Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
File: 0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft (raw, json)
Hash identifier: cvUYtWyjdbQwgLK0aBuEf5iVNye9kQDOm+EWkXb3Ct4=
Subject key identifier: CF:11:CF:5A:3E:43:95:69:13:38:EA:82:C6:C1:C2:A0:A3:9C:0D:5D
Authority key identifier: D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D
Certificate issuer: /CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
Certificate serial: 01A0CE5AA13B6C0BAA07FA3836C745C13440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
Manifest number: 19A6
Signing time: Wed 23 Sep 2026 13:00:41 +0000
Manifest this update: Wed 23 Sep 2026 13:00:41 +0000
Manifest next update: Thu 24 Sep 2026 13:00:41 +0000
Files and hashes: 1: 0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl (hash: mnaeZaR8ZGS2NkNeFxUnedHSrCLTxZkT3vKVhP6z9gQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:a1:3b:6c:0b:aa:07:fa:38:36:c7:45:c1:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
Validity
Not Before: Sep 23 13:00:41 2026 GMT
Not After : Sep 24 13:00:41 2026 GMT
Subject: CN=cf11cf5a3e4395691338ea82c6c1c2a0a39c0d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:9e:9d:8b:42:46:54:36:07:9b:74:74:69:
bf:69:6c:82:73:ae:16:dc:3c:24:33:27:b6:8a:eb:
a0:5d:1e:1c:27:e4:5c:86:75:78:9a:fe:79:fd:6f:
1d:6f:fe:8d:56:09:54:6b:27:48:3c:bb:1e:cd:b9:
4e:01:a5:5a:10:f3:d4:a4:ef:fd:fa:2a:e9:93:4e:
b8:f4:51:95:ea:9b:d0:ef:0f:13:f6:23:83:38:16:
5e:e7:d9:4c:2c:3b:8c:21:12:73:79:a6:9a:c6:20:
c6:d6:f7:42:32:6d:b4:0c:29:04:a6:3d:e4:18:7f:
a2:e0:b5:82:76:a7:7e:d8:40:8b:76:90:31:39:7b:
ef:34:d1:ac:b8:19:ab:29:ed:78:68:a4:f0:f0:6c:
0d:9e:c9:2e:80:fe:ec:1f:e1:ec:cf:26:e6:8c:7b:
f9:83:69:61:68:a6:69:65:33:b8:83:ec:36:d0:33:
28:cc:32:0b:ef:68:85:fc:5d:46:98:0e:d9:ea:78:
29:81:ff:82:ba:6d:54:d9:e0:29:89:3e:d1:e4:15:
07:30:9c:7f:4b:46:99:bd:7f:f4:4c:f1:e0:8c:b2:
e6:4d:4e:2d:ad:64:b6:e6:24:6e:e0:31:82:c0:a1:
ff:24:6a:49:7c:a1:e9:7a:a1:73:9d:03:f7:a7:16:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:11:CF:5A:3E:43:95:69:13:38:EA:82:C6:C1:C2:A0:A3:9C:0D:5D
X509v3 Authority Key Identifier:
keyid:D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:9f:aa:db:eb:46:3f:21:01:31:7b:18:41:57:6f:20:b5:6c:
d9:03:7c:1f:d8:04:ac:ea:8b:4d:8b:61:37:d2:3d:ee:5e:ca:
2e:a1:32:e5:c5:14:c0:90:6a:9f:69:eb:10:e4:a2:88:81:02:
d0:40:ea:14:3e:17:62:7a:1a:ac:de:2f:17:15:d3:46:85:77:
7e:97:54:6a:9e:9d:7f:6c:65:ad:52:7b:df:92:9b:e7:fc:21:
bd:e7:fc:bb:a3:bc:5f:9f:60:26:d7:84:f4:de:82:3a:ae:72:
e9:4a:42:79:70:e4:32:4d:d4:1c:38:75:9c:57:0a:6b:2a:f8:
28:b3:91:ac:ff:24:66:0b:ea:35:18:d7:6c:ba:04:6b:a0:e0:
68:50:4a:b2:94:40:a4:90:6d:ee:76:84:dd:2d:59:bc:55:73:
e0:91:92:7f:1a:8f:74:b7:05:37:ef:ae:29:40:ee:cb:aa:b5:
2b:8c:55:59:fc:a6:c6:15:30:39:3a:da:da:a9:b6:6e:a8:4f:
80:17:4e:0b:a5:c7:d4:87:a7:5e:8b:2f:ef:ea:0a:32:32:5b:
0b:9f:f8:68:34:fd:be:80:ce:f2:b1:d5:f5:aa:8a:81:2b:f7:
eb:82:56:c1:77:b1:53:e0:6c:cc:5b:a2:f7:23:34:8c:18:bc:
03:8a:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:04:59 2026 by rpki-client