Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
File: 0kSCMx_jdh3lOpm9N8j9am-foAc.mft (raw, json)
Hash identifier: qJRJCKIyeL/kwiJGWq6OBGG4019MNtxxwVqvpVouqQo=
Subject key identifier: 57:31:AD:42:9B:E1:B0:88:A1:69:15:D1:84:BA:2B:A4:4A:76:D0:A0
Authority key identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
Certificate issuer: /CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Certificate serial: 019EB87CC0FFD9AE805AE99028F00BB67FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
Manifest number: 0389
Signing time: Thu 11 Jun 2026 21:00:43 +0000
Manifest this update: Thu 11 Jun 2026 21:00:43 +0000
Manifest next update: Fri 12 Jun 2026 21:00:43 +0000
Files and hashes: 1: 0kSCMx_jdh3lOpm9N8j9am-foAc.crl (hash: vq9a6TLIy2Rl928ErRgeqi7gmfG4AcG6lo5c7y91HLI=)
2: iEJQwLdxS0IxuOaEeOzSHydGpSo.roa (hash: Xj6y/UERT3eVvhXQlqkmNoZn9cVGobnGl6x9D/dBts8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:c0:ff:d9:ae:80:5a:e9:90:28:f0:0b:b6:7f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007
Validity
Not Before: Jun 11 21:00:43 2026 GMT
Not After : Jun 12 21:00:43 2026 GMT
Subject: CN=5731ad429be1b088a16915d184ba2ba44a76d0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:36:64:19:d3:78:e7:f0:6c:1f:07:f8:57:
a9:3a:47:39:2a:0c:b3:73:b7:14:19:12:80:05:3a:
e3:e4:73:27:47:f3:d8:ff:50:8a:b8:c8:e0:36:0f:
49:41:48:de:3e:f8:dc:73:93:a9:2f:07:d5:c0:4c:
94:c8:30:3b:5e:30:a4:b1:d1:88:8f:6b:97:7e:74:
e7:da:fd:1c:13:a0:90:70:dc:a5:1e:ab:4e:e4:ab:
2a:c7:ae:ca:f5:e4:bb:80:63:21:1e:de:87:df:40:
75:51:05:dc:ff:1d:e0:d9:7b:c7:69:d2:a9:0e:4c:
b3:10:d9:2c:02:8b:c4:7d:5f:94:28:4a:db:c1:e6:
5d:3c:57:a0:18:04:87:53:f4:6b:dd:b9:6d:c2:1e:
7b:bb:e7:f9:d7:ab:09:13:61:1b:d8:48:1d:85:64:
0f:dd:4a:c5:46:05:aa:42:0b:e5:16:33:9c:e2:ca:
e5:19:11:38:e1:34:3a:b3:6c:40:52:e9:0a:ea:92:
2d:f3:ef:47:38:fe:40:0a:80:b0:6c:de:08:18:95:
86:9c:33:25:20:43:d3:93:7b:c3:f8:9d:ab:d3:4d:
ed:86:46:1d:ad:de:13:03:28:57:0c:b0:05:7e:99:
04:4b:67:33:62:7a:eb:6b:e7:93:c8:4e:c6:5a:68:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:31:AD:42:9B:E1:B0:88:A1:69:15:D1:84:BA:2B:A4:4A:76:D0:A0
X509v3 Authority Key Identifier:
keyid:D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0e:69:4f:c7:d3:7f:73:0e:e6:44:e1:54:22:b5:e0:cc:69:
92:18:1a:d9:b8:1a:cd:48:74:23:ae:8d:ac:a2:88:73:1c:44:
e1:11:fb:0b:f8:a2:3f:d9:fb:6d:c9:7a:ff:5b:2d:4b:7f:b6:
3a:23:20:43:d3:5e:8e:0f:5c:a4:43:1a:ca:9b:9a:fc:96:73:
cb:0f:f9:b3:68:1f:57:49:f6:de:cd:9e:06:b4:52:44:e3:09:
90:e5:70:f7:a6:04:94:54:36:d2:90:de:2f:b0:e6:9e:a0:e4:
b7:b4:f2:68:79:7d:b6:ca:b2:49:a7:24:37:8b:a1:5f:ad:30:
5d:c6:9e:28:d4:56:8a:65:80:94:bf:6d:b3:11:97:19:e9:18:
4e:62:db:09:77:db:f8:fa:94:be:8d:5f:8d:25:85:37:ae:b7:
e5:72:97:8f:5d:3d:0d:50:1e:f2:36:0f:d6:b5:52:f4:11:07:
d8:91:21:d8:b1:2f:2c:2a:78:ff:d4:91:68:ce:d5:eb:be:50:
9e:15:20:23:17:7e:3c:f8:5d:a6:95:a4:1f:04:d5:31:6f:39:
79:fa:ce:4c:ed:02:2a:90:80:4d:a4:53:05:ca:56:8e:55:96:
e1:31:1e:8d:84:62:61:85:d3:c9:b1:f0:bd:60:2a:4b:b7:ab:
e8:dc:31:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:54:07 2026 by rpki-client