Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: RsHDrNA3VdjFrKsExU+ulTNsE8JVv93F2zy5gj8BV8s=
Subject key identifier: 04:DB:08:AF:D3:1F:67:60:23:24:EF:0F:1C:6D:98:C2:65:DF:DA:62
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 01A08B689CA1FFB80AD9C0CCE3CF1C1C5CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 19D9
Signing time: Thu 10 Sep 2026 13:01:23 +0000
Manifest this update: Thu 10 Sep 2026 13:01:23 +0000
Manifest next update: Fri 11 Sep 2026 13:01:23 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: cR7u6rZ6sO58DRfMQc/eBebhWPGXaDSbfyIfutfOnCY=)
2: MqEYcGP28yZryUtdD_3wTNGTAVc.roa (hash: p6r4IvQhkyRHVWZ8dRkzEjBjRhq65iPcj75XjeJcHaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:9c:a1:ff:b8:0a:d9:c0:cc:e3:cf:1c:1c:5c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Sep 10 13:01:23 2026 GMT
Not After : Sep 11 13:01:23 2026 GMT
Subject: CN=04db08afd31f67602324ef0f1c6d98c265dfda62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:60:c5:fd:b5:e0:57:a8:17:0b:28:7b:35:77:
98:85:27:1b:f1:93:e7:65:e0:47:11:14:49:ca:6c:
1a:da:16:47:71:9d:b5:7a:3b:59:d5:f4:00:13:3f:
35:f9:53:f7:c9:45:6a:3e:43:25:52:71:6e:9a:3b:
ff:8e:e1:6a:6c:02:ce:a6:5b:9d:09:97:21:e1:32:
bd:4e:44:2d:fc:d3:24:ae:c7:4a:c7:d0:53:3a:e9:
88:59:ab:9a:46:05:f1:a8:8a:c0:63:e1:05:28:c0:
f2:37:30:e6:b8:80:a7:8e:da:d0:66:ee:24:79:8d:
bb:ca:f0:c7:77:11:16:5b:28:f1:ba:32:7d:bf:cc:
fe:16:22:43:a9:77:b1:70:8d:7c:4d:dd:2a:9a:74:
2e:43:9e:e7:38:f5:05:37:2e:c0:0d:26:27:e0:10:
84:d5:be:9f:ab:07:21:6c:23:88:37:a0:b3:8d:9a:
26:d8:cb:eb:49:25:b4:c8:01:e5:e3:9d:97:bb:0b:
ff:29:59:64:c5:f7:bf:7c:05:90:2c:a3:3a:66:37:
54:58:7f:68:f6:c4:65:58:46:14:da:43:f1:5e:9e:
e1:75:7d:69:21:74:d1:31:9e:1e:e2:92:5e:2b:b4:
0a:17:06:be:96:1f:56:06:cc:a7:67:f5:a2:07:b0:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DB:08:AF:D3:1F:67:60:23:24:EF:0F:1C:6D:98:C2:65:DF:DA:62
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:79:cc:e6:04:40:bb:d7:ec:7c:c9:cc:0c:34:57:52:69:40:
f5:48:c7:e9:a1:68:84:c9:ae:82:a1:cf:a3:d5:fe:8f:5f:18:
75:5e:23:1e:37:b3:80:db:b2:10:75:82:3e:93:81:5c:51:c6:
d8:c8:bf:89:ca:75:64:a1:fa:75:4a:df:aa:08:dd:97:c4:82:
4d:c9:40:20:42:27:a0:6f:6a:eb:4c:5e:fb:d4:94:35:f1:c3:
c4:bf:09:e9:76:71:04:e7:38:08:43:db:a0:90:aa:29:d6:44:
7d:6d:96:b9:8e:ac:63:be:a7:6a:b8:ba:1d:46:08:20:a8:a2:
af:a7:9a:10:64:fe:77:7a:23:be:29:25:a9:0b:a7:f9:39:d0:
10:b5:98:3e:4b:06:86:39:5d:bd:0b:4d:dd:1d:4f:ea:28:21:
96:bf:9b:8c:ba:f1:4b:ba:95:a0:5c:af:09:76:9b:ed:b4:6d:
67:e3:da:e7:1c:17:fd:60:20:df:9f:ab:9e:8a:3d:be:e1:ef:
d5:af:45:32:ea:90:c8:52:f4:0e:a5:60:bb:44:89:a1:37:64:
8c:f9:ad:4b:33:f9:b4:94:87:a4:e3:c7:29:5d:cf:db:91:c2:
37:90:27:35:9f:1e:e6:9e:69:a6:05:35:bf:fd:ba:8d:29:fb:
5c:19:e8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:58:29 2026 by rpki-client