Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
File: koDT5GcpaPhuiVXbYgy3ZdudcUI.mft (raw, json)
Hash identifier: s0zhcid4glRy+9YkkyCFVJwc4hbYYdKlZrqZy9cu/j8=
Subject key identifier: 0D:09:54:93:FA:D5:63:53:61:75:B3:95:BE:9E:60:DB:23:FE:A2:D6
Authority key identifier: 92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
Certificate issuer: /CN=9280d3e4672968f86e8955db620cb765db9d7142
Certificate serial: 01A086B00834A5A898B8968D772E3AD93DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
Manifest number: 0E75
Signing time: Wed 09 Sep 2026 15:01:18 +0000
Manifest this update: Wed 09 Sep 2026 15:01:18 +0000
Manifest next update: Thu 10 Sep 2026 15:01:18 +0000
Files and hashes: 1: koDT5GcpaPhuiVXbYgy3ZdudcUI.crl (hash: cju5HroZLZuBvLoCwfk4kb6JOgsw/T8ndLbyV9T08y4=)
2: lDc3tS_p7tCgEhrNKf_-eSIcLqg.roa (hash: kzElkKos01LmCGpTnk/MyVTZjZ5HsnG3CnANkjfIhL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:b0:08:34:a5:a8:98:b8:96:8d:77:2e:3a:d9:3d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280d3e4672968f86e8955db620cb765db9d7142
Validity
Not Before: Sep 9 15:01:18 2026 GMT
Not After : Sep 10 15:01:18 2026 GMT
Subject: CN=0d095493fad563536175b395be9e60db23fea2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:10:c1:05:7f:0d:6c:28:37:45:ba:39:ea:
95:16:44:9a:43:1b:64:bd:11:5d:71:db:49:62:96:
43:a6:e8:11:b6:3c:2d:99:11:7b:dc:08:e8:54:34:
4e:f2:44:bb:7d:5c:dc:1c:69:b4:f1:31:e6:14:ff:
ef:ef:49:e7:54:b6:09:be:f0:20:8a:35:48:0f:be:
c8:cf:98:60:3f:be:da:a7:9c:9f:2e:d1:ac:a7:c1:
29:0f:18:2c:1f:e7:9e:55:32:97:26:bb:b7:ee:a3:
bf:70:ef:88:99:d5:56:21:f3:e4:e2:e3:a0:ef:a4:
47:4f:0c:1b:01:4c:ff:87:1f:77:71:32:a4:c4:c6:
b0:95:33:24:10:32:68:d7:55:bf:17:69:aa:b2:33:
9e:b5:37:71:c6:a9:66:cb:48:04:e6:f6:75:7d:11:
91:5f:44:32:ac:31:d1:bf:30:83:2f:2d:0f:f0:0c:
94:87:5e:5f:85:57:4d:a8:76:4b:b3:0e:c3:da:81:
8a:ad:ee:95:fc:3a:de:d2:08:cd:17:73:12:d6:46:
a8:8f:6c:77:b1:c7:ab:8e:64:12:87:9e:10:a4:1b:
66:6d:e8:65:72:12:53:89:2c:4a:a2:f3:b3:f7:cc:
a8:4f:99:fb:16:b7:d5:4c:c1:53:fa:6b:b4:42:72:
3a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:09:54:93:FA:D5:63:53:61:75:B3:95:BE:9E:60:DB:23:FE:A2:D6
X509v3 Authority Key Identifier:
keyid:92:80:D3:E4:67:29:68:F8:6E:89:55:DB:62:0C:B7:65:DB:9D:71:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koDT5GcpaPhuiVXbYgy3ZdudcUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/59da50-aedb-4906-af19-090fe3da2433/1/koDT5GcpaPhuiVXbYgy3ZdudcUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d0:c9:cd:a1:2e:f3:46:40:42:f9:5a:06:18:47:38:b7:23:
b6:26:b5:30:5b:f4:50:ed:70:79:94:27:83:c1:0d:83:67:e6:
8d:eb:c0:b9:8e:d0:9d:c9:a6:1b:9b:11:cd:c9:b0:98:2a:e7:
da:24:be:6c:7a:10:a1:1e:0d:e3:7e:7f:46:a6:80:0f:26:ce:
74:3c:c5:f3:f9:f5:78:ee:f8:fd:60:5a:5d:59:fd:0c:1a:30:
4e:79:61:ec:6b:97:a7:f3:0d:7f:97:b3:1f:e4:da:c5:3c:23:
94:e8:60:b1:34:22:fa:68:35:24:74:7f:34:cf:6c:2f:f2:d3:
18:2a:ce:e2:78:a1:21:19:15:11:ef:cf:22:09:5a:99:b9:00:
a7:df:5d:87:7e:91:ca:85:7e:6d:dd:b0:4e:67:30:a7:93:52:
1c:06:56:c1:c6:2e:4c:be:3f:ce:30:40:0c:14:dc:68:ee:38:
6a:5d:fe:b9:30:f1:47:3f:a1:b3:0c:61:83:44:e3:45:33:41:
22:57:64:d0:7e:81:ac:01:9e:a7:65:fd:d4:76:e8:3e:0d:95:
42:61:4e:58:2e:98:fd:3a:d4:d6:a0:ce:f0:a3:c5:a2:05:b5:
91:dd:6e:23:84:c7:87:05:6c:54:d6:7a:a9:c9:56:e5:dc:2e:
a3:e3:1d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:22:46 2026 by rpki-client