Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json)
Hash identifier: RG8q3T2jm4BQhdx/Ja0mBdw87yAgquo3MXXKOnotrYY=
Subject key identifier: 3D:88:2B:22:D9:C5:9D:F3:46:99:BE:40:0D:0F:59:0A:CC:C2:10:D4
Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Certificate serial: 01A089E7C8197F9D09FBFD6029958AB94A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 06:01:03 +0000
Manifest this update: Thu 10 Sep 2026 06:01:03 +0000
Manifest next update: Fri 11 Sep 2026 06:01:03 +0000
Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: Ub4RY4yj6/vj60Q1TY9id6GYwH+tb8OgVoyMirFh2Wk=)
2: m-OH61lf9VVgWjii0PINezzjttE.roa (hash: 2GsJyhthbzFVpryryMCfZ+0hcAAlxYfWmqigOWWbj9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:c8:19:7f:9d:09:fb:fd:60:29:95:8a:b9:4a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Validity
Not Before: Sep 10 06:01:03 2026 GMT
Not After : Sep 11 06:01:03 2026 GMT
Subject: CN=3d882b22d9c59df34699be400d0f590accc210d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e4:4b:eb:15:22:c0:5b:b2:49:6f:18:00:cf:
b7:6a:8e:64:b1:91:c2:b6:ab:7e:a0:ac:02:04:f8:
70:58:84:62:7a:7a:43:82:f1:51:f2:6f:9c:0e:9e:
90:41:de:69:5e:0f:00:75:a5:25:73:05:05:fe:e4:
f8:5d:97:20:cd:39:15:49:f2:6e:53:31:63:a6:00:
f4:a6:e0:19:86:87:1d:ed:42:69:c2:24:f4:7c:5d:
8b:c9:ad:94:32:d9:c1:eb:ce:92:ca:7e:16:2c:4d:
12:91:72:37:52:d3:5f:7a:91:c8:ad:33:38:fa:60:
fe:9d:88:d5:5a:09:ce:4c:3e:9a:b0:56:61:6f:19:
f6:f9:33:fb:12:d4:75:9f:3a:79:6d:69:67:bf:6a:
fa:00:02:f7:3c:0c:4b:2d:03:10:a5:48:5c:ac:2e:
50:55:93:4c:b3:a8:08:2a:a6:22:db:f1:8e:c3:5a:
e4:a2:16:e7:68:8f:0e:52:e3:6f:7a:ee:e1:b8:29:
76:da:26:18:45:81:5a:6c:89:d3:f3:64:03:ab:36:
d9:a3:e1:1f:20:d0:63:e1:94:d6:39:b2:0e:57:e3:
4b:3d:26:2e:5b:e2:33:4b:50:56:40:d9:f2:57:af:
a6:2f:e1:7e:b0:d2:d9:c5:d6:19:3f:9d:4b:f8:99:
09:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:88:2B:22:D9:C5:9D:F3:46:99:BE:40:0D:0F:59:0A:CC:C2:10:D4
X509v3 Authority Key Identifier:
keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a7:d9:02:ca:f6:6c:86:ab:b8:45:eb:59:b7:1b:87:77:bd:
a8:12:6f:7e:ad:c4:67:80:6c:ec:d0:4c:d3:22:9b:53:9a:23:
bc:88:b2:68:2f:a1:cc:02:8b:1d:86:99:f6:c0:4f:22:66:e2:
30:e0:45:19:d2:51:df:3c:9e:15:d6:25:11:5d:d9:c4:4a:a0:
05:42:43:ee:da:0a:2d:b6:a1:39:b7:f9:71:1d:92:31:8b:0c:
fb:8b:a8:b8:a5:1b:7b:70:2c:74:81:57:76:5b:fb:66:a8:f6:
12:8a:ec:5a:66:8f:fa:13:0e:2b:ad:12:97:be:00:f3:75:cc:
16:43:9f:f7:22:80:9a:51:36:1b:22:48:51:98:c3:45:56:0d:
c1:83:2a:8f:17:ad:87:1e:c6:c6:71:b9:79:58:9a:fa:0c:b0:
d8:ac:80:84:f0:23:4d:3c:cc:bb:76:49:4d:c0:8d:ca:b1:20:
72:e4:64:43:93:88:c0:9b:d0:f5:5d:67:dd:bf:d0:6b:3a:0b:
8d:cf:f9:79:95:9a:43:46:eb:71:5b:2b:fb:1d:fd:13:2d:ab:
08:87:d5:15:7c:8b:2b:38:80:b5:45:1b:d4:ae:66:7d:45:d7:
00:f3:30:fb:3e:dc:84:ad:36:96:e9:ad:97:a0:97:25:08:0b:
3b:72:98:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:33:38 2026 by rpki-client