Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
File: kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json)
Hash identifier: gf4wVfUs8P9baDGS/CaX7iBbknRfk6L5T0fJFLMXf0g=
Subject key identifier: 5D:03:9C:BC:16:83:1A:3A:A9:1C:7A:C5:2F:B4:4C:E7:F4:E9:16:6F
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial: 01A08AFA688035C3CF4F81BEED9BC8F58C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 11:01:01 +0000
Manifest this update: Thu 10 Sep 2026 11:01:01 +0000
Manifest next update: Fri 11 Sep 2026 11:01:01 +0000
Files and hashes: 1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: qEE0lU3hSiXW71RGgvmtzSmSJtFaLsp0RR1aotrKgYw=)
2: mKOuhDb0lNg_dJ83TTrmFYMNIeA.roa (hash: Om4b1zrUyorfRjmzpKplEidWPKteQvqXZcg+Z0i4g3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:68:80:35:c3:cf:4f:81:be:ed:9b:c8:f5:8c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
Validity
Not Before: Sep 10 11:01:01 2026 GMT
Not After : Sep 11 11:01:01 2026 GMT
Subject: CN=5d039cbc16831a3aa91c7ac52fb44ce7f4e9166f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:38:e5:07:35:10:b7:8d:5b:97:96:2b:2a:
8e:41:e4:f8:87:74:4c:12:b6:a0:c7:7b:c8:7d:95:
28:82:f0:34:4b:e9:e9:27:a4:6c:f2:6f:41:2f:65:
e5:90:1f:84:e0:dc:1a:60:84:2e:15:35:c1:85:3e:
f6:05:f7:05:43:f7:a1:8b:1a:63:91:c7:d4:6d:a4:
92:d1:e6:bd:25:79:8a:34:cc:60:40:8b:c0:8d:05:
cb:67:4c:f4:b6:33:c9:3a:5a:a4:04:92:70:f1:0e:
11:0c:82:ef:dd:a1:02:a7:b0:0d:ff:28:15:1d:8f:
cf:bc:53:b4:18:aa:32:57:eb:12:e5:8d:04:96:04:
10:c9:59:10:7f:89:5f:17:53:7f:c9:74:62:56:a4:
c0:dd:7f:a9:7b:4f:c7:61:47:21:c2:ba:f5:8f:f7:
0c:76:50:c6:c3:ec:72:86:f1:f0:b6:d1:6b:4f:53:
b1:3d:40:ee:8a:94:40:f7:53:21:df:81:d0:b7:b1:
f1:0a:5d:f3:80:1f:b2:27:ac:1a:30:73:ca:53:d8:
c1:9c:f0:b7:b8:d9:c4:2c:c5:63:fb:11:27:a1:53:
87:94:a6:4a:aa:d3:d5:c0:8f:2c:89:29:69:c8:99:
85:45:2b:91:4f:f3:b2:89:4d:6f:fb:61:7e:0e:34:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:03:9C:BC:16:83:1A:3A:A9:1C:7A:C5:2F:B4:4C:E7:F4:E9:16:6F
X509v3 Authority Key Identifier:
keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a4:60:c8:ea:fc:12:6d:06:61:b7:04:51:4e:8e:9d:f9:11:
e8:ae:74:32:71:39:39:ce:af:7b:f5:ba:6e:9a:01:f1:4e:e7:
11:4a:b1:d7:5c:59:d8:a3:8f:ed:a7:94:73:9b:db:bb:89:d8:
db:f5:10:01:99:dc:a5:fa:64:a8:89:1c:82:32:e0:8b:89:ef:
f6:b7:85:ef:40:88:2c:21:1d:ea:47:6f:2a:f4:be:cd:0d:db:
bb:01:db:e4:1c:8c:50:1f:b4:69:9c:02:f1:cc:51:1d:9e:2e:
c0:5d:38:2d:e0:a2:5c:8f:f0:b1:73:7b:5e:db:6e:cd:f7:1f:
7b:35:7d:a8:37:ae:d8:d4:15:1e:9b:3a:bc:28:63:c0:a2:e5:
06:9e:42:f4:85:20:b6:90:a1:57:be:9f:db:25:f3:37:2e:01:
ac:5f:4a:48:c7:f2:d9:2d:6a:bd:0b:02:51:94:bc:8e:0f:18:
ec:21:0e:cd:90:2c:93:88:96:26:da:d4:bf:71:fc:e9:a8:db:
3e:38:da:84:9c:c7:06:58:43:b9:6c:cd:6c:73:94:1f:b7:78:
18:b9:b9:d9:a7:32:8d:40:40:da:c5:e9:82:e9:d5:56:0a:5b:
8f:31:49:f7:fe:f4:00:9e:e6:56:b1:a5:1c:83:4a:66:4a:2b:
fc:63:48:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:31:24 2026 by rpki-client