Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.mft
File: 0kLjA3tgiO5t6UhiWWiT5uupT78.mft (raw, json)
Hash identifier: WaazTlrd6Szb1w3ck5fzlCBEyxPtCfVF/smuBwow7HM=
Subject key identifier: 8F:DE:06:B8:62:E6:D0:9B:10:DF:5C:20:5A:F2:86:4B:C2:68:92:45
Authority key identifier: D2:42:E3:03:7B:60:88:EE:6D:E9:48:62:59:68:93:E6:EB:A9:4F:BF
Certificate issuer: /CN=d242e3037b6088ee6de94862596893e6eba94fbf
Certificate serial: 01A0412AA8F1351C9EA5D2C02E6698154278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kLjA3tgiO5t6UhiWWiT5uupT78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:01:49 +0000
Manifest this update: Thu 27 Aug 2026 03:01:49 +0000
Manifest next update: Fri 28 Aug 2026 03:01:49 +0000
Files and hashes: 1: 0kLjA3tgiO5t6UhiWWiT5uupT78.crl (hash: keNJiO+yIRbxNypOOQ2Edx/Hv9SV7FREB/nzfvHogz0=)
2: BeW6fNTmqXgR5pM9jh3vGj3b64A.roa (hash: IkKehMA98jcUqaZ277fk0SXWhXVAaXeBHuf7iTvYGmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kLjA3tgiO5t6UhiWWiT5uupT78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:a8:f1:35:1c:9e:a5:d2:c0:2e:66:98:15:42:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d242e3037b6088ee6de94862596893e6eba94fbf
Validity
Not Before: Aug 27 03:01:49 2026 GMT
Not After : Aug 28 03:01:49 2026 GMT
Subject: CN=8fde06b862e6d09b10df5c205af2864bc2689245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:4e:c3:1d:6f:fb:1b:d0:22:5d:b8:f8:08:
8f:88:70:93:d5:14:77:f8:db:b8:ab:95:e8:40:33:
7a:88:ab:ef:62:e9:00:ad:0c:61:d4:d2:54:7c:5c:
2c:a4:25:9f:fa:12:fe:39:e5:53:a3:12:96:30:38:
13:de:d0:22:fb:1f:5a:4f:49:35:5a:e0:e9:2c:01:
bf:3b:fc:de:eb:f2:98:29:f7:6a:7e:a3:50:87:4e:
e7:a2:65:8b:90:ea:97:76:75:84:df:82:79:50:4e:
ca:8d:2f:dc:e6:3f:31:99:d8:c6:a8:67:3b:e5:09:
5c:94:cc:bc:12:7e:cd:29:6f:07:02:1e:ae:b4:1f:
a3:1f:40:97:8a:f3:bf:df:4a:d1:a7:f3:2e:a1:1f:
47:43:f7:35:90:89:d9:b9:64:f2:cf:05:15:ba:8c:
c5:f2:a4:5c:73:39:30:51:85:55:50:d3:7a:60:77:
e3:30:c9:58:cd:4b:93:ca:41:4c:5e:d3:f1:42:fc:
57:24:b0:2d:9a:a2:2b:03:49:68:d0:e4:40:b3:1b:
d5:b9:0e:4a:fc:cc:0a:c7:90:f6:c6:e5:2e:af:b2:
40:f5:93:0e:62:50:59:92:dd:83:bb:2e:6f:59:22:
10:82:66:24:8e:a8:0a:07:3b:38:c7:2f:62:d9:2b:
fd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DE:06:B8:62:E6:D0:9B:10:DF:5C:20:5A:F2:86:4B:C2:68:92:45
X509v3 Authority Key Identifier:
keyid:D2:42:E3:03:7B:60:88:EE:6D:E9:48:62:59:68:93:E6:EB:A9:4F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kLjA3tgiO5t6UhiWWiT5uupT78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:62:70:e2:8c:c9:aa:d7:8f:92:fc:4c:44:9b:29:43:74:3d:
