Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
File: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json)
Hash identifier: 0Yox14ZHJUrAA3okgzPbra0ODMxBkKNMyrUaSHjubUE=
Subject key identifier: 18:0F:14:69:15:9C:2C:9D:E4:0A:29:8F:53:92:2D:6A:20:42:D2:1E
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial: 019EBDA2B7CD84ED425DD2AEA1A6231F7540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
Manifest number: 08EE
Signing time: Fri 12 Jun 2026 21:00:18 +0000
Manifest this update: Fri 12 Jun 2026 21:00:18 +0000
Manifest next update: Sat 13 Jun 2026 21:00:18 +0000
Files and hashes: 1: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: SYivvw4vTLSzsJZvjQ+3NOD+Yt3rvByKEj3dlzNJOE8=)
2: 5pjm21HKetM46w6qM9uy-i6WybY.roa (hash: 3eNVlKLJuRP0y0hZciHBdm9TPYgKCSF9C2o8FyAPzb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a2:b7:cd:84:ed:42:5d:d2:ae:a1:a6:23:1f:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Validity
Not Before: Jun 12 21:00:18 2026 GMT
Not After : Jun 13 21:00:18 2026 GMT
Subject: CN=180f1469159c2c9de40a298f53922d6a2042d21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:0f:e0:e1:24:40:fc:4a:2e:f8:cb:66:7c:
92:62:2e:e1:0e:79:36:9f:28:18:7f:b5:0c:fe:46:
62:08:5c:0b:53:77:1d:cc:22:c1:13:1b:e0:df:94:
3a:a9:c3:a5:2e:cf:a7:f3:f5:eb:94:60:a6:0d:da:
c3:6c:38:24:bd:dd:7f:93:f5:04:0d:8c:62:d2:0b:
41:4f:13:97:28:4f:58:7d:75:6c:3e:f6:84:ac:9f:
ac:f2:1c:f8:ab:4c:41:4e:c6:ae:7f:7b:c8:73:46:
f3:87:b8:c2:c9:55:02:a7:db:2a:d4:d7:86:09:b6:
30:d4:ed:24:7e:27:8d:65:0b:88:d5:b6:5e:70:91:
03:8a:13:4d:34:c9:11:e1:85:e4:38:19:51:e6:59:
3d:d7:a4:be:4f:af:60:c5:19:07:dd:1d:91:aa:16:
67:fd:9b:6f:87:6a:da:87:b3:24:94:1e:d2:1f:20:
49:87:a6:6b:b4:f1:fd:a4:a9:9d:76:ce:ab:df:c4:
9a:e3:be:3f:6b:82:ef:c8:79:72:65:12:2f:6c:a8:
96:09:85:c7:e0:96:78:a8:74:ec:f9:37:0b:f3:82:
d2:c0:93:0a:87:5c:2c:b7:06:c0:d7:75:9f:f3:66:
67:f0:8f:f6:a0:a2:d9:1e:3e:0d:f1:39:2a:3c:a5:
fa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0F:14:69:15:9C:2C:9D:E4:0A:29:8F:53:92:2D:6A:20:42:D2:1E
X509v3 Authority Key Identifier:
keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7c:05:87:ed:07:7d:f6:e4:af:4e:b3:6c:34:b5:bd:48:07:
d8:70:05:f3:6b:28:ef:d8:ab:8c:bc:6b:25:ee:14:34:6d:29:
b5:63:e8:01:5c:62:d6:24:06:14:18:88:b5:ab:38:96:8d:c4:
f5:13:32:00:bb:d3:6e:34:bc:00:f6:30:83:4f:6a:ba:28:7a:
1e:da:a5:54:ac:9f:24:96:89:3b:05:cc:5d:72:8a:f2:f0:97:
5f:eb:bc:32:be:d3:7a:4a:8d:d8:33:06:c0:65:70:6e:7e:07:
02:10:64:b8:81:cc:5c:bb:74:ce:c8:54:5f:1f:0b:89:f8:0c:
25:97:00:24:0b:e9:97:b0:c2:f2:b2:a0:e2:02:4e:63:a7:3b:
5d:49:ad:79:7c:96:05:56:ee:f3:4a:b5:ed:f5:e7:1c:42:aa:
a1:71:f1:41:ac:63:40:16:7f:f3:2a:be:7f:17:28:0b:b0:55:
c6:3a:29:01:d2:51:13:f8:dd:bc:90:74:39:dd:55:f3:50:95:
2a:30:cf:38:1e:c0:1d:ef:ab:64:84:93:0b:4f:39:66:0f:eb:
41:6e:d6:4a:01:78:19:40:e4:03:52:b2:e0:c3:68:6e:1c:34:
46:6d:de:b3:09:71:db:93:e1:2e:69:d2:f1:80:b1:3c:9d:05:
ce:40:fe:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ69orfNhO1CXdKuoaYjH3VAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNDMyMmIyZDBhNzk0ZmQwNzZiODVlOGRjNTc4YWJiMGQw
M2VjNDAwHhcNMjYwNjEyMjEwMDE4WhcNMjYwNjEzMjEwMDE4WjAzMTEwLwYDVQQD
EygxODBmMTQ2OTE1OWMyYzlkZTQwYTI5OGY1MzkyMmQ2YTIwNDJkMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TEP4OEkQPxKLvjLZnySYi7hDnk2
nygYf7UM/kZiCFwLU3cdzCLBExvg35Q6qcOlLs+n8/XrlGCmDdrDbDgkvd1/k/UE
DYxi0gtBTxOXKE9YfXVsPvaErJ+s8hz4q0xBTsauf3vIc0bzh7jCyVUCp9sq1NeG
CbYw1O0kfieNZQuI1bZecJEDihNNNMkR4YXkOBlR5lk916S+T69gxRkH3R2RqhZn
/Ztvh2rah7MklB7SHyBJh6ZrtPH9pKmdds6r38Sa474/a4LvyHlyZRIvbKiWCYXH
4JZ4qHTs+TcL84LSwJMKh1wstwbA13Wf82Zn8I/2oKLZHj4N8TkqPKX65QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgPFGkVnCyd5Aopj1OSLWogQtIeMB8GA1UdIwQY
MBaAFNJDIrLQp5T9B2uF6NxXirsNA+xAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGtNaXN0Q25sUDBIYTRYbzNGZUt1dzBEN0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85N2MzNTMtMGMzNi00MDY2LWE1NmIt
MTM5YTQ5NmNkNTljLzEvMGtNaXN0Q25sUDBIYTRYbzNGZUt1dzBEN0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy85N2MzNTMtMGMzNi00MDY2LWE1NmItMTM5YTQ5NmNkNTlj
LzEvMGtNaXN0Q25sUDBIYTRYbzNGZUt1dzBEN0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXwFh+0H
ffbkr06zbDS1vUgH2HAF82so79irjLxrJe4UNG0ptWPoAVxi1iQGFBiItas4lo3E
9RMyALvTbjS8APYwg09quih6HtqlVKyfJJaJOwXMXXKK8vCXX+u8Mr7TekqN2DMG
wGVwbn4HAhBkuIHMXLt0zshUXx8LifgMJZcAJAvpl7DC8rKg4gJOY6c7XUmteXyW
BVbu80q17fXnHEKqoXHxQaxjQBZ/8yq+fxcoC7BVxjopAdJRE/jdvJB0Od1V81CV
KjDPOB7AHe+rZISTC085Zg/rQW7WSgF4GUDkA1Ky4MNobhw0Rm3eswlx25PhLmnS
8YCxPJ0FzkD+zA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:58:45 2026 by rpki-client