Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
File: 0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json)
Hash identifier: Uc5F8VjI6L+gnChn+ULbqsdUzFH52+VKSEfgG/cqhG0=
Subject key identifier: D1:0D:0F:A8:AD:DD:25:26:AD:EE:7C:7C:57:28:F6:A1:0F:BD:8F:0E
Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
Certificate issuer: /CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Certificate serial: 019E2023967BFBB9CFB8397D93662032B2EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 07:01:03 +0000
Manifest this update: Wed 13 May 2026 07:01:03 +0000
Manifest next update: Thu 14 May 2026 07:01:03 +0000
Files and hashes: 1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: 6HtyPr3BQUBrfRlj0WGt0ZMIbWMIY0uq3X9OFXFK9Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:96:7b:fb:b9:cf:b8:39:7d:93:66:20:32:b2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Validity
Not Before: May 13 07:01:03 2026 GMT
Not After : May 14 07:01:03 2026 GMT
Subject: CN=d10d0fa8addd2526adee7c7c5728f6a10fbd8f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:53:e0:38:c9:66:de:21:7d:f1:eb:6e:e5:
5f:8f:cf:f1:f0:69:09:50:97:47:c2:4d:17:5d:bf:
a0:1b:b7:6b:24:ac:5a:49:1e:91:04:8d:18:20:80:
89:e7:6c:92:46:59:50:3f:18:ea:c0:39:cc:40:23:
8c:ae:85:01:56:8d:a7:e7:00:e4:b0:b6:a6:eb:d2:
c0:de:0a:1e:45:61:8e:50:e9:41:bf:eb:9a:a8:64:
a7:53:52:03:66:73:46:ac:df:e7:a5:61:fd:e6:d9:
8a:85:1f:90:61:04:5d:ee:0f:91:7a:6f:eb:b3:ee:
f3:25:8b:6b:e0:eb:8a:af:a2:c5:17:3f:26:83:30:
d7:ec:95:1e:44:55:4e:11:af:b6:65:44:ba:00:a5:
2f:ff:68:72:58:53:7c:98:2d:88:c9:00:75:af:77:
fb:43:2f:d5:c5:b9:18:36:50:e4:a5:b6:4d:70:2d:
61:e1:27:f1:d6:78:28:dd:cd:07:9f:a4:c0:5c:b0:
dd:2a:59:2e:f8:04:6c:43:14:99:e5:c2:9e:4e:a0:
23:af:fe:b4:43:3e:41:9b:aa:3d:2a:bd:87:5c:c0:
ba:71:cd:be:34:69:91:60:b9:6a:9a:80:6d:a3:70:
99:4f:6a:92:d6:74:c5:4a:f2:14:92:1c:3f:b0:1c:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0D:0F:A8:AD:DD:25:26:AD:EE:7C:7C:57:28:F6:A1:0F:BD:8F:0E
X509v3 Authority Key Identifier:
keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3f:bc:c4:87:9e:78:b4:90:fb:95:6f:05:ed:44:9b:c2:3a:
81:50:25:7a:c5:90:61:c6:59:fa:c2:12:bb:a5:c4:60:8f:44:
e5:1a:c7:f5:67:be:39:51:76:9d:b8:5c:04:9d:a9:42:c3:d2:
ef:70:fe:cc:cc:76:9f:04:e5:95:97:7a:ee:9f:87:29:32:73:
e9:33:ee:4e:f6:87:12:5f:c7:7f:fe:f5:64:42:b9:fe:79:f6:
d7:a0:8b:d1:ef:cb:68:d0:8e:9b:37:2c:f7:e1:30:16:5f:16:
7a:2c:83:9d:7a:36:ce:1c:c3:9a:67:29:b1:07:68:ff:71:19:
37:8f:82:2d:b7:70:7d:23:41:74:4f:17:8b:ab:fa:16:05:2c:
b7:55:d4:69:2c:6e:ca:5c:80:bf:7c:64:58:5a:c7:e1:53:30:
37:30:bd:66:22:3e:83:a9:b2:af:d2:1f:58:7d:16:90:5a:00:
e4:bd:d5:7e:c9:49:09:a1:c1:01:d1:14:b9:0f:f1:cb:7f:4e:
7c:1c:96:7b:54:b6:ec:fb:63:52:18:02:29:ed:45:a3:6c:15:
fe:16:7d:5b:1f:73:73:cc:b2:1b:78:1e:d7:e2:9a:b1:33:7f:
b1:3e:7e:48:7e:72:b2:4f:06:bf:e0:a8:3b:2c:5d:36:11:29:
65:35:e3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:48:02 2026 by rpki-client