Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
File: 001KO3R_ynAQOxfz29xQRcrOMt8.mft (raw, json)
Hash identifier: MhE6yuoOxhrVet53CLXfcQ1MIKEAgnOr2VnFo7xeczE=
Subject key identifier: 65:1E:EF:74:9D:40:9D:02:E9:06:D3:45:A0:93:E2:DE:9C:72:6E:59
Authority key identifier: D3:4D:4A:3B:74:7F:CA:70:10:3B:17:F3:DB:DC:50:45:CA:CE:32:DF
Certificate issuer: /CN=d34d4a3b747fca70103b17f3dbdc5045cace32df
Certificate serial: 01A13F39DAB2532A474A1948DA2C8B74449D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/001KO3R_ynAQOxfz29xQRcrOMt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 11:01:58 +0000
Manifest this update: Thu 15 Oct 2026 11:01:58 +0000
Manifest next update: Fri 16 Oct 2026 11:01:58 +0000
Files and hashes: 1: 001KO3R_ynAQOxfz29xQRcrOMt8.crl (hash: cMSgipQ07p1pSPWguTlrVyUjxC4EMLYb2C6N0xXpeZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/001KO3R_ynAQOxfz29xQRcrOMt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:da:b2:53:2a:47:4a:19:48:da:2c:8b:74:44:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34d4a3b747fca70103b17f3dbdc5045cace32df
Validity
Not Before: Oct 15 11:01:58 2026 GMT
Not After : Oct 16 11:01:58 2026 GMT
Subject: CN=651eef749d409d02e906d345a093e2de9c726e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:6a:3c:1e:29:3a:9c:72:7d:5f:e7:89:14:
72:f2:68:ae:94:09:d6:39:5d:03:cd:52:ef:67:db:
b7:8f:2c:b8:5c:0d:ce:bd:ee:cf:45:44:4d:4c:a6:
ff:1d:c0:5c:5e:d9:9a:54:61:f4:75:0e:67:e1:0a:
2a:57:cf:c2:e4:42:03:55:59:33:7d:00:43:d0:7a:
e2:10:fe:33:67:3e:5d:21:08:c5:21:6d:8d:b0:3d:
2e:0b:3d:81:28:85:9b:fd:a8:02:9f:ce:aa:b2:ca:
0f:d6:35:61:9c:59:0b:f2:7c:06:7f:99:bb:32:50:
1f:c4:e1:5e:56:1c:ab:09:0b:4b:d9:cf:98:d7:bc:
3e:e5:36:92:d5:05:2d:b1:49:fc:1d:a5:ac:0e:5f:
34:05:8d:83:dc:e0:52:b6:2e:c5:f4:1b:19:e0:eb:
ae:63:50:ac:52:72:fa:98:37:96:d4:a3:34:33:18:
e8:36:52:12:6d:eb:a9:11:48:66:87:fd:a9:33:d8:
2e:62:08:b9:df:d0:bf:d9:4b:2d:dd:01:23:e4:85:
3e:86:fb:97:67:f3:de:f0:d7:c7:ce:e4:76:d1:52:
d6:82:c4:d2:ec:c6:71:5f:cf:8a:07:b3:84:eb:b0:
64:e9:7b:0f:67:3e:40:fc:ea:bb:29:01:a8:c9:35:
ac:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1E:EF:74:9D:40:9D:02:E9:06:D3:45:A0:93:E2:DE:9C:72:6E:59
X509v3 Authority Key Identifier:
keyid:D3:4D:4A:3B:74:7F:CA:70:10:3B:17:F3:DB:DC:50:45:CA:CE:32:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/001KO3R_ynAQOxfz29xQRcrOMt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:78:49:6b:c9:f6:75:03:4a:84:fa:23:c0:6d:22:9c:56:0e:
a6:ff:2a:fb:41:d6:89:cd:e5:cb:65:62:c9:e7:d5:74:1a:22:
d9:f1:4e:73:5c:c7:2c:8e:91:34:f0:ce:d0:7c:81:13:a2:ad:
bd:42:00:ff:45:ed:51:fb:69:74:2a:3a:12:43:f0:a0:84:42:
fa:c9:54:13:fb:e0:df:5d:42:14:03:0c:88:be:25:ce:ea:d9:
bf:74:ed:1f:be:44:49:41:67:8c:34:27:88:69:21:2c:68:a0:
2f:77:23:96:89:c6:7d:16:75:c3:07:df:68:ef:3a:6a:88:fe:
0a:ba:ea:b6:f6:51:ba:b5:41:46:1f:86:2f:2e:ef:cb:6b:6f:
df:f0:da:73:37:01:10:3b:73:72:dc:86:f5:d9:1e:91:0a:fc:
a7:61:81:c6:87:98:b7:c9:13:b9:89:e0:d4:87:5d:44:cc:17:
7a:2f:b4:4d:34:12:16:62:75:fe:86:cd:c0:7a:a0:d1:b2:9b:
98:ae:e2:29:b7:49:4d:00:26:82:4e:34:24:4f:5d:0c:27:48:
b3:3b:b3:f3:47:9b:06:53:14:71:c7:b0:20:95:4c:15:a4:3a:
63:13:61:26:24:ca:48:64:ab:d3:f0:14:20:3e:7a:c9:85:2c:
37:ae:67:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:22:09 2026 by rpki-client