Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: Dvnh5wd2yhau9sJyISPFSJnHEY4VXPM2xJ/HmbXi9Jc=
Subject key identifier: 5F:83:EC:CA:98:21:CF:08:BC:8F:87:C0:22:CA:90:78:06:96:18:96
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 01A17CCF1CC8267644DE00EDC35CB740CFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 1A56
Signing time: Tue 27 Oct 2026 10:01:50 +0000
Manifest this update: Tue 27 Oct 2026 10:01:50 +0000
Manifest next update: Wed 28 Oct 2026 10:01:50 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: PvRGY9WkWXFzIqzSlW9WajPv8aCibKiKdMbvCYxIHH0=)
2: MqEYcGP28yZryUtdD_3wTNGTAVc.roa (hash: p6r4IvQhkyRHVWZ8dRkzEjBjRhq65iPcj75XjeJcHaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:cf:1c:c8:26:76:44:de:00:ed:c3:5c:b7:40:cf:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Oct 27 10:01:50 2026 GMT
Not After : Oct 28 10:01:50 2026 GMT
Subject: CN=5f83ecca9821cf08bc8f87c022ca907806961896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:8f:29:3f:5c:04:a3:a8:9c:64:3f:9a:ad:
2a:6d:37:04:7a:8e:b2:40:c4:35:0c:af:cc:66:1d:
7d:20:d5:04:34:63:fb:7a:b9:0b:26:45:70:da:dd:
c4:17:ad:03:a1:7a:89:28:ad:63:62:da:9b:ae:b8:
f4:26:73:25:0c:5c:3f:b5:57:eb:ba:6f:6f:87:f0:
f7:98:09:45:2f:b7:7f:95:68:60:e0:93:18:e9:67:
1b:90:98:63:53:78:d8:72:64:3e:6f:2e:c7:6f:10:
b6:a7:69:1d:4c:de:fb:68:3c:c8:16:c8:47:b6:d4:
fa:37:46:68:64:7c:59:4d:65:af:c1:37:d5:ca:98:
c3:07:61:95:9a:b2:eb:15:38:27:17:98:97:55:c4:
8b:de:96:81:54:db:78:4d:eb:c6:3a:3f:29:5b:df:
06:df:2e:85:93:3b:30:ee:28:13:d7:65:3e:21:7b:
dd:5f:30:3a:73:f4:88:a0:43:12:34:87:be:ed:3f:
a0:ad:96:1c:f9:2f:3e:f8:33:ce:94:5f:b4:bf:61:
e3:74:7a:92:11:33:ce:0f:4c:dd:71:21:12:a8:a2:
05:7f:cf:61:b7:35:cf:b9:29:8d:96:89:62:02:86:
72:fc:a5:a2:1d:0a:ac:63:40:98:e9:53:ae:a3:5b:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:83:EC:CA:98:21:CF:08:BC:8F:87:C0:22:CA:90:78:06:96:18:96
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ad:00:2d:2f:1d:b3:e1:0a:30:71:60:05:7a:a9:c4:cb:c0:
b0:0f:bf:c7:22:0b:12:44:92:f8:c9:34:1b:54:f8:91:73:88:
34:31:ad:99:13:25:71:c1:c3:24:d7:2b:19:c3:c4:ee:04:b0:
98:7d:ce:eb:5d:6c:5d:86:a9:bf:c3:f3:4d:db:94:31:b2:19:
a7:f8:05:7c:63:41:76:85:45:c4:ff:38:21:fe:a3:00:48:ff:
ea:9e:e3:fa:2a:d5:73:f6:1a:80:ba:d0:3b:32:15:0c:45:25:
8a:e7:c1:1e:11:f1:94:68:bd:bd:6a:00:e9:6f:37:38:d6:2d:
ba:3e:4b:ad:a4:d5:98:2d:db:40:7d:2f:e7:21:99:25:f7:b7:
6d:ed:d8:42:46:09:1b:93:9d:2c:e2:c6:df:99:15:7c:6a:5a:
14:ad:79:7b:69:9f:9d:48:95:f6:ae:1c:2e:31:d9:c6:f1:2f:
aa:2b:6a:01:40:a1:a1:e3:27:28:b6:8b:a3:ea:68:40:2a:70:
d3:e9:2a:7a:db:22:6e:c9:2f:e1:bb:7e:29:65:74:5b:c3:ef:
9b:3d:ba:f8:1c:ef:52:02:a4:f6:a6:d6:cd:5c:63:1d:c8:ed:
81:60:4e:b8:8d:45:e3:5a:49:c6:af:1e:97:fa:ae:17:a0:52:
97:47:ad:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:38:48 2026 by rpki-client