Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
File: 0kvL9emk_kMp8iPBFFBykFOPnMI.mft (raw, json)
Hash identifier: Om7nbr3aPbz8Qr6qRxKnysbE9DKQJw7KRz8/V9mNi6A=
Subject key identifier: 47:FA:F3:BE:37:5D:DD:59:8F:61:5A:0C:E1:43:B9:B1:FB:85:D0:8E
Authority key identifier: D2:4B:CB:F5:E9:A4:FE:43:29:F2:23:C1:14:50:72:90:53:8F:9C:C2
Certificate issuer: /CN=d24bcbf5e9a4fe4329f223c114507290538f9cc2
Certificate serial: 01A00101284DD575AE528D24BB882412A973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
Manifest number: 154B
Signing time: Fri 14 Aug 2026 16:00:48 +0000
Manifest this update: Fri 14 Aug 2026 16:00:48 +0000
Manifest next update: Sat 15 Aug 2026 16:00:48 +0000
Files and hashes: 1: 0kvL9emk_kMp8iPBFFBykFOPnMI.crl (hash: 3pdehH7iA3o1vOwaN140WiY5bggsSmjTT5D+3K3hWhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:28:4d:d5:75:ae:52:8d:24:bb:88:24:12:a9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24bcbf5e9a4fe4329f223c114507290538f9cc2
Validity
Not Before: Aug 14 16:00:48 2026 GMT
Not After : Aug 15 16:00:48 2026 GMT
Subject: CN=47faf3be375ddd598f615a0ce143b9b1fb85d08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:17:46:99:b7:6f:bc:bb:10:03:6c:e1:99:97:
cf:00:94:23:b1:ad:56:fe:de:b3:c3:80:85:01:38:
5a:af:42:86:0a:aa:76:2e:aa:1c:3e:5f:b6:01:2e:
6b:fc:6d:69:20:55:d4:34:79:d2:2c:fc:01:19:6e:
6b:76:58:aa:db:36:7c:65:74:2e:17:66:7a:59:3c:
61:99:69:86:cc:37:e6:9e:4f:7f:15:17:d7:4e:b9:
b0:16:77:79:d9:ed:97:af:72:27:dc:ce:f9:9a:85:
fa:63:8f:ca:a3:7f:0c:b5:e7:ef:ab:50:83:e7:cd:
00:7d:6b:8c:43:79:0b:df:4c:3a:3d:59:1a:f5:7b:
e7:1e:3f:61:c3:1e:3a:19:64:45:c2:27:a2:34:4a:
9e:11:e3:03:78:e3:db:97:d4:fa:a4:ad:d0:31:b1:
fa:d8:34:a8:c3:e8:91:a3:10:db:b4:d7:54:5f:80:
47:40:ae:d3:ec:c0:07:29:67:e2:42:b8:d9:39:30:
48:d0:32:43:54:40:54:02:83:40:3e:90:b1:af:58:
ae:d6:2a:b3:3c:7b:54:75:48:83:f0:a6:f4:91:4b:
27:b9:69:22:51:bd:da:8b:7d:f8:d3:e9:89:7c:28:
88:1f:5a:30:33:f1:ab:cb:01:eb:95:e0:09:53:ea:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FA:F3:BE:37:5D:DD:59:8F:61:5A:0C:E1:43:B9:B1:FB:85:D0:8E
X509v3 Authority Key Identifier:
keyid:D2:4B:CB:F5:E9:A4:FE:43:29:F2:23:C1:14:50:72:90:53:8F:9C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e9:a2:c2:26:a8:33:4b:77:b7:40:da:40:38:e6:89:33:5e:
2b:62:06:6f:52:4a:b7:8b:e2:82:27:85:e4:c1:a6:84:44:45:
57:8a:f5:ad:c2:77:a8:5a:42:8d:88:f5:f6:a3:08:50:25:be:
59:ed:8a:e2:79:81:18:a0:23:54:1e:34:79:ee:a7:e4:c8:98:
e6:2f:47:56:c3:65:13:fa:86:44:73:36:71:aa:73:64:4a:85:
6c:c0:6f:e9:30:81:53:66:4a:91:82:00:41:e1:f6:fe:c7:86:
4b:9a:26:9b:8b:70:9b:81:4c:51:9e:d8:cb:ca:17:b5:a4:67:
59:dc:28:10:c3:c1:94:fc:07:f1:5a:4f:d0:34:59:38:d7:99:
37:ac:1d:b0:63:33:af:ae:bc:44:eb:b6:2a:9f:cd:d8:3d:e9:
60:5d:04:95:78:6a:c0:98:53:5a:f3:09:00:79:ce:ef:87:3e:
b4:4a:83:60:2a:bd:19:3e:c3:5a:35:56:ba:33:48:99:93:04:
e0:7a:9a:34:05:40:8e:81:b6:43:24:06:51:b4:76:13:33:0f:
34:d1:13:1b:68:a8:26:75:dc:22:7e:b9:6c:a2:19:64:e9:5c:
5a:c6:61:b7:f1:15:5b:36:c7:da:0e:73:2a:bc:8b:6d:ba:9b:
61:58:f0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:26 2026 by rpki-client