Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
File: 001KO3R_ynAQOxfz29xQRcrOMt8.mft (raw, json)
Hash identifier: MnMK0O9qLaNyf1ZEoVlSauxeBTlM+InCVKhSEUVnG6Q=
Subject key identifier: 99:DA:DD:89:66:03:82:20:79:AC:40:FC:2F:B7:42:36:66:AB:0F:43
Authority key identifier: D3:4D:4A:3B:74:7F:CA:70:10:3B:17:F3:DB:DC:50:45:CA:CE:32:DF
Certificate issuer: /CN=d34d4a3b747fca70103b17f3dbdc5045cace32df
Certificate serial: 01A000938579AEC98185D1167EAB14C9E4EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/001KO3R_ynAQOxfz29xQRcrOMt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 14:01:02 +0000
Manifest this update: Fri 14 Aug 2026 14:01:02 +0000
Manifest next update: Sat 15 Aug 2026 14:01:02 +0000
Files and hashes: 1: 001KO3R_ynAQOxfz29xQRcrOMt8.crl (hash: foXhlplLSvErOuby0Abpd/OtePOSidIQUiYJ3flBuA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/001KO3R_ynAQOxfz29xQRcrOMt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:85:79:ae:c9:81:85:d1:16:7e:ab:14:c9:e4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34d4a3b747fca70103b17f3dbdc5045cace32df
Validity
Not Before: Aug 14 14:01:02 2026 GMT
Not After : Aug 15 14:01:02 2026 GMT
Subject: CN=99dadd896603822079ac40fc2fb7423666ab0f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:a9:d1:38:4a:9a:62:76:05:cd:ed:b8:2f:
27:81:1f:17:42:66:19:e2:0b:00:9f:c8:d4:d6:8b:
aa:69:27:5c:a8:3b:91:7e:c7:15:6e:5e:8c:a2:5d:
da:74:bd:3c:be:29:ec:d0:9b:ed:3d:f0:cf:62:3f:
98:a7:7c:fb:bc:f4:f7:73:b7:7e:ad:ef:29:bb:a3:
f3:85:cc:72:3e:80:97:31:9b:01:95:1a:50:63:95:
b4:36:6d:49:e1:77:9e:fd:8a:07:28:24:c6:46:43:
08:6a:b1:d3:3f:23:2c:62:68:ad:e9:91:a4:a7:94:
45:93:e2:08:b1:f3:23:81:69:d8:31:cf:e3:57:69:
f3:4e:b2:bc:16:0e:3d:9f:e7:c7:e3:f6:e0:78:72:
7b:f3:57:cc:40:18:a8:ce:df:32:f1:11:5f:ed:21:
cd:78:15:31:89:77:ed:0d:bc:ff:08:d2:db:65:88:
cc:da:71:fa:ff:73:50:83:4d:de:68:f3:b0:12:b0:
b9:a5:2c:1c:52:b0:5c:20:12:d6:b4:52:ae:da:9f:
a6:b6:6c:ad:da:23:18:cc:c5:7e:82:6b:2e:1b:25:
4f:ae:f3:dd:f0:69:c9:44:e6:bc:05:90:86:78:85:
f1:f1:82:07:3b:4f:62:46:3f:8f:48:3c:22:4b:b9:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DA:DD:89:66:03:82:20:79:AC:40:FC:2F:B7:42:36:66:AB:0F:43
X509v3 Authority Key Identifier:
keyid:D3:4D:4A:3B:74:7F:CA:70:10:3B:17:F3:DB:DC:50:45:CA:CE:32:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/001KO3R_ynAQOxfz29xQRcrOMt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/8d8372-e079-4831-afd2-437934c58453/1/001KO3R_ynAQOxfz29xQRcrOMt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7b:d5:a4:d3:61:f4:7c:1b:eb:eb:f7:ea:a6:4e:da:b1:66:
4c:03:1d:11:a6:9d:06:fb:e2:81:ed:67:1d:a7:1f:e8:89:80:
07:b9:a8:d0:a5:39:cc:7f:19:d8:f2:30:5a:33:d3:03:c7:36:
28:42:f6:b2:9b:72:4a:d3:01:53:1f:c9:ee:5c:c6:73:97:49:
6b:3d:93:05:13:fd:8f:9a:a5:00:0b:f1:4d:c9:44:15:21:35:
d0:7a:a1:cc:60:6d:0d:69:ca:ca:a1:c8:54:8f:46:26:62:a6:
89:7a:c5:e4:94:74:28:0a:42:5d:2b:99:2b:cc:3b:ed:96:58:
e7:4f:2d:ee:43:28:4f:69:90:10:89:f5:b4:6b:b3:a7:53:f6:
14:85:a0:f4:7e:14:db:7b:79:44:11:aa:cd:57:ca:6d:95:20:
72:e8:e8:0d:29:c2:6e:bc:11:72:7f:0a:11:b6:94:b2:3a:e3:
02:ad:e5:f9:44:68:df:e0:05:06:12:25:09:bd:2c:33:05:3c:
9c:00:9d:f7:ec:7f:9e:3d:8b:fd:12:86:b5:2a:7f:c1:dc:64:
ef:89:8a:59:1d:4d:19:98:ab:69:39:05:fe:32:7d:ad:42:95:
2b:16:a8:2e:b4:27:46:64:05:c3:b9:1a:52:af:8e:93:c4:27:
92:00:f3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:06 2026 by rpki-client