Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: jKJaumt/lsATpEUL0b+SiIMLEtVpYEiPgG2p/Q3HGm4=
Subject key identifier: CE:15:6F:41:E8:AC:EC:F2:57:1C:67:E7:18:84:FA:34:77:46:0C:62
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 019DCC74BC63554CEDEE9B63D92CBFAD6683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 186D
Signing time: Mon 27 Apr 2026 01:01:35 +0000
Manifest this update: Mon 27 Apr 2026 01:01:35 +0000
Manifest next update: Tue 28 Apr 2026 01:01:35 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: qMBG1CSY68QDZK/F2SLPG220/5SnT7o/mQFktr4lcug=)
2: MqEYcGP28yZryUtdD_3wTNGTAVc.roa (hash: p6r4IvQhkyRHVWZ8dRkzEjBjRhq65iPcj75XjeJcHaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:bc:63:55:4c:ed:ee:9b:63:d9:2c:bf:ad:66:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Apr 27 01:01:35 2026 GMT
Not After : Apr 28 01:01:35 2026 GMT
Subject: CN=ce156f41e8acecf2571c67e71884fa3477460c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:6d:e3:60:f0:78:7e:79:ea:a1:e3:a6:5e:
0c:83:f6:dc:d4:6c:f0:d4:b2:d6:32:02:73:99:17:
04:9e:b2:79:8a:c7:d6:30:47:e2:26:5d:5b:b1:86:
f2:2b:e5:5c:c6:68:ca:46:a2:23:3a:a1:47:ba:99:
27:54:33:7e:75:6a:e2:89:c7:70:a5:b8:3d:b3:36:
16:fd:37:d2:d3:89:71:a6:55:e2:6d:d1:39:bc:01:
01:b6:ee:6d:28:70:98:d4:05:5b:5e:af:b3:db:aa:
5a:07:5b:00:94:bc:1b:53:d3:56:5e:09:8a:e0:70:
d2:6f:e4:e1:97:71:63:89:2e:22:c6:44:fa:a9:57:
6d:0d:e3:7c:4c:3a:81:67:c6:ce:54:7f:53:94:c6:
bc:16:3a:cd:73:2f:f2:d1:da:ab:5e:a9:ae:6a:b3:
a4:6b:33:26:49:88:7a:c1:70:c0:6b:12:24:fe:3a:
bc:80:59:aa:bc:85:f6:e2:23:7d:f8:b2:3a:34:56:
96:d1:63:43:41:df:30:2e:f7:0a:be:f7:7b:91:57:
85:4c:8d:37:18:2c:1e:ac:49:db:15:b9:6a:a7:aa:
43:cb:3c:b5:48:4f:d7:28:bd:63:20:1d:78:59:a4:
88:9c:e8:7a:b2:3a:df:34:ae:67:46:90:2f:33:ea:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:15:6F:41:E8:AC:EC:F2:57:1C:67:E7:18:84:FA:34:77:46:0C:62
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1c:85:04:b9:2b:0c:fb:2e:df:2b:24:c2:4a:8e:54:5f:a2:
79:f8:90:79:b2:6a:9e:3e:d8:35:f8:7e:43:b0:20:62:d0:ce:
ef:fb:26:c0:1c:33:6a:4f:a3:4a:01:2a:03:66:9a:f2:84:79:
c5:5b:c5:28:fe:e0:e0:2d:82:bb:b0:5d:42:31:62:7e:72:fd:
c4:18:d3:cc:60:45:3c:5f:ce:19:59:b7:43:a7:c9:27:a1:db:
c6:f9:09:37:ff:78:d8:10:e4:25:c2:8c:5a:ef:94:e2:b5:ae:
df:5a:73:5c:19:f7:c7:c8:f5:81:d8:64:e1:57:85:7c:0b:7c:
b4:92:ea:13:97:bf:5f:b3:59:0b:97:96:d0:20:25:a1:d8:f4:
90:14:64:d8:19:eb:90:02:e5:93:12:b8:c6:bf:3f:4a:de:ad:
46:64:8b:c1:fa:03:4f:47:43:05:9a:47:2a:df:c1:b0:12:05:
25:ea:79:f2:91:cb:5e:6e:84:fd:7d:6b:80:47:06:96:67:db:
4d:69:cc:4a:8b:df:b1:76:65:93:9b:ae:19:54:6d:50:de:5a:
8d:5d:a3:1a:ff:a3:b7:16:29:87:62:d0:8e:78:e0:07:6d:8d:
aa:f4:58:68:9a:73:a2:af:d7:9c:2f:4f:29:32:8f:35:ef:53:
8f:10:84:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:20 2026 by rpki-client