Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
File: 0KHbRmz4CCBik9B-ZfISH-tJoz4.mft (raw, json)
Hash identifier: 93Jy2oIEHhhmWYOO7bE96XJHMRaBOVX/hayo8tzQLlg=
Subject key identifier: 61:BB:9B:F0:F4:05:ED:5F:5C:E7:19:8A:E4:34:5E:A7:39:F1:8F:AD
Authority key identifier: D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
Certificate issuer: /CN=d0a1db466cf808206293d07e65f2121feb49a33e
Certificate serial: 01A0EE5414374DA903596E14E6FBF98290D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
Manifest number: 186B
Signing time: Tue 29 Sep 2026 18:01:22 +0000
Manifest this update: Tue 29 Sep 2026 18:01:22 +0000
Manifest next update: Wed 30 Sep 2026 18:01:22 +0000
Files and hashes: 1: 0KHbRmz4CCBik9B-ZfISH-tJoz4.crl (hash: td1Zvc7NmmDrmY1bTW1STeYOAgIIDsgezUr0eb3TbE0=)
2: GoeVKkXV9KennXFFcSaLbR3SUT4.asa (hash: +e3JEyEvlmDvyKfQ88OWzaojqU5e4fHq1z//PA0aN/4=)
3: yq5Siwl4i3jmM8YcRC0pxHMIUlk.roa (hash: nGkz7j5CjWTfBWr6c+S9Cs2//HPjWw5q8jEucRFb/jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:54:14:37:4d:a9:03:59:6e:14:e6:fb:f9:82:90:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a1db466cf808206293d07e65f2121feb49a33e
Validity
Not Before: Sep 29 18:01:22 2026 GMT
Not After : Sep 30 18:01:22 2026 GMT
Subject: CN=61bb9bf0f405ed5f5ce7198ae4345ea739f18fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:7e:d9:60:f2:21:0b:8f:7b:35:02:b1:a5:
b3:62:88:da:4b:15:65:80:e8:bf:31:e2:4e:67:03:
47:1f:ed:66:82:df:54:cf:0e:26:e7:7c:39:2a:5e:
a2:a0:7f:f4:65:3e:d8:34:9d:3d:74:eb:f1:53:65:
10:2f:b2:99:cd:1b:ea:52:02:f6:70:a3:db:d3:99:
93:23:9c:0a:89:1e:1d:96:26:23:a0:31:2f:14:4b:
14:7f:ee:2f:d8:73:c3:ef:ca:d5:5f:98:54:a3:4e:
87:e5:6f:86:c4:5a:9c:aa:57:97:60:5a:ca:92:c2:
bb:cd:f0:64:bb:98:f5:ef:17:64:83:4a:04:7a:c9:
a6:fa:32:bf:5a:0a:5d:8b:a9:d1:15:28:0f:fc:44:
3f:55:ab:5d:bb:ec:af:85:47:50:79:6c:f2:42:43:
32:81:b1:b2:3c:86:9c:e1:ca:33:e5:e0:06:c5:dc:
28:0c:a3:c9:c7:fb:e5:2c:2e:50:23:af:21:6c:51:
02:8b:fc:dc:87:5f:fd:67:e0:02:cf:76:15:a0:65:
32:be:da:5b:94:b6:6e:40:0c:7f:6a:9c:ce:1d:25:
17:c6:85:c6:f1:d9:11:82:46:02:11:fc:52:02:08:
09:b2:cc:68:6c:76:3c:62:dc:d7:bf:15:01:8b:bb:
54:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BB:9B:F0:F4:05:ED:5F:5C:E7:19:8A:E4:34:5E:A7:39:F1:8F:AD
X509v3 Authority Key Identifier:
keyid:D0:A1:DB:46:6C:F8:08:20:62:93:D0:7E:65:F2:12:1F:EB:49:A3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KHbRmz4CCBik9B-ZfISH-tJoz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/11cdac-6411-454d-b973-4762b010ef1e/1/0KHbRmz4CCBik9B-ZfISH-tJoz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5a:b9:a4:39:38:dc:ef:06:e1:b5:47:a5:8d:b3:da:29:af:
59:b8:85:4f:b0:65:46:3c:d3:a3:80:d5:aa:a1:5c:f7:3d:7f:
ba:e3:51:25:8c:f7:f1:a9:36:80:df:92:b8:18:c7:da:95:5b:
ef:05:f1:8e:34:ac:61:b0:f6:4b:e1:b9:af:90:6a:70:a0:04:
de:22:36:40:df:f6:94:b1:d7:41:4e:6b:51:1f:8a:e4:0c:28:
c8:6c:e5:9f:53:60:4b:bd:d1:76:99:8c:ea:d7:2b:27:fe:36:
0e:a8:82:ac:a9:cb:90:8f:6b:2b:50:c2:bc:bf:cd:ec:1a:4f:
ad:16:87:36:2e:56:b0:83:43:92:cd:7f:b4:6d:98:9b:ca:d5:
1e:2b:cb:b5:96:dd:d3:68:e7:7f:35:d9:68:96:d4:a5:76:72:
0c:a1:7e:af:a1:53:13:4b:14:e7:47:d7:24:8a:4e:c0:0b:3c:
cb:57:ca:22:d3:0d:8c:bb:6d:ea:e2:64:84:2f:17:93:30:1a:
1f:68:a1:d7:25:66:78:67:7c:4f:d9:c4:6c:2f:e9:59:9f:e8:
e1:01:85:52:d5:60:e2:26:41:45:9e:ba:74:0e:74:1a:1a:d2:
8b:c6:03:d5:a2:9d:ff:31:bb:49:7b:34:3b:0b:4b:73:29:35:
e9:9c:f1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:02:47 2026 by rpki-client