Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
File: 0kSCMx_jdh3lOpm9N8j9am-foAc.mft (raw, json)
Hash identifier: g+43EjpOYESWVKxwokN9SrosyBOzWbCfWMCFe5jRzWE=
Subject key identifier: FF:5B:4E:D8:F0:C6:4A:F5:CC:58:A4:8D:72:F5:82:C4:8C:5E:1B:16
Authority key identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
Certificate issuer: /CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Certificate serial: 01A08DC4E650C360F016E20B3F246A4101C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
Manifest number: 047C
Signing time: Fri 11 Sep 2026 00:01:26 +0000
Manifest this update: Fri 11 Sep 2026 00:01:26 +0000
Manifest next update: Sat 12 Sep 2026 00:01:26 +0000
Files and hashes: 1: 0kSCMx_jdh3lOpm9N8j9am-foAc.crl (hash: 0pRjFE3MMYLLa93yHFDnMYl7IDTc+RDWZ8yvSP1Moa0=)
2: iEJQwLdxS0IxuOaEeOzSHydGpSo.roa (hash: Xj6y/UERT3eVvhXQlqkmNoZn9cVGobnGl6x9D/dBts8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:e6:50:c3:60:f0:16:e2:0b:3f:24:6a:41:01:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Validity
Not Before: Sep 11 00:01:26 2026 GMT
Not After : Sep 12 00:01:26 2026 GMT
Subject: CN=ff5b4ed8f0c64af5cc58a48d72f582c48c5e1b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:80:99:a4:e6:68:b6:1a:2a:b2:c6:43:6c:c3:
91:8f:b3:bc:20:52:86:5e:4a:87:6c:8b:39:c2:7e:
f7:9e:3a:1c:ff:d8:34:75:8b:b8:39:51:f1:c4:e9:
d1:aa:71:c2:29:f6:69:1a:d7:bb:01:18:58:24:b3:
14:3e:d3:3a:9c:f9:65:50:94:3c:0d:38:9e:82:56:
f8:d9:23:de:71:4c:4f:98:c9:af:87:fb:e5:7a:a7:
05:77:d3:ff:5e:2c:ce:a1:a6:4e:74:3d:ba:e1:44:
9f:2e:ba:a9:06:8f:cc:24:91:db:b6:de:58:6b:3f:
ae:39:e5:c6:a6:3c:05:b5:42:c0:9f:1f:e4:1d:91:
2a:9a:55:6d:b0:a0:2e:c3:12:4e:a5:55:02:4f:b2:
6f:f2:aa:1b:4b:39:75:d1:20:95:c8:e2:f5:ac:fa:
07:69:bf:c3:b1:81:62:a7:af:0c:0e:73:23:3b:62:
96:11:1e:24:ce:ba:94:9d:b7:61:04:4f:34:7e:09:
21:cd:46:68:22:04:d7:2a:41:29:73:bf:6e:85:01:
97:81:98:6c:0e:f3:b4:db:ea:07:3c:9c:76:44:80:
78:a2:c8:3e:a9:6d:97:41:03:ce:c5:7b:74:ff:6f:
14:aa:b6:da:38:70:36:9f:49:9f:09:dc:c8:4a:82:
39:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5B:4E:D8:F0:C6:4A:F5:CC:58:A4:8D:72:F5:82:C4:8C:5E:1B:16
X509v3 Authority Key Identifier:
keyid:D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ed:f8:07:2d:a9:a7:56:3b:51:bc:3e:f9:44:88:34:d8:e5:
9c:59:7f:81:34:24:e2:5d:53:9d:e4:93:86:69:95:24:ae:a9:
ad:e1:d8:10:d0:a5:54:ac:1d:8d:cf:7e:5a:cc:1f:dd:58:2a:
92:c7:b0:b3:7e:73:d3:5d:eb:e1:12:b0:de:6a:0f:d6:f5:50:
e6:fc:ad:d4:5d:22:5d:46:7f:4e:d0:b2:b5:0f:6f:34:8d:73:
ed:50:2a:18:00:ef:56:08:99:00:f6:7f:7b:a1:53:7a:c5:9b:
82:4c:d2:04:20:01:55:10:41:38:31:04:b4:42:56:53:ae:f5:
d6:05:7b:b7:25:d3:9a:5d:f3:83:7a:3b:e9:b9:73:29:db:45:
dc:cc:44:b2:0e:f9:25:b0:37:3b:00:32:db:0b:62:a4:0b:92:
50:49:fa:6d:be:e8:46:23:e7:5e:14:bb:d6:e2:b1:fc:57:06:
f9:b4:40:11:40:1f:5f:3a:0c:cb:57:5c:bc:8e:ea:74:ae:73:
49:59:2a:2c:c3:f9:13:c3:20:72:1f:3d:6e:14:b5:91:d4:42:
ad:2b:27:27:99:17:53:13:e0:35:7c:d2:4f:29:49:25:cc:ad:
2f:25:7c:67:a5:ce:e5:cd:b7:79:86:fc:1f:4f:4c:08:7e:8b:
28:1c:47:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:17:16 2026 by rpki-client