:44:7e:98:93:c4:21:e3:d2:63:
d7:3b:0b:cb:0a:23:1a:c3:15:a8:38:d8:66:1e:b8:
9e:cb:b0:84:2a:47:39:96:77:2f:34:a3:df:3d:df:
b6:6d:32:9f:5b:ef:32:64:ed:69:4b:2a:44:1e:59:
42:19:1a:a6:2d:f2:5b:7e:5b:7f:3f:52:8e:ae:8e:
1f:75:56:ee:f6:92:f6:28:67:f1:67:1a:73:86:0c:
b4:3c:21:d3:d2:91:b2:6c:0c:c4:c7:d4:ab:3b:9c:
f3:63:7a:57:0f:2d:50:0a:e5:ae:6d:e0:05:86:65:
78:70:1b:b0:b5:bb:19:52:12:3f:d7:4b:90:dd:04:
a2:d0:1c:1a:c8:89:40:0b:f8:17:f8:33:b1:aa:40:
5b:57:fb:1f:59:a9:23:5b:7f:e3:8a:16:3f:13:d8:
3d:74:8b:54:90:ad:dc:37:a8:d4:b0:19:0c:25:6c:
07:92:e3:7b:9e:c5:04:d8:fe:67:2e:17:f9:25:d2:
5b:cc:b5:d2:b9:66:f9:13:65:ad:a2:e3:ea:8b:22:
f7:20:1a:8e:de:3a:0a:96:a5:ad:db:40:02:a8:c8:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6E:11:C6:BB:96:31:AE:44:A8:EA:65:E2:0A:56:63:29:D4:3F:A2
X509v3 Authority Key Identifier:
keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a0:1f:d0:ee:63:78:6b:bb:7d:a5:02:86:86:f7:13:ab:6b:
e8:49:76:ea:45:e6:0d:92:cb:fd:32:60:7a:31:44:84:76:a4:
d1:95:a4:1c:1d:3b:6c:17:e1:6d:f7:87:a9:7a:7a:cc:e8:f1:
e3:83:c4:8a:7f:42:a1:e3:9f:01:b1:ff:ff:a5:3e:d5:d5:89:
85:02:1d:88:01:bc:e1:bc:0a:28:36:42:12:6a:9c:eb:df:2e:
31:43:5e:7d:38:40:0c:f6:29:6d:1f:43:24:5e:53:ec:60:18:
d1:be:c0:d3:cb:57:89:60:5f:28:c6:7e:37:25:bb:1b:93:33:
16:74:6a:4c:0d:3b:d4:bd:30:38:77:52:83:5d:77:a3:31:97:
3f:55:b2:b5:53:be:21:ab:2c:b6:b9:47:97:bb:18:d7:a8:51:
ef:b4:b3:00:9c:90:90:a7:32:e2:7b:d2:83:51:4d:c4:9d:df:
8e:ea:74:be:46:c7:78:57:27:d4:f3:5b:aa:30:f2:56:96:26:
d0:81:d6:fb:39:c6:da:cf:b6:4c:50:ec:5a:06:6d:07:95:32:
46:77:9b:4e:92:7d:0a:54:07:64:b4:32:cf:45:d5:e4:19:6f:
1f:28:9d:7e:dc:be:99:27:72:90:06:2b:bf:84:ff:4e:42:18:
ba:c7:5e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:43:14 2026 by rpki-client