Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
File: 0kSCMx_jdh3lOpm9N8j9am-foAc.mft (raw, json)
Hash identifier: NkiTsMiD+bHBVeIBc4vJRw/Gvn40dJeSFOTCwMeH9xw=
Subject key identifier: 5E:71:9D:01:01:94:A6:93:FD:89:D4:61:1A:4A:E1:E9:F4:3D:80:C3
Authority key identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
Certificate issuer: /CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Certificate serial: 01A186E3F05151659BDC614C94ABE14A57B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
Manifest number: 04FD
Signing time: Thu 29 Oct 2026 09:00:47 +0000
Manifest this update: Thu 29 Oct 2026 09:00:47 +0000
Manifest next update: Fri 30 Oct 2026 09:00:47 +0000
Files and hashes: 1: 0kSCMx_jdh3lOpm9N8j9am-foAc.crl (hash: osfiz2+vqn6DN+s6eFO6IK9+rRPU4LDfKzMQcGBuEJY=)
2: iEJQwLdxS0IxuOaEeOzSHydGpSo.roa (hash: Xj6y/UERT3eVvhXQlqkmNoZn9cVGobnGl6x9D/dBts8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e3:f0:51:51:65:9b:dc:61:4c:94:ab:e1:4a:57:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Validity
Not Before: Oct 29 09:00:47 2026 GMT
Not After : Oct 30 09:00:47 2026 GMT
Subject: CN=5e719d010194a693fd89d4611a4ae1e9f43d80c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:b6:42:71:0f:6c:78:05:73:cd:6d:6e:2c:
31:1c:68:48:db:5a:e6:55:05:b8:c7:bb:a1:9f:64:
53:d6:a7:07:d6:7a:1c:5f:cd:87:a0:30:39:d8:fc:
64:79:de:fa:78:5c:2c:50:78:98:54:98:a8:a3:58:
f3:c5:96:d4:bb:11:9d:ff:49:67:5d:01:b0:fd:f2:
55:e6:e8:5c:17:6a:49:87:66:8d:4b:1b:4f:e7:69:
6c:95:b2:15:d6:40:68:5b:cd:8f:b2:50:a7:31:94:
c2:9b:45:68:99:78:57:fb:9e:a8:51:d1:00:54:1f:
41:b7:73:0e:e7:1c:43:b6:a7:1c:5b:57:86:2d:11:
97:3d:57:d3:93:a9:35:b2:ab:f3:f2:36:8e:13:bc:
7c:fc:f3:0a:84:70:50:c8:03:44:d1:9d:0f:76:8e:
b0:bc:75:41:27:00:cd:1a:fe:4b:f1:23:25:f3:7d:
70:d2:a3:59:a0:1d:7b:f1:d3:57:82:d8:73:61:9c:
f1:25:47:01:6c:1a:a3:ca:2b:93:3b:15:53:c4:a2:
27:05:55:4f:47:76:c8:6e:d0:62:e4:fb:83:f5:f3:
1b:c9:9f:11:0d:15:99:d0:91:d8:39:61:a9:58:e5:
06:96:0d:7a:ef:55:93:e8:2c:35:e4:99:db:51:96:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:71:9D:01:01:94:A6:93:FD:89:D4:61:1A:4A:E1:E9:F4:3D:80:C3
X509v3 Authority Key Identifier:
keyid:D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:da:3a:b1:52:bb:90:69:a9:14:c7:9b:00:fe:cc:06:39:93:
b1:cf:b1:12:1a:da:40:7d:1c:2a:a0:d3:d7:23:f2:8e:a2:57:
50:f3:b6:ca:d3:9e:66:1a:49:9f:b5:73:c7:01:02:52:d3:8a:
ce:c0:8b:4d:e9:b4:20:3a:59:bf:fb:15:63:b6:5c:0b:ce:88:
9b:76:e0:ac:f6:9e:97:8a:2e:b8:76:3a:96:5a:6b:c1:c5:20:
8e:04:5d:3e:a1:18:b3:45:96:f8:52:4e:0e:7b:49:b4:35:98:
61:9f:e3:f7:03:78:85:18:a8:f3:f3:25:6b:23:60:78:27:64:
b7:8f:b1:22:c3:29:c5:24:d1:9f:e2:76:af:bb:28:63:fe:c0:
f7:b1:94:bb:66:0e:d1:0d:17:48:6b:17:07:7f:b0:33:84:37:
ca:5d:4f:59:cb:5a:5b:85:de:21:aa:d3:f3:8e:0d:87:61:d2:
63:4e:a8:85:7b:b0:83:e6:c9:eb:a4:03:ff:32:ef:2e:d6:da:
c9:b0:f0:5f:09:a6:07:4f:0d:74:0e:81:c0:8a:aa:19:f7:b9:
04:39:81:30:0d:0c:9a:d4:2d:a5:fc:4d:8e:7a:7a:6a:42:65:
68:e2:fd:17:1e:e9:0b:eb:84:58:cf:dc:f2:f3:20:64:72:22:
53:f6:e2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:52:17 2026 by rpki-client