
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
File: 0mKOBpte2LRVk0O1tn9atPkiUf4.mft (raw, json)
Hash identifier: rPQywn5XlA3rWQzKsLutnIVHZnpGiasheuA8OtnOcA4=
Subject key identifier: 52:A9:49:63:16:BA:72:DF:3B:31:E1:E7:90:8C:35:01:08:A3:FC:FE
Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Certificate issuer: /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Certificate serial: 01A1667D6CC033FCCFB92BEE2EA2EECF7835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
Manifest number: 0605
Signing time: Fri 23 Oct 2026 02:00:58 +0000
Manifest this update: Fri 23 Oct 2026 02:00:58 +0000
Manifest next update: Sat 24 Oct 2026 02:00:58 +0000
Files and hashes: 1: 0mKOBpte2LRVk0O1tn9atPkiUf4.crl (hash: euij2ENkvHqkhC3qia9jO8H0uc/G5oDPVAcSPj0M2EU=)
2: eypU5gakI37ZRxsTjD1X4DoOVfo.roa (hash: hM1K52QM5/jrbLf53wcNduMHGRDz/fwXSTlOlM9cG8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:7d:6c:c0:33:fc:cf:b9:2b:ee:2e:a2:ee:cf:78:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Validity
Not Before: Oct 23 02:00:58 2026 GMT
Not After : Oct 24 02:00:58 2026 GMT
Subject: CN=52a9496316ba72df3b31e1e7908c350108a3fcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:d9:5b:70:1e:d0:f3:f7:6d:46:0b:e7:9b:
50:6a:26:2f:bf:08:cc:d2:fc:c0:fe:c7:5b:59:d4:
40:d0:19:da:a2:ec:da:e7:53:82:ce:93:9f:71:48:
7e:d6:05:d2:94:c0:bb:9f:f7:1f:fe:18:dd:bd:32:
c4:84:c4:52:95:3a:13:28:37:11:b1:6d:1c:0e:df:
a1:cc:2a:dd:58:f5:38:a7:40:50:15:e2:bc:9f:30:
70:9f:b6:4e:e3:4e:16:1a:ba:81:f5:44:fc:aa:bc:
cf:29:0b:f2:b5:f5:d8:8d:6e:52:07:64:3d:82:1d:
75:04:2b:4d:48:39:af:70:2c:bc:bb:27:be:f0:03:
82:98:ae:54:0e:d0:a2:a4:92:2b:84:84:06:16:61:
05:50:a1:79:52:e2:7d:a9:e8:39:f8:29:24:28:ed:
96:a8:ba:8c:a8:25:8d:e6:12:84:70:79:6c:67:de:
52:91:0f:81:9c:7d:0e:83:7e:5d:b5:bc:c2:64:79:
b9:eb:14:a2:47:d0:28:be:21:b9:87:fa:4c:08:49:
1c:8d:6b:72:e3:68:66:b2:d7:ee:fb:be:20:0c:91:
f6:23:cb:56:81:d6:27:cf:77:a9:be:2a:87:5e:77:
18:db:1a:a4:97:e9:8c:ab:10:72:44:4e:50:d3:98:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A9:49:63:16:BA:72:DF:3B:31:E1:E7:90:8C:35:01:08:A3:FC:FE
X509v3 Authority Key Identifier:
keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f7:6f:16:00:8f:30:df:65:23:68:ba:8e:6f:f3:87:d2:09:
8f:ee:6a:29:e0:4c:64:35:a2:77:b7:59:c9:4b:23:e2:3b:12:
a0:52:37:7a:90:33:57:df:e5:7c:f6:1e:7c:30:f9:36:1e:3c:
b1:47:dd:13:78:bd:3e:c5:45:27:85:a8:da:59:11:1b:4f:0a:
f8:0b:3a:04:6a:fb:65:2e:23:54:bf:bf:1e:97:4e:34:f0:31:
a9:e2:c8:00:36:45:2a:ab:73:81:01:5d:02:89:f8:7a:19:09:
07:76:84:68:7d:9e:14:73:a1:ac:22:39:d5:d8:0e:48:cb:48:
5a:92:b5:7d:45:0a:75:45:bc:92:96:16:b6:6e:4d:9d:0a:42:
df:b5:c7:f2:c0:8f:b7:6c:64:5b:18:a2:3d:70:75:93:d2:b8:
e2:9e:ef:d6:1e:09:8a:26:f6:a3:aa:fc:2f:e9:82:8b:01:4f:
30:04:70:cc:85:15:e9:65:28:e3:f7:84:51:b0:a2:65:db:42:
c0:d1:1c:a0:e6:62:74:24:a4:69:4c:28:6c:f4:71:7d:48:c3:
7c:99:79:36:c6:cc:1a:cc:a4:0a:70:8d:1b:2b:88:f6:3a:bc:
4b:0d:a4:c6:dc:8d:4c:06:f8:6f:04:7e:90:3c:51:ba:38:64:
51:78:69:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 09:53:41 2026 by rpki-client