Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
File: 0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json)
Hash identifier: a7aqltEImRB5CE08PHLHo+uDxG1QVuKrhWQmwBoE7+k=
Subject key identifier: 45:2A:47:32:D4:20:1C:DF:DD:6A:BD:57:D4:1C:32:30:16:15:99:CF
Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
Certificate issuer: /CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Certificate serial: 01A0E6D2D719985922C748D7D7FE241E6746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
Manifest number: 1A75
Signing time: Mon 28 Sep 2026 07:02:52 +0000
Manifest this update: Mon 28 Sep 2026 07:02:52 +0000
Manifest next update: Tue 29 Sep 2026 07:02:52 +0000
Files and hashes: 1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: iPATqGcDgxeFm3hNvmbdo+XgopAc1vxyShcTlJB9/1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 07:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:d2:d7:19:98:59:22:c7:48:d7:d7:fe:24:1e:67:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Validity
Not Before: Sep 28 07:02:52 2026 GMT
Not After : Sep 29 07:02:52 2026 GMT
Subject: CN=452a4732d4201cdfdd6abd57d41c3230161599cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:2f:66:79:46:8f:04:ee:16:36:2f:8d:26:
fa:44:f1:5f:a8:ab:be:a2:d7:4b:a7:d2:c5:e6:81:
cc:f4:2e:20:47:e0:87:51:0c:96:1e:db:a5:25:79:
94:c2:dc:5c:6a:ca:cc:89:72:d9:4e:53:bf:58:37:
39:f3:23:02:bd:e8:77:ae:c0:4b:64:a7:a6:f2:db:
4d:fa:e1:70:e4:6f:0d:14:27:c8:6c:57:cc:06:6b:
a8:8b:1c:fb:8b:e4:6a:df:5c:9f:5a:46:04:95:5f:
11:d3:9a:60:5b:8d:70:29:df:c9:01:14:8b:ec:aa:
b5:6d:78:14:06:71:81:29:fe:37:48:94:ae:a1:59:
2f:5f:2d:04:8b:0e:32:8d:b3:43:55:b0:21:15:58:
02:2e:1e:91:c4:70:62:34:a2:7c:4e:7c:ef:24:a4:
a8:2f:e2:ef:73:62:18:b6:85:67:65:99:d3:82:38:
50:65:8d:67:40:06:1a:f1:49:57:d1:33:16:78:c1:
4b:12:4a:ea:6e:86:ec:87:d3:f1:b6:03:d7:10:5f:
58:27:c4:22:a9:92:57:fb:c1:a6:6b:69:21:a0:5c:
56:40:fc:fc:40:cd:03:1c:7f:d7:50:29:e6:d5:ab:
a2:d4:2a:bb:05:14:70:01:b5:16:27:13:13:57:b5:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2A:47:32:D4:20:1C:DF:DD:6A:BD:57:D4:1C:32:30:16:15:99:CF
X509v3 Authority Key Identifier:
keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c2:02:c7:5f:36:94:fc:b5:d3:eb:b9:fa:af:b7:ab:ac:91:
98:11:2f:4f:1a:76:89:c3:16:6d:3e:20:f2:c3:e9:45:29:02:
5f:1b:a0:aa:19:63:33:8e:3d:5d:ba:33:80:6f:fb:4d:e4:bc:
40:24:de:25:06:15:1d:14:64:95:ff:f2:b8:5e:ac:19:63:6a:
ed:66:e3:99:13:4b:a0:c9:05:dd:77:8d:dd:39:59:92:90:81:
1a:d7:f8:eb:02:2c:7a:82:bf:b6:f0:99:74:46:aa:7c:2b:71:
1f:4f:89:e6:0f:a2:c8:f5:3a:15:02:56:62:dc:99:4d:24:09:
11:76:a2:3d:a3:ac:8a:3f:b9:37:f6:d8:d8:6f:3d:42:d0:c1:
68:5d:0b:85:6a:99:ef:d7:04:f6:3b:c2:9f:8e:21:b7:2e:64:
29:7b:43:ac:57:68:29:d6:c6:cc:93:ff:43:ec:88:d0:fb:0b:
5b:ab:58:e3:ef:c2:45:79:8e:77:15:c7:de:8c:cb:8f:e1:13:
0e:9c:7b:29:a0:1b:f4:10:bb:33:97:81:cd:2c:e0:52:c6:4e:
e2:12:ef:f8:51:45:37:24:75:5c:85:28:a3:1a:37:e9:e1:4e:
cc:6f:f5:5a:14:37:d1:73:e3:f0:76:a1:a5:6e:b4:95:a7:e6:
53:1f:51:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDm0tcZmFkix0jX1/4kHmdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZGM1NzBiYzFjOTY0YmFiN2VkNTZjNjczYWE0MDUxOGY4
NTQ1NzgwHhcNMjYwOTI4MDcwMjUyWhcNMjYwOTI5MDcwMjUyWjAzMTEwLwYDVQQD
Eyg0NTJhNDczMmQ0MjAxY2RmZGQ2YWJkNTdkNDFjMzIzMDE2MTU5OWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtusvZnlGjwTuFjYvjSb6RPFfqKu+
otdLp9LF5oHM9C4gR+CHUQyWHtulJXmUwtxcasrMiXLZTlO/WDc58yMCveh3rsBL
ZKem8ttN+uFw5G8NFCfIbFfMBmuoixz7i+Rq31yfWkYElV8R05pgW41wKd/JARSL
7Kq1bXgUBnGBKf43SJSuoVkvXy0Eiw4yjbNDVbAhFVgCLh6RxHBiNKJ8TnzvJKSo
L+Lvc2IYtoVnZZnTgjhQZY1nQAYa8UlX0TMWeMFLEkrqbobsh9PxtgPXEF9YJ8Qi
qZJX+8Gma2khoFxWQPz8QM0DHH/XUCnm1aui1Cq7BRRwAbUWJxMTV7UKlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUqRzLUIBzf3Wq9V9QcMjAWFZnPMB8GA1UdIwQY
MBaAFNDcVwvByWS6t+1WxnOqQFGPhUV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80N2Q2OTItZGQ0MC00YmYyLTg5M2Yt
ZDM4ZGQwYjc4OTA5LzEvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80N2Q2OTItZGQ0MC00YmYyLTg5M2YtZDM4ZGQwYjc4OTA5
LzEvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8ICx182
lPy10+u5+q+3q6yRmBEvTxp2icMWbT4g8sPpRSkCXxugqhljM449XbozgG/7TeS8
QCTeJQYVHRRklf/yuF6sGWNq7WbjmRNLoMkF3XeN3TlZkpCBGtf46wIseoK/tvCZ
dEaqfCtxH0+J5g+iyPU6FQJWYtyZTSQJEXaiPaOsij+5N/bY2G89QtDBaF0LhWqZ
79cE9jvCn44hty5kKXtDrFdoKdbGzJP/Q+yI0PsLW6tY4+/CRXmOdxXH3ozLj+ET
Dpx7KaAb9BC7M5eBzSzgUsZO4hLv+FFFNyR1XIUooxo36eFOzG/1WhQ30XPj8Hah
pW60lafmUx9RzA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 14:28:41 2026 by rpki-client