5d:49:18:42:22:fb:b3:a2:c7:fe:2f:58:f8:2a:b5:91:6e:26:
4b:3a:ce:13:83:81:c0:11:1b:46:dd:49:ae:52:a6:73:1f:0b:
19:0c:ee:df:89:0a:b1:c9:38:ff:7e:2a:64:28:6f:27:54:b7:
4c:9b:2a:df:26:7b:81:36:dc:33:d4:95:f0:72:a9:e0:fc:9f:
9c:d1:2a:53:16:1a:f3:67:05:8e:76:d7:17:e3:eb:98:b2:89:
8e:9e:7e:b2:ab:25:64:98:85:d0:f0:5a:b5:87:94:55:92:4a:
30:87:9f:13:15:20:1a:b8:08:f1:de:63:cd:0f:65:1e:48:3e:
37:6e:d3:fc:de:47:9d:05:f5:29:eb:b4:0b:df:e2:0c:53:70:
a6:50:7a:e5:61:ab:8d:48:38:75:69:38:c7:67:8a:39:a1:e1:
42:b5:51:88:18:c2:9f:5c:e9:f0:27:6e:81:17:51:f0:4a:4f:
f5:49:a4:91:75:0d:93:ae:2c:1b:c6:de:86:8d:9e:9a:14:3a:
7a:8e:50:12:c2:c9:d8:8e:4d:75:3c:a4:cf:7f:e5:f3:fb:bd:
a8:51:32:0d:a6:ca:33:eb:27:43:77:2f:50:98:3f:d2:a2:49:
80:4f:97:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBBKqjxNRyepdLALmaYFUJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNDJlMzAzN2I2MDg4ZWU2ZGU5NDg2MjU5Njg5M2U2ZWJh
OTRmYmYwHhcNMjYwODI3MDMwMTQ5WhcNMjYwODI4MDMwMTQ5WjAzMTEwLwYDVQQD
Eyg4ZmRlMDZiODYyZTZkMDliMTBkZjVjMjA1YWYyODY0YmMyNjg5MjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ1Owx1v+xvQIl24+AiPiHCT1RR3
+Nu4q5XoQDN6iKvvYukArQxh1NJUfFwspCWf+hL+OeVToxKWMDgT3tAi+x9aT0k1
WuDpLAG/O/ze6/KYKfdqfqNQh07nomWLkOqXdnWE34J5UE7KjS/c5j8xmdjGqGc7
5QlclMy8En7NKW8HAh6utB+jH0CXivO/30rRp/MuoR9HQ/c1kInZuWTyzwUVuozF
8qRcczkwUYVVUNN6YHfjMMlYzUuTykFMXtPxQvxXJLAtmqIrA0lo0ORAsxvVuQ5K
/MwKx5D2xuUur7JA9ZMOYlBZkt2Duy5vWSIQgmYkjqgKBzs4xy9i2Sv9ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/eBrhi5tCbEN9cIFryhkvCaJJFMB8GA1UdIwQY
MBaAFNJC4wN7YIjubelIYllok+brqU+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGtMakEzdGdpTzV0NlVoaVdXaVQ1dXVwVDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83ZTk4NjctYzUzNC00NjhjLThkNWUt
ZTRmNjRiMGRlMzZhLzEvMGtMakEzdGdpTzV0NlVoaVdXaVQ1dXVwVDc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC83ZTk4NjctYzUzNC00NjhjLThkNWUtZTRmNjRiMGRlMzZh
LzEvMGtMakEzdGdpTzV0NlVoaVdXaVQ1dXVwVDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmJw4ozJ
qtePkvxMRJspQ3Q9XUkYQiL7s6LH/i9Y+Cq1kW4mSzrOE4OBwBEbRt1JrlKmcx8L
GQzu34kKsck4/34qZChvJ1S3TJsq3yZ7gTbcM9SV8HKp4PyfnNEqUxYa82cFjnbX
F+PrmLKJjp5+sqslZJiF0PBatYeUVZJKMIefExUgGrgI8d5jzQ9lHkg+N27T/N5H
nQX1Keu0C9/iDFNwplB65WGrjUg4dWk4x2eKOaHhQrVRiBjCn1zp8CdugRdR8EpP
9UmkkXUNk64sG8beho2emhQ6eo5QEsLJ2I5NdTykz3/l8/u9qFEyDabKM+snQ3cv
UJg/0qJJgE+XSg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:57:41 2026 by rpki-client