Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
File: RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json)
Hash identifier: etRx6hohDOq9PJMXS9YO4KxJsYJCx+Rzw5FwdfQqefg=
Subject key identifier: 96:E5:99:EF:83:43:89:B0:B6:31:12:23:87:B6:18:08:88:81:7D:EB
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 01A10580DC06FC0C22F690465A4EE2EAC542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
Manifest number: 1A8C
Signing time: Sun 04 Oct 2026 06:01:33 +0000
Manifest this update: Sun 04 Oct 2026 06:01:33 +0000
Manifest next update: Mon 05 Oct 2026 06:01:33 +0000
Files and hashes: 1: AEfnrK6ix3lgbRrsMfPKWVRCzjE.roa (hash: qwyfmOqhQfxk+SJv3YNNgHlxe2wh96nicliB7SifUfM=)
2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: pSGzIcvyb6R6d9M2GjtMRpY+PfO/ytaIz/NzIKRITqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:80:dc:06:fc:0c:22:f6:90:46:5a:4e:e2:ea:c5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: Oct 4 06:01:33 2026 GMT
Not After : Oct 5 06:01:33 2026 GMT
Subject: CN=96e599ef834389b0b631122387b6180888817deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:69:8e:0a:90:59:0f:c7:72:d7:9c:ca:95:
29:29:aa:ef:4e:4d:1e:0f:21:0d:83:1a:91:fe:89:
9e:63:63:a6:a8:f4:dc:4c:f2:91:2d:52:09:f0:af:
62:87:ba:58:5c:45:fb:a2:e1:89:5d:35:1a:2e:8b:
6a:24:4e:a4:c7:b5:88:8b:4f:77:05:92:a0:07:d8:
aa:c9:ef:66:d0:b6:94:14:73:4c:9e:70:b6:73:1a:
1c:c2:68:fc:a7:e2:06:13:1d:84:77:2a:14:f7:35:
81:fc:8f:d6:2e:68:fc:84:dd:a3:68:1a:ab:6b:c2:
12:3b:ee:81:e4:27:b8:35:a1:7f:43:a7:6f:93:70:
66:54:c9:e2:b6:2d:a9:20:5e:39:df:30:48:44:89:
8f:14:15:fa:23:be:3c:d2:97:85:bf:4a:dd:48:ed:
e9:b2:b4:2d:54:f3:d7:4e:7a:ed:c9:d1:c8:33:79:
1c:6f:ce:53:83:db:90:59:63:3c:31:0a:79:a1:82:
8f:39:d6:24:7d:3d:0e:fa:4d:c6:80:7d:c3:9b:e3:
6f:7c:4d:76:a8:82:74:fd:d3:a8:1d:94:a0:3c:70:
98:76:e7:2c:9f:b3:85:ed:09:09:ec:50:b5:62:5c:
d8:54:07:76:16:90:ed:ee:6b:f2:2a:02:c8:15:40:
ed:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E5:99:EF:83:43:89:B0:B6:31:12:23:87:B6:18:08:88:81:7D:EB
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:50:b9:ab:84:dd:6e:7c:b6:59:54:83:7f:9d:a1:b9:5c:fb:
70:95:8a:48:fe:4e:6e:07:46:3b:e0:53:ce:b8:01:d8:2a:16:
f1:16:ee:0c:35:82:04:0d:92:c5:d4:4a:80:7a:ba:a1:27:bb:
22:b2:f2:c0:e6:a9:dc:52:c8:72:e6:73:25:3e:37:a9:06:6d:
21:00:f9:03:e2:de:4c:f4:0c:86:07:3d:ef:39:88:d8:a2:68:
b5:5e:56:ee:43:05:8b:cf:3f:f1:fe:f8:5b:ee:05:84:ec:12:
64:45:ab:3c:bb:fb:3a:1f:d2:f1:53:39:ba:25:87:43:98:be:
28:94:f1:fc:38:73:6e:c4:31:5d:b9:79:01:4e:94:f0:ae:f7:
7a:ec:8d:f7:e2:0a:61:be:21:d1:f6:85:cd:44:12:87:97:4c:
b1:fd:4f:dd:ed:de:fd:bd:33:4c:d6:c1:00:92:2c:5e:65:08:
5f:c1:65:85:c3:ac:42:ca:ed:8a:bc:a2:82:ba:53:7a:54:ef:
a0:1d:b4:80:16:50:b6:74:9d:35:ed:cc:6e:1b:24:3b:fd:df:
8b:da:93:a5:51:e4:bb:10:b4:d0:57:3f:47:7b:14:d6:0d:e7:
1f:c3:d8:a5:83:a2:24:f7:1c:f3:8b:72:e1:2a:a4:dc:7c:d1:
cb:e5:d3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:39:35 2026 by rpki-client