Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier: JvbASXygMtfWgyuI3gXqa2RCesH7oQ8CezzmOEL5XE0=
Subject key identifier: 7B:8C:19:1A:54:A6:7F:62:26:76:09:EB:A8:7B:3C:EF:E6:53:7A:7A
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 01A0021411A0590A6E8002B80E9F3C698ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 21:01:04 +0000
Manifest this update: Fri 14 Aug 2026 21:01:04 +0000
Manifest next update: Sat 15 Aug 2026 21:01:04 +0000
Files and hashes: 1: f1xxhacm7jnvbldN6spjT65Vwn8.roa (hash: rqkDD8hNvJtlHHJ4fiGoQKM/oQxgw1TdOWMEVdkAPbI=)
2: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: 57BGFphxY8JrX8IgFmu+zGKXwZusckzten1zqH1frew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:11:a0:59:0a:6e:80:02:b8:0e:9f:3c:69:8a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: Aug 14 21:01:04 2026 GMT
Not After : Aug 15 21:01:04 2026 GMT
Subject: CN=7b8c191a54a67f62267609eba87b3cefe6537a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:66:a6:a3:ac:dc:68:20:6d:e3:08:36:ec:
dc:70:bd:c1:36:ca:b3:56:81:d0:2d:85:40:27:10:
5d:d2:e8:69:f5:fa:3c:bb:36:6f:49:1f:24:d1:1b:
0f:ef:69:cf:96:75:92:df:54:a7:af:8e:4c:ca:08:
ec:3b:a5:75:91:71:67:c3:4a:37:7b:91:8a:bc:2c:
18:a9:49:65:6d:f1:04:fa:94:21:f2:71:6a:cb:fd:
04:3f:bc:5d:03:c2:08:16:ae:3f:9f:5e:b2:63:d3:
a1:cd:ea:ca:ea:f8:96:c1:5d:1c:5e:9d:e3:02:82:
05:21:74:4e:d9:8e:6a:9b:85:64:bf:33:ee:0d:99:
e1:2b:c8:9a:63:d6:ca:1c:f7:ab:65:dc:81:33:b2:
4d:7e:e6:ce:14:ea:81:f9:6c:01:f2:b0:3a:12:55:
37:f1:06:6c:6d:7c:89:7b:68:ce:3f:c1:8e:49:ca:
7d:7f:b5:d7:c4:f3:32:0b:6d:1d:55:49:4e:74:58:
f4:fc:2a:cf:8b:9e:ad:ca:44:ba:6e:e8:16:86:cc:
46:81:f1:39:4e:f0:15:2c:59:ec:f9:10:43:52:42:
09:8d:7f:ec:7a:9b:4f:86:5a:f1:46:ad:47:33:1a:
30:21:e6:15:50:93:c8:bb:09:49:4d:d0:2e:07:fb:
af:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8C:19:1A:54:A6:7F:62:26:76:09:EB:A8:7B:3C:EF:E6:53:7A:7A
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:85:8c:56:1a:9f:8d:bd:f1:11:ac:d9:a2:69:70:44:9d:1e:
92:ec:0c:94:c1:97:77:f1:97:f0:67:03:c5:e4:9c:75:b7:6b:
03:cc:5b:ce:87:ef:ca:3f:bc:63:66:87:3a:e1:5e:2f:a1:6e:
b0:5c:c3:31:c1:e6:15:98:2a:d7:7d:c7:c5:d0:0f:3e:ca:7e:
8f:8e:e6:85:c6:b0:ae:c2:a8:49:83:f2:67:f7:4f:11:78:b2:
2d:cf:c0:bf:f9:1d:f2:50:a0:eb:ea:e7:60:af:06:2f:1b:e5:
96:22:f1:97:04:ef:7c:e1:07:1a:27:2e:22:ea:7f:76:cb:16:
37:af:5b:9c:4b:c4:14:03:33:75:d3:8c:f4:b8:4e:bf:05:32:
7d:54:d0:d1:eb:b5:5b:f0:9b:fc:11:51:a4:1a:31:eb:22:80:
06:26:38:f5:67:77:f8:c8:78:78:2a:ff:75:53:21:3f:e1:d9:
69:65:42:55:df:1e:41:45:89:e0:0d:fb:98:83:f0:1b:b4:8a:
b0:5f:0f:ef:e8:ea:f2:0a:b2:39:fb:c5:b1:07:c0:54:bf:14:
67:84:08:57:33:38:4a:dd:17:71:db:89:94:e2:44:56:25:50:
11:0e:83:a3:69:78:6b:2b:b9:2e:74:29:9e:77:b7:23:1c:cd:
54:8c:28:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:07:41 2026 by rpki-client