Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
File: 0KpKGno60j-q4q6un6YZTwISgSk.mft (raw, json)
Hash identifier: qHQQpRSdpfSxcujZVzw74dk1VAijCbEn9c2VOmeCv4M=
Subject key identifier: ED:43:AB:29:D1:1E:10:27:0C:9A:12:CE:2D:C5:43:B0:3C:2B:2B:A7
Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
Certificate issuer: /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Certificate serial: 01A179CD25C2CCF943880D314A666B223977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
Manifest number: 06DF
Signing time: Mon 26 Oct 2026 20:00:49 +0000
Manifest this update: Mon 26 Oct 2026 20:00:49 +0000
Manifest next update: Tue 27 Oct 2026 20:00:49 +0000
Files and hashes: 1: 0KpKGno60j-q4q6un6YZTwISgSk.crl (hash: nnE2WQcir3a6aOrioXDCW9nHrSNtE5dcmDLfwf+NLNE=)
2: 0r4BvsnJAN2Pz40prPoUEy6WvzU.roa (hash: AamdQ0j/vjkbuVtweF8p9JDSZ2i84cCde/Gwvcvf218=)
3: 5bf5CwJmQOVXufa2Bw359AZEO9s.roa (hash: vE+kqAcM+EoC006Mvnftc/u8n7NMMiAT3ni4cuysV1M=)
4: epNTET6BvQ6zhUMoLdSPzHjbIWE.roa (hash: qxvi55+BDN0SED0a/Y9HgRfeWegI7IGQUucmOAr178Y=)
5: ncOZbEMiJNqjiscavpDBkZeriIg.roa (hash: KP4yleOLVWJhJdzAKqGM+QLwSbZEncnkoAH1TNTBzJs=)
6: oS9h716veeRY1y9kuFn-MIGUEBg.roa (hash: KS+2BIj/1oDD8HcECr/uPYIsA+2SUgLQkBkCEiNQnZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cd:25:c2:cc:f9:43:88:0d:31:4a:66:6b:22:39:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Validity
Not Before: Oct 26 20:00:49 2026 GMT
Not After : Oct 27 20:00:49 2026 GMT
Subject: CN=ed43ab29d11e10270c9a12ce2dc543b03c2b2ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:20:af:a3:48:8d:63:55:87:14:1c:d9:e5:e7:
29:d8:bd:a7:41:3e:49:d8:a8:15:a8:86:18:64:bf:
ae:64:88:6f:e6:3d:35:7f:da:ed:ef:df:3d:4c:19:
3d:a4:99:1e:ea:b1:22:4b:31:5f:ba:ac:60:47:34:
b6:50:60:e1:da:90:fd:d4:2d:24:29:2e:07:1d:7a:
4c:bf:1b:66:92:34:27:00:ff:1b:df:b2:9b:07:42:
66:71:99:9e:c6:a6:d5:76:2d:75:3f:78:96:92:c3:
96:cd:6b:da:38:82:d7:de:f6:bb:ff:a2:2d:ab:7e:
74:5b:f1:9d:d4:ac:63:52:8a:1a:40:9b:9b:78:c3:
db:0d:0c:60:63:0a:d1:02:10:6b:e5:f6:90:79:78:
4a:21:2e:45:75:c5:7e:d4:d9:a7:ad:02:d1:aa:7b:
ea:4e:ba:97:0a:a1:30:61:71:42:3a:84:60:41:05:
fc:ae:d4:9f:09:7a:3f:93:5a:52:bf:24:5d:55:94:
48:98:e5:9b:55:90:33:0e:05:41:15:89:8f:2d:30:
93:7d:4c:0a:06:b6:de:f3:8a:09:2e:f1:4d:c7:28:
ce:55:02:b0:05:e8:ec:27:9c:f8:aa:18:43:24:ce:
20:82:2f:84:7a:3a:fc:c7:07:20:50:91:41:6e:8f:
a6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:43:AB:29:D1:1E:10:27:0C:9A:12:CE:2D:C5:43:B0:3C:2B:2B:A7
X509v3 Authority Key Identifier:
keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:cb:be:7b:8e:59:31:7a:3a:e5:82:55:67:1b:a2:fb:33:a4:
d4:95:c5:e2:ad:15:96:4d:dc:80:7f:57:87:3e:a6:20:38:d7:
31:4f:0a:60:ee:7b:00:fd:b8:64:ad:bf:59:d9:e5:d2:1f:78:
86:0b:56:b0:ed:0f:01:bb:ad:bd:c1:70:eb:e6:83:c2:65:1c:
ec:10:18:c1:40:d7:2b:6a:ee:80:09:50:e1:2f:bf:19:d4:37:
7d:42:2e:3f:b9:72:01:4f:0c:0d:a3:d2:fb:54:03:e3:f3:06:
67:7c:89:dc:43:19:06:b6:dc:1d:b4:83:d3:e3:31:13:e7:d5:
72:54:92:31:1d:f2:7d:9a:9c:15:57:fd:d9:33:9b:41:ad:a4:
a7:d0:66:fc:f0:ab:54:1e:40:9f:d9:fd:95:34:1f:9f:31:3b:
05:bc:05:e1:15:09:59:af:58:5f:12:ed:ac:61:76:0b:31:f8:
f6:9d:0f:41:bf:4c:14:57:32:50:68:40:aa:02:bb:b9:b0:e4:
e6:d5:41:ee:59:85:5e:ea:86:fd:06:93:4e:0f:59:e6:d0:7a:
b7:5f:cb:49:9c:63:4e:ba:52:f5:cb:a7:70:87:15:53:48:ac:
98:17:cb:66:30:47:20:ce:01:98:ee:55:9d:21:38:e4:b3:6f:
10:fd:e4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:46:36 2026 by rpki-client