Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
File: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json)
Hash identifier: aSe7UuB9TEAAtMFfOhdgzu1qoys5WLE9PvPrFy+woBc=
Subject key identifier: 9D:9A:80:4F:76:CC:63:F8:6F:42:8D:98:94:F1:1F:20:9E:39:D2:79
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial: 01A00213A7044F4607002F451B301CA364C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
Manifest number: 0996
Signing time: Fri 14 Aug 2026 21:00:37 +0000
Manifest this update: Fri 14 Aug 2026 21:00:37 +0000
Manifest next update: Sat 15 Aug 2026 21:00:37 +0000
Files and hashes: 1: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: QclLsV8K1YISh3JmHR/TOqaAui62K0TBByMMVEdO3bk=)
2: 5pjm21HKetM46w6qM9uy-i6WybY.roa (hash: 3eNVlKLJuRP0y0hZciHBdm9TPYgKCSF9C2o8FyAPzb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:a7:04:4f:46:07:00:2f:45:1b:30:1c:a3:64:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Validity
Not Before: Aug 14 21:00:37 2026 GMT
Not After : Aug 15 21:00:37 2026 GMT
Subject: CN=9d9a804f76cc63f86f428d9894f11f209e39d279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:7e:09:5e:7d:93:16:a8:b7:de:4c:15:0a:
4b:88:80:54:cf:25:64:1c:4f:ee:81:17:d9:fd:59:
10:c8:4f:9f:f4:b0:55:c3:47:d6:a5:60:76:ad:99:
1d:98:45:9b:0f:16:38:56:71:b3:9f:d5:0f:5d:54:
0b:3f:63:b1:66:71:48:a8:49:5a:f1:4b:45:d7:47:
86:da:07:70:03:ee:19:6f:18:21:88:97:03:ea:61:
55:70:6c:53:ef:3e:22:b6:4a:52:83:ee:7e:b8:f0:
04:2f:0f:52:8e:93:b3:a2:10:ed:4c:3d:84:2c:05:
ce:9f:f1:00:7c:78:6c:1c:d2:bb:78:b4:02:b3:fe:
5c:19:73:31:ba:31:a9:0e:17:22:84:55:d7:d9:4f:
d3:63:f8:f1:18:e9:5e:e4:c8:27:8d:2b:78:61:23:
29:2c:a9:48:d9:46:02:9a:4d:bb:a7:43:72:d6:1d:
93:7b:6b:cd:2d:a5:62:43:05:1d:14:6c:0d:19:d8:
3d:d8:3c:1d:f7:12:e5:bb:5a:82:57:8a:4a:c5:09:
e9:53:f2:50:92:90:89:17:4c:11:22:40:c2:df:f4:
37:3b:44:eb:f7:15:e9:2d:22:e0:b2:5c:f7:12:87:
64:e0:ff:d4:32:20:aa:20:10:a1:c5:9a:0a:67:28:
b5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9A:80:4F:76:CC:63:F8:6F:42:8D:98:94:F1:1F:20:9E:39:D2:79
X509v3 Authority Key Identifier:
keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d5:32:79:11:d3:2d:9f:61:9e:b1:c7:a5:44:7c:dc:90:1f:
19:cf:f9:7f:b6:56:3d:08:5a:6f:ba:64:55:f5:20:a0:29:aa:
95:9d:53:ad:aa:70:e7:73:58:84:c3:f1:1b:49:8c:c3:47:07:
1a:54:26:0f:a3:95:ab:40:40:8b:ab:95:1c:90:87:48:34:df:
df:2f:e1:ec:85:e6:f5:66:43:89:10:f4:f1:52:f4:a6:96:2a:
14:06:5e:69:94:1b:5b:ce:33:10:8f:0b:1f:83:2a:05:be:f2:
ab:77:ba:c0:ea:9e:fe:0d:68:14:00:9a:d1:44:bc:95:b4:66:
7c:66:57:3a:90:95:f0:a0:a7:b5:83:63:1b:9a:d8:8e:9b:78:
e5:08:20:1e:84:25:ca:02:11:ed:af:e2:90:b3:ab:c0:b6:e8:
d6:49:4a:64:5a:3b:64:06:1c:ad:57:02:2a:6f:f0:23:53:eb:
46:f9:81:58:12:8d:e7:91:0e:fa:54:95:a0:70:b4:e7:9b:1b:
71:df:7e:d2:f4:2f:92:a5:db:ec:3e:67:a6:e6:1b:40:4a:2e:
eb:45:2a:2f:46:c3:47:49:65:48:f4:bf:ba:4a:0b:d7:29:0d:
64:aa:b2:35:67:e8:e4:a3:44:6b:e9:f4:eb:90:0b:e4:6b:98:
cb:0e:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:24:02 2026 by rpki-client