Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: sPQdblYZOny80TGzwl4vYVS8uLJuv+7eSGN4iAw38fI=
Subject key identifier: 5B:1D:1C:C1:C2:D7:6B:F0:EE:B9:E6:EC:4A:B4:D3:4D:7C:00:B7:B3
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 01A000935B51F18B30907FF65BADCB077A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 17EF
Signing time: Fri 14 Aug 2026 14:00:52 +0000
Manifest this update: Fri 14 Aug 2026 14:00:52 +0000
Manifest next update: Sat 15 Aug 2026 14:00:52 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: Nit6C76s6Mcvr7H2Muhs58iStl6/7sEaB7kMR5qhK+I=)
2: DhRuJkYL3BPnAOF_5KLHFOS7fEU.asa (hash: sQIfeWLpZ4jVR+U6OfuhrXRMEOMO8X/NhFz0LDGhKGs=)
3: yq5Siwl4i3jmM8YcRC0pxHMIUlk.roa (hash: nGkz7j5CjWTfBWr6c+S9Cs2//HPjWw5q8jEucRFb/jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:5b:51:f1:8b:30:90:7f:f6:5b:ad:cb:07:7a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Aug 14 14:00:52 2026 GMT
Not After : Aug 15 14:00:52 2026 GMT
Subject: CN=5b1d1cc1c2d76bf0eeb9e6ec4ab4d34d7c00b7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e1:e7:81:d8:0b:8a:d2:55:90:c4:3b:03:c9:
11:5a:0b:04:22:2b:b7:31:2b:ad:de:37:aa:84:43:
e1:e1:ff:ae:7f:a8:9f:15:6a:b5:2f:1d:1a:4b:43:
4e:35:b9:88:1f:d7:57:fb:f4:72:db:d1:04:47:b4:
c9:5c:e3:3c:32:8e:79:09:2c:f6:31:cb:ab:01:6f:
85:78:99:be:2a:aa:f4:32:52:33:34:23:5e:41:b1:
32:e1:a2:49:e4:74:4d:32:f8:91:a3:77:8b:1e:e2:
42:c0:90:2e:af:48:12:24:3e:55:ad:c4:cb:f9:fa:
bd:1f:1f:42:02:42:d8:a6:7e:a6:ab:38:58:99:5e:
5a:9f:5e:fc:dc:03:95:cd:96:ff:58:44:ed:b0:39:
48:1d:c2:fc:6c:a1:0f:a8:23:96:ce:d2:ec:26:1c:
1e:e2:03:b3:cc:8c:d7:ab:a1:86:73:d0:73:29:98:
2c:5b:05:43:bb:1e:39:2c:0e:c7:09:2b:e3:44:cd:
f5:d0:f3:ab:9c:e1:17:bc:ea:ae:b9:d1:fd:ef:3b:
d0:36:67:5a:02:8b:c5:bc:2c:18:68:50:39:d7:f5:
84:09:b7:22:7c:63:81:a7:17:46:74:7c:55:92:dc:
a6:5c:db:72:27:72:2b:2c:60:08:a8:37:32:6d:cd:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1D:1C:C1:C2:D7:6B:F0:EE:B9:E6:EC:4A:B4:D3:4D:7C:00:B7:B3
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:22:f2:27:d3:04:75:9f:bc:c8:9f:b0:b8:f3:83:54:05:4d:
1d:0e:43:62:6f:0c:19:ea:87:77:04:6e:1c:85:02:9d:19:8a:
7b:07:62:b0:b3:61:5c:f1:f3:3b:96:c6:ed:70:cd:ea:66:db:
04:2a:7f:64:cd:54:fe:e0:b0:48:ae:f0:68:2b:e0:a9:a7:4e:
ea:0c:ea:86:23:2d:36:4e:7f:ee:2e:86:35:e4:e5:7f:bf:9b:
59:50:29:fa:8f:ce:9f:a7:56:0a:b6:f1:a3:d0:df:b0:a8:91:
8d:ac:a4:76:76:3c:25:42:f1:f8:7b:1d:88:46:3e:e3:f7:ee:
1e:27:2b:f0:bb:38:98:be:15:a3:b9:b4:78:ba:51:8f:28:cc:
78:0e:b5:2d:ce:b2:e5:2a:60:80:b0:ff:03:4f:d0:b1:62:85:
40:36:ad:9f:05:fc:e7:a0:61:f2:30:1f:24:64:a2:0f:cd:56:
e8:4e:b3:eb:35:e5:8f:92:58:64:67:e3:09:21:f9:75:25:4a:
69:17:f2:59:5b:3e:a1:0c:81:a6:f8:68:5f:1e:ce:25:b2:cc:
47:6d:9d:d8:2c:c8:4e:51:56:47:6f:8b:03:6e:25:78:f4:12:
21:e7:db:f7:09:b5:22:b8:dc:9e:59:9c:15:e4:bc:d1:b4:88:
0f:e4:12:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:31 2026 by rpki-client