Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
File: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft (raw, json)
Hash identifier: 2DxIF2vaciYcDjGf/mrSEuDNVkkNDsiLFHpR5UELuUY=
Subject key identifier: F1:13:87:DC:F7:53:77:86:E5:03:3D:54:95:11:C9:65:98:BD:D0:49
Authority key identifier: D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
Certificate issuer: /CN=d217978586bff3a6777d55a9a9635841516d43b4
Certificate serial: 01A112607381A6F5E7017E91A267484D4D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
Manifest number: 1021
Signing time: Tue 06 Oct 2026 18:01:13 +0000
Manifest this update: Tue 06 Oct 2026 18:01:13 +0000
Manifest next update: Wed 07 Oct 2026 18:01:13 +0000
Files and hashes: 1: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl (hash: ajUzOY1KnOCzKuLB//ieFJ8RINMVpcqDFR980xX/k/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:60:73:81:a6:f5:e7:01:7e:91:a2:67:48:4d:4d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217978586bff3a6777d55a9a9635841516d43b4
Validity
Not Before: Oct 6 18:01:13 2026 GMT
Not After : Oct 7 18:01:13 2026 GMT
Subject: CN=f11387dcf7537786e5033d549511c96598bdd049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:90:92:37:a5:ef:fc:ff:38:c8:d8:fc:02:75:
b1:85:4b:89:90:96:07:6a:c1:2a:66:ec:2f:48:e9:
63:b7:88:2b:1a:53:19:28:75:39:7d:12:cf:c9:a5:
c2:74:71:8b:59:11:f2:7d:0f:b7:50:19:8d:06:f6:
7f:21:33:10:59:51:38:7b:17:99:1b:4a:28:a1:39:
97:68:c1:99:13:10:f7:7d:f2:1f:a8:c3:07:1e:39:
70:9e:1d:d5:49:6b:47:1d:59:5a:de:05:87:a9:6e:
52:35:6c:c0:19:ed:9e:44:0f:21:75:7f:58:5f:eb:
a5:65:2c:1c:28:91:ca:5b:cc:49:22:c7:d8:01:84:
19:4d:51:fd:b1:1e:ab:53:12:31:28:53:60:95:d3:
2b:2e:e5:10:80:3a:16:50:a2:5e:da:a7:df:b4:65:
a6:c7:e4:4d:ad:49:03:12:95:47:6d:30:f4:dc:af:
27:a8:a2:cb:ab:d4:38:36:e2:bd:5e:b2:ae:cd:9c:
42:21:df:c5:2c:f3:34:2f:77:bf:fb:fa:9d:82:2e:
3a:17:7f:2b:c7:b1:f6:bf:6a:4c:00:b3:82:dd:c1:
09:9b:7f:d2:8c:c9:7e:aa:2c:a6:ea:b5:a5:51:10:
48:17:b4:25:14:b5:6f:00:4a:5b:d8:0f:19:b6:5e:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:13:87:DC:F7:53:77:86:E5:03:3D:54:95:11:C9:65:98:BD:D0:49
X509v3 Authority Key Identifier:
keyid:D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:8b:cd:20:12:f2:a0:8a:cf:59:40:55:e3:40:d6:e4:fa:f4:
34:63:d5:b1:f0:05:73:12:d9:37:f3:9e:65:9d:b6:c2:1f:29:
b9:05:61:29:4e:f1:ac:34:ab:a0:a0:a9:9a:e4:0d:70:37:c5:
e8:88:ff:ef:2d:69:54:3b:05:63:bd:ae:90:5e:3b:ce:2b:27:
15:94:91:4e:59:8e:db:c4:f7:24:b5:a7:04:e0:97:17:33:be:
d6:a8:05:e5:b8:7e:b0:e1:35:66:eb:97:76:49:03:c9:d4:b1:
c0:e3:f0:e8:28:05:61:13:3a:f7:70:c3:e5:1e:ba:c3:b6:ce:
df:61:0c:d4:66:cd:4a:2f:b3:3a:cb:2a:5f:61:6d:c9:28:80:
60:a5:c4:4c:e7:7e:f0:d0:ba:e9:f0:be:1d:86:86:1e:a3:20:
17:c1:d5:4e:d0:3f:64:6c:a2:37:0e:c4:2d:af:47:eb:ea:9e:
fa:1d:a5:6a:60:ee:fa:fd:ac:07:9f:d4:c4:54:b8:d3:67:52:
b1:6f:40:71:b7:e9:f6:1f:22:26:ad:9c:44:51:f2:b1:dc:f4:
06:38:cb:e9:7f:b0:f5:f9:41:1d:73:66:f6:a6:3c:c5:2a:ab:
e4:73:94:e5:73:4d:03:e5:92:18:1f:78:0e:57:7d:ba:01:b4:
e7:46:99:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:38:38 2026 by rpki-client