Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
File: koDT5GcpaPhuiVXbYgy3ZdudcUI.mft (raw, json)
Hash identifier: /IAYwg4BhGWHNnhW4COzKDFHnSQrFWWCwqRu1RZbXqw=
Subject key identifier: 92:34:1C:52:93:A0:45:49:44:66:8F:CD:B6:24:83:8F:E7:20:99:8B
Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
Certificate issuer: /CN=9280d3e4672968f86e8955db620cb765db9d7142
Certificate serial: 019F9D02C305A0921EC20AFDBA97EE295C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
Manifest number: 0DFC
Signing time: Sun 26 Jul 2026 06:00:31 +0000
Manifest this update: Sun 26 Jul 2026 06:00:31 +0000
Manifest next update: Mon 27 Jul 2026 06:00:31 +0000
Files and hashes: 1: koDT5GcpaPhuiVXbYgy3ZdudcUI.crl (hash: BIMBplVvX3LRGfZYDBFCkRuvsnzyCgkZUSYsgo/M4MY=)
2: lDc3tS_p7tCgEhrNKf_-eSIcLqg.roa (hash: kzElkKos01LmCGpTnk/MyVTZjZ5HsnG3CnANkjfIhL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:02:c3:05:a0:92:1e:c2:0a:fd:ba:97:ee:29:5c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142
Validity
Not Before: Jul 26 06:00:31 2026 GMT
Not After : Jul 27 06:00:31 2026 GMT
Subject: CN=92341c5293a0454944668fcdb624838fe720998b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:25:48:81:67:b7:d5:42:f3:eb:e5:d8:73:58:
2f:91:39:52:81:e3:24:58:3f:7a:47:5f:f6:6a:9e:
78:a9:43:5b:a1:25:6e:8e:99:1e:b3:92:0a:94:00:
b0:5d:02:79:09:14:c3:fa:f7:6e:9f:14:df:39:18:
24:b7:21:81:60:c3:86:78:4e:45:03:d6:f0:b3:b9:
97:c4:2f:d4:f5:3d:fd:7a:c8:e2:5d:fb:18:bb:76:
9e:61:d6:4b:dd:2b:d1:f0:ca:2f:75:ac:75:87:ab:
3c:4d:b7:89:63:63:a8:45:20:f5:f4:bf:5a:78:cf:
80:93:a4:f3:3c:83:14:e6:71:73:64:d5:65:6b:7e:
bb:f7:ef:dc:1b:da:38:5f:c3:c1:34:5f:91:18:0f:
a3:b3:4f:ef:44:dc:ba:7a:4a:9f:ab:e1:ac:bb:2b:
f8:2b:6f:a4:a9:aa:22:72:ab:4d:ee:32:5a:b4:8e:
06:46:0b:00:ff:4f:3a:44:d7:df:e4:7a:df:5e:f1:
30:bf:34:c8:8f:cc:98:ea:83:5f:b4:75:95:a5:5d:
88:24:c8:36:7d:3a:54:18:08:c2:05:e6:76:ef:24:
5f:b4:04:88:c2:ff:2f:b1:07:50:b8:11:67:b6:11:
9a:cd:74:a0:1e:4b:33:c8:71:f1:4b:d0:9a:f5:d2:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:34:1C:52:93:A0:45:49:44:66:8F:CD:B6:24:83:8F:E7:20:99:8B
X509v3 Authority Key Identifier:
keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:86:38:c5:01:37:f0:29:ee:23:9d:44:db:8c:af:00:5e:83:
86:d9:de:74:ce:f4:29:aa:32:ad:9d:09:b5:10:39:b1:08:ad:
14:51:c2:ae:a2:52:44:ac:68:db:5d:cb:17:d4:29:0d:2a:cd:
74:5e:f5:af:ee:ee:20:34:29:1f:3f:13:97:d4:cf:4a:c6:e9:
17:d0:66:64:16:0e:67:f1:bd:f0:32:a0:66:2b:8f:d5:4a:72:
54:5b:1b:6a:76:91:25:f7:52:2b:08:b1:4d:1d:b7:31:31:ce:
02:9f:a7:39:8a:ad:85:b1:33:42:61:62:ee:20:59:72:19:fe:
4a:36:ed:e3:d7:28:b2:7f:68:d8:02:2b:2f:10:c8:28:ff:da:
b2:1b:b0:b5:eb:e9:d9:59:00:aa:11:48:43:d3:9e:29:ae:05:
4e:2c:83:38:52:6b:2b:36:81:95:f3:c1:e4:38:d2:eb:d6:8a:
54:13:5c:c2:c3:51:25:73:34:1b:0d:f6:5c:db:6b:82:d3:73:
1c:c6:d4:b4:75:7d:55:93:56:c1:13:a8:66:6e:fc:6e:0f:3a:
7d:c4:09:43:d2:95:05:4f:0a:b6:a7:56:72:a4:1b:69:b0:dd:
c3:5e:e6:55:90:39:8a:01:89:97:58:a0:1d:b2:64:ff:3a:ab:
a2:90:26:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:50:14 2026 by rpki-client