Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: UeeEWvaHRBct+Cqk+ErpqhcsgaU6UN6vXpsHL/B2II0=
Subject key identifier: CC:19:6F:8C:F1:4F:A8:D2:62:AB:64:CD:AC:60:01:58:91:8D:AD:B4
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 019CE2C7B533F829203CAB5A329632BAFBEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 17F4
Signing time: Thu 12 Mar 2026 16:01:04 +0000
Manifest this update: Thu 12 Mar 2026 16:01:04 +0000
Manifest next update: Fri 13 Mar 2026 16:01:04 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: aG1FOtdO46a1oBehQ1GJO16nj7ZJcCY74jfflDitXzs=)
2: MqEYcGP28yZryUtdD_3wTNGTAVc.roa (hash: p6r4IvQhkyRHVWZ8dRkzEjBjRhq65iPcj75XjeJcHaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:c7:b5:33:f8:29:20:3c:ab:5a:32:96:32:ba:fb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Mar 12 16:01:04 2026 GMT
Not After : Mar 13 16:01:04 2026 GMT
Subject: CN=cc196f8cf14fa8d262ab64cdac600158918dadb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:09:65:05:83:6a:b8:fe:10:fe:fe:df:73:
90:dd:64:67:0b:f9:fb:36:c2:8d:ef:cd:7e:66:64:
d2:2b:02:87:f0:02:4f:28:42:5f:10:3b:15:0d:50:
b1:f7:b3:b6:8b:eb:c4:22:b1:01:30:8a:e8:33:bd:
a9:69:a9:62:e4:40:16:68:d6:eb:51:ee:85:6e:96:
16:33:89:96:30:9a:7a:c8:d3:a4:cc:81:64:f6:af:
1b:7c:dd:89:f1:26:6a:31:fb:ba:d7:ed:15:9f:63:
4d:bc:39:fa:29:a9:5a:08:b7:cc:c4:fd:42:eb:52:
61:00:f2:38:df:5e:df:6e:85:cd:d1:aa:20:28:28:
cd:a5:2b:17:49:14:a5:77:9e:33:68:0d:9a:f4:4b:
60:a5:31:da:67:d5:f7:68:ab:67:24:be:6b:b6:9f:
d0:1e:99:d1:d5:5a:d6:1d:4c:bf:f4:14:57:ef:b0:
f8:4b:3e:f7:3c:64:69:11:20:c5:b5:8f:b3:bb:c9:
7d:06:82:6f:5a:b4:cf:35:16:27:36:5d:33:9a:48:
4e:6b:55:89:d5:e0:97:ec:0c:02:12:46:d1:65:b1:
c7:24:79:d4:6d:5f:c9:47:f2:e6:2a:30:be:a1:3c:
25:db:3e:3c:c1:7f:ff:b4:8b:ee:e1:b6:a9:bd:f3:
1c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:19:6F:8C:F1:4F:A8:D2:62:AB:64:CD:AC:60:01:58:91:8D:AD:B4
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6c:74:02:23:a7:8a:03:28:09:f6:3a:ea:79:7d:d7:4c:3f:
ee:bc:46:ed:ea:bb:59:e4:38:fe:e0:06:3d:08:01:c9:ae:9b:
74:c5:ad:d9:35:6d:57:87:ca:03:c9:8f:1c:50:bf:e9:28:1d:
4a:22:9a:86:db:f2:56:8f:ad:9b:87:2b:bd:5e:33:a6:26:cd:
f5:37:01:84:98:9a:41:07:3f:0d:56:11:23:2e:36:35:cd:c7:
db:6e:89:af:66:9c:e7:e0:48:8c:a4:9b:65:f2:22:d2:e0:b9:
37:54:61:b9:36:f0:d2:27:22:d4:4d:c2:40:05:48:73:0a:a9:
0d:99:40:68:95:b0:23:80:29:df:86:9a:0e:eb:c3:46:ef:69:
58:17:b8:b5:ff:86:04:70:5f:19:ab:8b:b2:4f:79:0a:d5:a4:
0d:66:d1:54:bc:46:9c:55:b6:db:8d:20:00:02:1d:d6:60:92:
2b:78:23:af:a4:c6:18:8a:f5:8c:9e:96:5f:d2:44:e5:0b:70:
13:e7:d7:d1:1c:1d:17:fa:25:ee:61:00:bc:7c:94:01:ff:04:
c5:5f:da:a7:37:d0:93:a5:a2:0d:81:91:e1:f4:92:c9:ba:6a:
d5:8b:f8:47:51:3c:d2:4b:a4:ac:88:99:3c:15:28:c7:06:75:
7c:cf:7c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:12 2026 by rpki-client