Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
File: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft (raw, json)
Hash identifier: Kqo4BnIZnOyV+Aq8kmvpgGhw6EmbrEZwt0pc3nT4ecM=
Subject key identifier: C1:8E:77:10:BD:EE:D3:D0:1F:A8:94:D0:A1:0B:27:0D:B2:DC:6D:40
Authority key identifier: D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
Certificate issuer: /CN=d248185956e443b55b062200f964537bc10bc130
Certificate serial: 01A000CA74B361AC26318426D09CDFDD1BE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
Manifest number: 0670
Signing time: Fri 14 Aug 2026 15:01:03 +0000
Manifest this update: Fri 14 Aug 2026 15:01:03 +0000
Manifest next update: Sat 15 Aug 2026 15:01:03 +0000
Files and hashes: 1: 0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl (hash: BWB/QUXm6YEzDZsPPPT62eaIfQkRtQzNYx7Ia3WvHNU=)
2: Pa6_prRWrCOv6_TWB1niCwktArw.roa (hash: 5Gw8u2gpL7xdm9S0jF3mtKaPhtDLHFC4S0vPSatVp88=)
3: Xudz0hLe8s3SLmiPVONXMND3hRM.roa (hash: oORSmt43XgnSynXZgH2ISuQJ8Cm/DBrmnJwy75rrXHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:74:b3:61:ac:26:31:84:26:d0:9c:df:dd:1b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d248185956e443b55b062200f964537bc10bc130
Validity
Not Before: Aug 14 15:01:03 2026 GMT
Not After : Aug 15 15:01:03 2026 GMT
Subject: CN=c18e7710bdeed3d01fa894d0a10b270db2dc6d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:d1:e6:42:35:8c:22:55:d8:f0:db:a9:a7:
60:72:6f:10:c2:9f:93:4d:21:de:d5:00:bd:0f:af:
64:2e:74:a1:13:97:68:6b:1d:1d:b9:fc:07:a8:f4:
f5:11:72:95:37:6a:c2:b1:af:93:6a:c9:26:65:0b:
57:ef:79:7d:f5:75:ec:7d:12:6f:fd:76:a1:d1:bf:
2e:e2:1f:82:c9:36:11:2b:7a:8c:36:be:00:b0:11:
b2:a7:4d:cd:1d:72:57:13:d2:20:cc:28:34:fa:45:
b5:35:39:40:40:15:65:9a:a1:5a:2c:5d:ec:0f:25:
6a:14:66:9b:fd:94:85:ac:91:80:c8:ae:92:d9:39:
5b:e2:2f:20:61:e1:c5:96:82:f4:e4:b5:90:f6:d2:
5d:ab:81:59:72:89:4e:9a:74:50:68:9c:64:d6:af:
2e:3b:1d:a0:c2:69:2d:10:a5:e4:12:85:83:8b:9d:
08:06:77:b3:45:c8:db:ad:bb:7c:70:28:50:0c:00:
47:04:39:65:44:b6:6c:14:72:ed:dd:80:60:0c:5a:
e5:65:0f:a6:45:bf:db:62:3f:86:fe:ae:98:fa:98:
20:15:34:bb:45:fb:13:6b:d9:f1:5d:d2:8d:d8:b7:
b6:4d:33:93:b8:bf:da:6e:97:4c:e9:4b:86:77:d4:
b6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8E:77:10:BD:EE:D3:D0:1F:A8:94:D0:A1:0B:27:0D:B2:DC:6D:40
X509v3 Authority Key Identifier:
keyid:D2:48:18:59:56:E4:43:B5:5B:06:22:00:F9:64:53:7B:C1:0B:C1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/de875a-0576-4a15-be23-aea054cf43bb/1/0kgYWVbkQ7VbBiIA-WRTe8ELwTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4b:1b:12:92:b5:9d:e9:d3:56:65:64:38:7e:15:0a:26:82:
76:0e:3e:f1:d0:bd:e7:55:97:b0:9a:fe:5c:55:9f:08:7d:0d:
6d:a6:11:ec:5b:8a:8a:12:af:6f:0e:4a:6d:c0:49:39:16:ea:
67:fe:24:9a:38:a8:08:81:93:90:00:7c:f3:ab:33:cb:25:b4:
5b:ec:24:98:98:28:f0:28:4e:e2:45:e4:f8:07:e6:ec:d4:f3:
d9:45:4d:b2:41:fc:52:74:a8:b8:0d:07:21:9f:c6:54:51:a3:
7f:f8:8a:46:da:24:23:31:7a:70:74:f9:41:25:67:48:1f:84:
41:e4:a8:29:4f:c7:f9:2e:98:c2:ac:69:a3:78:c2:36:b1:06:
b9:c7:3a:a3:14:56:4c:d9:82:81:38:fe:34:96:de:b8:f3:a7:
bb:03:d2:5d:fc:27:29:54:6b:39:18:70:0c:a1:85:78:6b:ed:
12:0a:50:eb:73:33:27:0d:ba:33:ae:09:03:6f:e9:92:b5:a4:
2c:33:75:35:d9:d7:28:72:8e:4b:43:ce:99:07:24:ab:fc:ab:
6c:29:43:2a:27:bd:65:41:e4:fb:9f:53:90:8a:5d:0d:5a:ca:
7f:8c:ca:42:d2:d5:ba:fe:c0:f9:6c:b4:ef:c1:d6:15:ae:27:
ce:d2:5a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:02 2026 by rpki-client