Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
File: 0kSCMx_jdh3lOpm9N8j9am-foAc.mft (raw, json)
Hash identifier: CjZuWbz66N+1mVDjSbev6lvORgB0iNig3+tiC+EbJNE=
Subject key identifier: F5:E4:D3:C8:11:6B:C0:E4:09:0A:3C:52:4C:00:84:B1:51:6B:5B:B6
Authority key identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
Certificate issuer: /CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Certificate serial: 019CE334D4DF084D334D360B62A49288F532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
Manifest number: 0296
Signing time: Thu 12 Mar 2026 18:00:16 +0000
Manifest this update: Thu 12 Mar 2026 18:00:16 +0000
Manifest next update: Fri 13 Mar 2026 18:00:16 +0000
Files and hashes: 1: 0kSCMx_jdh3lOpm9N8j9am-foAc.crl (hash: seTY6kpVZtunCWs6Ai33/iycAmW4kA+Bf/XJGOKvwv4=)
2: iEJQwLdxS0IxuOaEeOzSHydGpSo.roa (hash: Xj6y/UERT3eVvhXQlqkmNoZn9cVGobnGl6x9D/dBts8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:34:d4:df:08:4d:33:4d:36:0b:62:a4:92:88:f5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Validity
Not Before: Mar 12 18:00:16 2026 GMT
Not After : Mar 13 18:00:16 2026 GMT
Subject: CN=f5e4d3c8116bc0e4090a3c524c0084b1516b5bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:fb:51:3b:b1:41:20:71:f2:e5:f8:1e:b2:
81:02:c4:d7:56:f9:a7:e7:da:8e:4b:d8:6e:4a:36:
6a:57:88:04:19:06:62:76:5d:1e:dd:8e:87:84:13:
77:0c:dd:13:7b:39:f0:0a:a3:90:76:b6:19:31:f3:
0c:f9:cd:e7:44:04:57:65:89:8c:c2:8d:d3:5c:39:
21:58:89:f9:61:9c:64:ff:2b:9e:b4:19:8b:5e:14:
df:5e:fd:95:53:27:5e:2a:2e:e7:21:0a:1c:85:b8:
6f:f2:cb:db:c9:04:3f:e2:6b:b2:c0:6c:97:e1:0a:
75:3f:40:ff:cc:ed:ef:a8:99:46:35:ad:72:0f:f8:
99:ef:c8:f5:80:f2:03:15:62:62:a9:ec:63:ab:43:
79:c9:3e:a0:a9:64:82:e4:e3:39:99:5a:2e:60:9b:
4d:db:0a:45:aa:22:05:de:e4:bc:fa:b2:b7:77:da:
8b:b1:3e:bb:43:4b:61:84:9e:16:a5:11:86:c8:76:
d1:15:b3:26:33:2e:56:8c:1c:ec:df:1e:35:c7:30:
65:3b:fb:cd:c9:13:f3:e2:de:7b:4e:60:79:51:f4:
ac:4a:54:23:db:67:8e:27:a9:e4:70:2e:db:57:33:
0e:48:34:f2:2c:07:57:15:f5:61:fe:d5:22:e0:3b:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E4:D3:C8:11:6B:C0:E4:09:0A:3C:52:4C:00:84:B1:51:6B:5B:B6
X509v3 Authority Key Identifier:
keyid:D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ca:3b:fa:ee:a1:0b:d6:21:5f:57:28:61:ee:c3:19:82:e0:
ff:2e:5b:9f:00:ab:c8:6f:4a:69:ab:6b:ea:a3:99:76:b7:7c:
0b:55:ca:69:9a:b2:96:cc:d4:0d:dd:98:2f:65:26:23:1c:ea:
09:2e:76:f9:9a:34:0a:18:d9:82:41:77:c1:ec:fb:c4:93:ee:
5e:01:57:71:a6:e3:46:16:d2:b7:22:ae:c5:9e:38:c6:b7:b7:
78:25:be:cb:cb:f6:dd:35:db:49:81:0e:a5:0a:62:0e:6d:69:
d1:18:13:60:d0:f1:f6:8b:1c:38:f7:3a:5f:aa:1a:e9:a1:3d:
5b:c1:1d:3e:3e:a6:cd:79:c8:a5:70:49:58:ad:05:72:3f:2b:
14:bf:c8:a6:51:2a:fe:25:53:4b:1e:5e:b6:7c:57:4a:14:e6:
1a:3d:0a:b8:1b:3e:7d:90:b8:7c:f2:9c:18:41:51:4d:85:ff:
99:11:3e:12:36:f7:1b:7f:39:e8:ef:35:aa:70:c3:6e:cb:5c:
f8:be:a0:a8:f8:1f:0c:8e:50:f8:50:ad:85:a8:c9:4f:de:a1:
40:bb:7d:6e:44:a4:e2:a0:60:0d:51:b9:95:92:d7:ee:20:90:
0e:f7:24:76:30:44:9c:89:27:d5:43:11:10:dc:f2:09:4f:1a:
b9:e2:8a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:16:35 2026 by rpki-client