Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
File: RK1W7mAdrD36Yd_lLL9bALe3opA.mft (raw, json)
Hash identifier: oejL3JcVZFQTdyo2bKXQrekXyYgnNt5qI1P2dHdsYK8=
Subject key identifier: 0B:90:20:B7:2C:E7:72:76:D6:DF:3E:89:A7:70:6C:77:DC:38:8C:C0
Authority key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Certificate issuer: /CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Certificate serial: 01A08AFA236AAB43F3DFF1F3F9E17E707827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
Manifest number: 0E38
Signing time: Thu 10 Sep 2026 11:00:43 +0000
Manifest this update: Thu 10 Sep 2026 11:00:43 +0000
Manifest next update: Fri 11 Sep 2026 11:00:43 +0000
Files and hashes: 1: KYrFJEDEjhc9HhmYSiPT-yYtVPQ.roa (hash: /AaiErA0b5IK+9x0vkOcwB+KnCvGEkMNKJApI/jbN6I=)
2: RK1W7mAdrD36Yd_lLL9bALe3opA.crl (hash: /i/95IPD1QXc02FkgVmEZ59v3d5FzdkHzRYunhB3t7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:23:6a:ab:43:f3:df:f1:f3:f9:e1:7e:70:78:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Validity
Not Before: Sep 10 11:00:43 2026 GMT
Not After : Sep 11 11:00:43 2026 GMT
Subject: CN=0b9020b72ce77276d6df3e89a7706c77dc388cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:64:64:66:9a:ed:c3:3c:4e:bd:fc:44:52:
44:ce:49:7f:78:c3:be:d6:4c:11:9c:05:c9:4c:05:
6d:7c:0d:4e:9a:2e:7c:0e:93:07:62:9b:09:32:1c:
e4:8c:32:9c:79:08:26:37:dc:ef:11:18:2a:2f:c2:
d8:fc:15:03:de:d0:c4:3f:67:88:a3:63:d8:33:ca:
99:af:7a:4c:20:42:3e:0f:59:e7:7b:dc:5a:d1:74:
5e:35:b4:03:b9:1b:e6:d7:7c:8a:0e:df:ac:9a:97:
56:b1:3a:02:44:d4:f8:cf:c2:17:69:fa:66:41:29:
78:5c:f7:d1:46:6c:be:45:31:30:67:f8:05:42:42:
55:2e:3f:89:b2:61:1b:02:2c:6f:44:4c:c7:f5:aa:
ca:61:39:b5:4e:ea:a9:76:b7:70:78:c0:c5:d4:03:
ae:4d:ba:c7:32:d5:04:ae:c8:0b:f3:c2:7b:9f:0d:
2e:90:62:86:ae:69:00:ca:a2:f2:01:95:73:6b:84:
0b:15:31:b3:85:5e:07:1f:29:5f:e5:a4:65:99:99:
b3:17:ec:6c:5e:03:e2:93:fa:1c:55:3c:f3:c2:21:
71:d9:99:3a:af:49:fb:0f:f2:79:b2:d0:3d:72:33:
3f:df:0f:7d:08:0d:25:4c:66:aa:01:b9:78:18:a3:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:90:20:B7:2C:E7:72:76:D6:DF:3E:89:A7:70:6C:77:DC:38:8C:C0
X509v3 Authority Key Identifier:
keyid:44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e8:89:0a:47:be:61:e6:5e:ab:4e:eb:a0:69:24:00:04:c4:
45:b1:ac:61:b8:ab:03:b8:9b:53:97:ba:ea:c8:a0:74:5c:d7:
57:d5:10:fd:d0:d7:bd:c5:7b:b9:6d:79:a6:02:25:25:6a:22:
98:62:b5:0e:c6:b4:04:c0:b2:6e:fa:5d:38:e4:b9:d4:f5:ee:
e9:a5:6e:45:4b:76:ed:25:45:ab:e0:25:37:27:02:99:ac:aa:
dc:41:d6:7e:9c:44:3c:0a:fe:38:8a:3a:f2:7f:db:19:d3:fc:
dc:c1:0c:77:7e:5b:62:46:51:03:f2:df:08:f2:24:5d:0f:69:
eb:9c:cd:34:9c:3e:ab:68:da:11:34:2c:0d:09:11:04:71:14:
cd:67:f9:0f:73:e1:74:e9:14:06:f8:fa:61:48:3e:ae:11:e2:
45:e6:33:21:12:2b:ef:38:5a:d3:ca:0a:16:d1:4d:b5:9c:2d:
e2:ae:b9:6b:48:79:0a:7f:70:4b:5d:fa:e2:d1:4b:c1:eb:30:
65:dd:26:06:1a:2d:15:43:15:38:37:fd:db:02:30:6c:37:a4:
d7:5b:ce:28:6a:e4:02:7f:a2:18:4a:f6:4d:eb:36:54:65:5e:
13:bd:68:90:f2:95:a7:e4:e4:98:e3:a4:07:3d:18:35:bd:b1:
a2:bf:45:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:40:29 2026 by rpki-client