
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
File: 0kvL9emk_kMp8iPBFFBykFOPnMI.mft (raw, json)
Hash identifier: 8JuiZCq4RzV7Vk1qBzDLrzClIDq/JtXoCcGHqEBKUck=
Subject key identifier: 10:99:A6:B2:6B:12:77:AD:94:27:AE:A5:12:E9:DF:1A:E7:7E:AC:FA
Authority key identifier: D2:4B:CB:F5:E9:A4:FE:43:29:F2:23:C1:14:50:72:90:53:8F:9C:C2
Certificate issuer: /CN=d24bcbf5e9a4fe4329f223c114507290538f9cc2
Certificate serial: 01A140B9E4AFBFBC6CE6F33710444DCE7039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
Manifest number: 15F1
Signing time: Thu 15 Oct 2026 18:01:26 +0000
Manifest this update: Thu 15 Oct 2026 18:01:26 +0000
Manifest next update: Fri 16 Oct 2026 18:01:26 +0000
Files and hashes: 1: 0kvL9emk_kMp8iPBFFBykFOPnMI.crl (hash: HEdwsVOgary1jGguLiHdlbajxSNk4XTrfDSCAT7DMX0=)
2: awRe_zLwJegg4IU3VSgKtvNeHbM.asa (hash: FslhmtNgFEEBCq2RdzEvR3JKEXHd6CTQlGTrf73WvoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:b9:e4:af:bf:bc:6c:e6:f3:37:10:44:4d:ce:70:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24bcbf5e9a4fe4329f223c114507290538f9cc2
Validity
Not Before: Oct 15 18:01:26 2026 GMT
Not After : Oct 16 18:01:26 2026 GMT
Subject: CN=1099a6b26b1277ad9427aea512e9df1ae77eacfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:40:e8:d3:d4:1e:59:01:be:4e:e7:d6:89:
39:ea:5c:3f:80:96:93:7c:d7:76:06:e7:4b:c0:d2:
bd:ce:c1:6e:78:a8:48:a1:1f:51:24:ae:67:8f:7f:
cc:5e:42:58:69:f9:b2:0c:1e:09:30:8c:86:ba:ab:
e7:8b:07:31:4f:66:0d:ea:f4:08:1e:41:e0:ab:0b:
71:44:4a:c6:82:a8:2c:ba:2a:c0:eb:ff:55:79:ef:
9e:f7:d5:21:fd:01:f2:97:b2:8f:b2:c8:74:6a:77:
9d:2a:c7:73:72:80:8a:65:d4:18:fb:82:10:4c:78:
27:c0:69:21:ef:4e:cc:82:f9:fb:09:b3:bc:c5:d0:
56:78:da:8c:db:7d:c1:c4:df:99:2f:7d:86:5e:f4:
66:19:70:69:20:99:ba:fb:ae:ba:45:0f:3e:ab:7b:
45:cd:2e:12:c3:f8:62:dc:9f:5d:05:5f:b4:48:c9:
89:02:d3:22:6e:ef:97:98:4b:df:be:bd:1e:91:ba:
c2:e0:60:a5:55:bc:8b:4c:2c:07:b5:53:f1:05:52:
79:5e:1f:0b:cb:1a:9b:46:b4:c3:93:a7:16:d7:94:
7b:36:b0:ae:c3:ef:81:1b:51:54:6e:5e:85:dc:78:
76:55:ec:ba:d3:81:6a:9e:c6:b1:7c:0a:7c:d0:24:
fa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:99:A6:B2:6B:12:77:AD:94:27:AE:A5:12:E9:DF:1A:E7:7E:AC:FA
X509v3 Authority Key Identifier:
keyid:D2:4B:CB:F5:E9:A4:FE:43:29:F2:23:C1:14:50:72:90:53:8F:9C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kvL9emk_kMp8iPBFFBykFOPnMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bc41a4-fc91-496f-a225-2e6e5e5f5d9b/1/0kvL9emk_kMp8iPBFFBykFOPnMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:08:a5:9e:95:1d:8f:3a:50:6d:83:c7:16:71:e6:84:12:87:
53:0f:a0:29:13:b6:68:07:bf:07:dd:b3:c1:e9:9e:07:60:10:
cb:9d:44:e7:3f:39:ab:1c:e5:4f:d6:0f:21:45:c4:0a:4e:04:
ce:4a:40:4f:11:88:14:5a:a6:17:b4:de:fe:9d:69:84:15:2e:
4b:9d:38:6b:39:4b:e0:b8:27:a2:33:1b:56:6f:db:ab:75:d9:
7d:1f:cb:82:fb:08:e9:d0:89:eb:d4:22:ec:07:c9:d4:30:77:
20:7a:bd:90:56:71:ba:5d:3d:7a:5f:ea:0c:86:6a:19:f1:c5:
7f:d8:d1:56:37:f3:e9:f4:9a:60:a6:14:39:4d:fb:75:8e:4f:
f5:01:75:e8:4a:3c:d6:ab:58:16:38:e8:63:58:99:03:a3:d1:
a5:5d:68:ca:b8:5a:57:c9:34:93:11:2d:dc:12:69:dd:92:c0:
d1:1c:09:aa:da:94:ac:ee:7c:7d:3f:f5:51:9f:b4:be:96:1b:
2e:a6:ca:5e:dc:7e:c8:26:a2:06:9d:5a:69:b2:36:bd:ea:ab:
c5:a5:7f:b1:d8:22:11:6c:8e:f7:28:e9:f6:83:06:6e:f5:a0:
d8:45:29:36:2f:9f:8d:48:ec:c7:6d:98:ec:f1:c1:98:7f:fa:
fa:e5:38:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:07:54 2026 by rpki-client