Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
File: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft (raw, json)
Hash identifier: Z8JnlUp/6VrZtTy+h75YezrMkCqi7PzNgXcARsBQcHs=
Subject key identifier: 2E:54:F6:4A:F3:56:09:CC:3B:3B:2A:A5:B4:5F:32:79:D9:96:6B:FE
Authority key identifier: D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
Certificate issuer: /CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Certificate serial: 01A13CDCAFA8060EDE0087E4AACBF2E450C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
Manifest number: 0A39
Signing time: Thu 15 Oct 2026 00:00:58 +0000
Manifest this update: Thu 15 Oct 2026 00:00:58 +0000
Manifest next update: Fri 16 Oct 2026 00:00:58 +0000
Files and hashes: 1: 0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl (hash: Zq9XIwhlKdrhqkD4fpLxBCc4SPKy6ZrKOXYFH+LSTlM=)
2: 5pjm21HKetM46w6qM9uy-i6WybY.roa (hash: 3eNVlKLJuRP0y0hZciHBdm9TPYgKCSF9C2o8FyAPzb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:af:a8:06:0e:de:00:87:e4:aa:cb:f2:e4:50:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24322b2d0a794fd076b85e8dc578abb0d03ec40
Validity
Not Before: Oct 15 00:00:58 2026 GMT
Not After : Oct 16 00:00:58 2026 GMT
Subject: CN=2e54f64af35609cc3b3b2aa5b45f3279d9966bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:1c:9b:e0:3d:19:34:d9:8c:07:10:f2:d2:
e7:22:97:7a:d2:39:ff:21:dd:7a:39:80:71:4e:4a:
6e:b6:72:45:91:3e:93:79:63:c9:72:c0:c2:f6:bd:
f6:3f:a6:cf:dd:a6:85:d0:08:8c:0f:b3:64:5d:97:
3b:50:19:cb:4b:49:59:ae:f2:a3:9f:bd:81:62:f1:
ed:8f:36:bc:a3:3f:8c:45:f2:ce:94:90:cf:b8:53:
41:ca:0e:f5:3b:41:f4:46:a8:34:f8:62:ae:02:ef:
29:ed:83:51:2a:75:a6:ea:1d:3d:d4:9b:5f:9d:26:
e9:79:5f:46:c7:29:ff:56:9b:ef:f3:73:48:4b:d8:
00:34:54:f0:c0:5c:25:e4:37:82:f1:89:96:fb:31:
77:38:be:b4:3b:80:62:c6:11:17:ee:40:21:25:2f:
e5:fd:93:ef:a3:d1:61:a5:5d:91:2b:06:27:eb:64:
a0:38:ee:e7:e2:dd:c0:67:c3:1b:19:19:eb:09:2b:
c4:de:a5:5c:38:7f:11:cc:d6:77:cf:f1:58:c3:1c:
6e:85:10:9d:7e:e0:b2:46:80:05:e3:a8:74:be:73:
1a:1b:44:8f:f0:b6:55:43:c8:ce:a4:f4:7d:9c:8a:
81:5b:4f:48:cc:80:fe:f6:80:6e:2d:9c:97:70:d7:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:54:F6:4A:F3:56:09:CC:3B:3B:2A:A5:B4:5F:32:79:D9:96:6B:FE
X509v3 Authority Key Identifier:
keyid:D2:43:22:B2:D0:A7:94:FD:07:6B:85:E8:DC:57:8A:BB:0D:03:EC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kMistCnlP0Ha4Xo3FeKuw0D7EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/97c353-0c36-4066-a56b-139a496cd59c/1/0kMistCnlP0Ha4Xo3FeKuw0D7EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:75:91:f0:b1:18:43:36:67:6f:d4:4d:7d:f6:42:35:bc:cb:
ec:dc:ed:45:27:03:40:90:63:6b:d5:78:88:a8:03:43:6e:f6:
32:d5:69:25:7f:81:6c:a2:5b:72:8f:7d:0a:ce:cc:04:3a:98:
c9:25:97:24:df:3a:b6:a3:ef:9e:2d:4a:e0:1b:e6:39:72:5d:
c6:0f:8e:9c:0f:c8:ae:e0:34:34:a1:a1:58:81:7f:89:b6:eb:
c6:f7:b6:0d:45:4b:f8:74:5d:0f:16:75:3d:a6:07:b5:1e:0b:
12:db:c8:b8:ed:d0:b1:1b:45:ea:e6:9a:2a:4b:c7:9b:fc:40:
4e:73:65:99:a9:40:d3:c2:66:1b:40:fc:f0:de:8d:e7:23:a4:
08:cb:1f:48:a6:69:4b:6a:7b:da:bb:c4:e9:52:a2:51:5c:6d:
b9:aa:f9:d6:23:15:5d:b8:b8:93:96:d9:36:17:70:d6:bb:32:
68:2a:72:07:cd:ca:a9:a1:65:bd:7a:f6:1d:d1:fd:01:0a:80:
1d:f5:a9:4a:d0:bf:29:a3:94:b6:b2:18:f5:ee:30:fb:7c:8e:
4b:a8:d3:be:51:97:38:ea:28:96:3c:b6:e7:0c:2e:b6:1d:ab:
2b:d9:c4:aa:3a:fd:ba:6a:83:24:8c:5a:ce:1c:f4:ea:dc:95:
3c:48:86:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:27 2026 by rpki-client