Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
File: 0kSCMx_jdh3lOpm9N8j9am-foAc.mft (raw, json)
Hash identifier: 2EBlMPH05VW3h3tvOCWjbBa4vaWiYSeG38McH1pDttE=
Subject key identifier: F8:77:42:50:AA:69:43:DE:94:23:F1:B5:C0:9D:FC:5D:0B:D7:7D:88
Authority key identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
Certificate issuer: /CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Certificate serial: 019FA03AE6EF175BE2573031BB19BEA00138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
Manifest number: 0401
Signing time: Sun 26 Jul 2026 21:00:42 +0000
Manifest this update: Sun 26 Jul 2026 21:00:42 +0000
Manifest next update: Mon 27 Jul 2026 21:00:42 +0000
Files and hashes: 1: 0kSCMx_jdh3lOpm9N8j9am-foAc.crl (hash: TYyUMw4N5TqqlpkXq1/8s+FB4HegzELCHlv90Jhl4z8=)
2: iEJQwLdxS0IxuOaEeOzSHydGpSo.roa (hash: Xj6y/UERT3eVvhXQlqkmNoZn9cVGobnGl6x9D/dBts8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:e6:ef:17:5b:e2:57:30:31:bb:19:be:a0:01:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Validity
Not Before: Jul 26 21:00:42 2026 GMT
Not After : Jul 27 21:00:42 2026 GMT
Subject: CN=f8774250aa6943de9423f1b5c09dfc5d0bd77d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:23:b2:a5:02:1d:4d:99:f6:0f:33:9b:44:
e8:05:50:72:94:e6:de:f9:c2:5a:8e:b0:18:c3:5b:
91:27:72:2d:ea:14:16:55:45:fa:d1:16:21:a1:d7:
6d:18:d1:8b:c1:5f:ff:6b:f8:8d:4d:e0:93:88:bc:
70:4e:1c:af:d3:11:0a:73:0a:d0:e7:8d:a9:77:c4:
3e:93:09:6f:f1:31:88:b4:33:9f:82:80:ba:b0:28:
34:25:a8:c2:1e:ec:07:1c:d0:d0:05:0a:35:aa:6f:
61:aa:de:a0:f1:5a:b4:e4:86:b9:ce:5e:b6:4d:f9:
a2:65:55:67:43:ec:8e:28:38:0a:49:fc:5a:8a:a9:
8c:44:3f:99:0c:2e:4c:8e:18:e8:fe:72:26:dc:06:
c3:7f:be:1d:40:0f:d3:7d:17:e0:64:06:66:4e:03:
b2:84:57:e6:84:4c:f3:28:35:44:e3:de:de:5d:47:
bd:f2:6a:d1:ba:85:35:09:56:1f:94:b8:24:04:df:
1f:b5:09:71:7f:9e:8d:e2:7b:61:69:8f:a5:9a:e2:
f7:69:76:40:99:f5:30:d6:52:88:39:9e:38:6b:29:
f0:ca:9c:29:fc:b0:00:d8:70:b4:26:40:10:5e:00:
bb:0b:7b:f6:a1:80:59:fc:93:ee:f1:1c:c7:6c:4a:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:77:42:50:AA:69:43:DE:94:23:F1:B5:C0:9D:FC:5D:0B:D7:7D:88
X509v3 Authority Key Identifier:
keyid:D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1a:ad:83:0e:19:91:2a:aa:4d:e6:ae:93:5d:19:11:cb:67:
9a:89:91:be:31:3a:2a:ef:82:64:1a:3b:5d:47:73:62:3e:be:
ba:a4:c9:03:5e:af:d0:53:9c:ff:11:40:06:5c:bf:93:78:bc:
a1:1d:0c:2c:f7:86:35:8e:37:a5:ed:34:fb:1d:96:db:e2:11:
50:4f:2a:48:a5:35:96:0f:db:e5:a6:58:be:45:a6:b2:76:f5:
66:ce:74:ac:90:9a:d6:bb:e3:75:7d:f2:ce:c9:7d:09:e1:12:
7d:4e:62:38:d2:3c:87:51:71:60:29:8e:3b:63:14:28:0e:fb:
67:48:8c:93:90:b2:3c:a8:c3:29:88:12:a9:f0:e2:b2:d3:37:
90:df:f9:1a:bf:89:db:49:75:ec:57:03:3c:fc:47:e2:a0:78:
8b:97:04:5b:23:07:4f:cd:e6:61:97:d2:14:bf:43:86:fc:a2:
88:66:15:3e:16:c2:ba:36:d8:fb:0a:d4:fe:f8:90:07:1c:ae:
54:1f:99:5a:5f:60:f6:e6:be:8f:36:81:6b:88:2e:14:34:14:
61:4a:22:86:a8:3e:6b:d2:aa:e2:8a:32:92:05:ab:6e:64:8e:
53:32:67:b6:9e:96:75:2b:0f:e6:3c:3e:55:f3:73:38:b0:43:
50:6f:81:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:15:12 2026 by rpki-client