Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.mft
File: 00aPL6qp053JwDKNMP0DFGbVD3I.mft (raw, json)
Hash identifier: IxLywf4by5VwsqzwLTOGgq0N7aNtSwwxwgmc1GR4k/g=
Subject key identifier: 42:60:5D:73:22:6A:B3:6E:99:26:E7:65:52:E3:84:9D:60:FF:AF:81
Authority key identifier: D3:46:8F:2F:AA:A9:D3:9D:C9:C0:32:8D:30:FD:03:14:66:D5:0F:72
Certificate issuer: /CN=d3468f2faaa9d39dc9c0328d30fd031466d50f72
Certificate serial: 01A0C9A1BE5E3E9ED11B6CB32638353F2940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00aPL6qp053JwDKNMP0DFGbVD3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.mft
Manifest number: 0111
Signing time: Tue 22 Sep 2026 15:00:15 +0000
Manifest this update: Tue 22 Sep 2026 15:00:15 +0000
Manifest next update: Wed 23 Sep 2026 15:00:15 +0000
Files and hashes: 1: 00aPL6qp053JwDKNMP0DFGbVD3I.crl (hash: GMzmuImjVlh/fj/gdefswCvi+3Wb6NtNWFA366RD9O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/00aPL6qp053JwDKNMP0DFGbVD3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:be:5e:3e:9e:d1:1b:6c:b3:26:38:35:3f:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3468f2faaa9d39dc9c0328d30fd031466d50f72
Validity
Not Before: Sep 22 15:00:15 2026 GMT
Not After : Sep 23 15:00:15 2026 GMT
Subject: CN=42605d73226ab36e9926e76552e3849d60ffaf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:a1:3d:ee:72:95:27:6a:73:40:23:9f:0f:
d0:26:24:43:f0:df:1e:dd:3a:b7:04:d2:c3:ff:e5:
29:a7:8f:6f:a9:75:b8:69:ee:9d:95:99:71:0a:b9:
bd:7d:34:3b:21:fc:5c:f4:5c:bb:06:13:cd:6a:95:
c5:34:39:65:de:f3:22:c3:02:1b:ba:e7:0a:e7:b2:
61:c2:d6:79:28:c7:2a:d6:69:a4:89:ff:be:f7:63:
f3:fe:29:69:a8:0f:33:42:1f:24:90:ef:18:0e:7e:
cc:9c:5c:68:18:2c:0f:a1:7c:f5:73:25:97:b0:08:
ac:8c:24:3c:56:e0:0b:8b:0e:2f:61:19:9d:b7:45:
4a:de:1e:ef:18:a7:01:d8:5a:db:ee:b7:7a:50:aa:
35:b2:48:df:8e:f1:53:8e:ad:f0:b9:d5:16:7c:8a:
52:5f:04:19:b0:56:b8:8e:80:f3:16:4f:2e:c7:88:
c3:28:b7:ec:93:4f:e9:40:8f:2f:bf:f6:90:f5:02:
2b:c2:0a:50:41:5a:f8:08:bb:b6:f3:df:33:79:15:
62:1c:b8:12:20:27:b6:59:19:d7:39:4e:42:7a:08:
71:dd:29:62:79:37:44:6b:39:ed:54:9c:3c:0a:37:
54:2d:93:ce:a1:6d:1a:ce:08:b4:3b:1d:a0:a9:f8:
02:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:60:5D:73:22:6A:B3:6E:99:26:E7:65:52:E3:84:9D:60:FF:AF:81
X509v3 Authority Key Identifier:
keyid:D3:46:8F:2F:AA:A9:D3:9D:C9:C0:32:8D:30:FD:03:14:66:D5:0F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00aPL6qp053JwDKNMP0DFGbVD3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/af95fa-e280-4ee0-a487-baafe855f2b2/1/00aPL6qp053JwDKNMP0DFGbVD3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ff:a8:07:56:dd:08:fa:12:87:60:c0:6e:70:19:c9:a8:78:
d9:c8:2d:2d:0f:dd:26:6d:33:ff:a8:76:d6:ce:2c:72:b0:e1:
c3:2f:16:57:f1:ec:5d:e1:17:88:b1:5d:c5:67:1a:e7:5f:30:
f3:63:84:65:7b:bc:35:c4:cb:aa:ab:62:29:90:a8:b8:8f:bc:
0a:0d:cd:c3:4e:91:93:e3:ad:46:fa:95:bd:f1:37:fb:0d:ee:
40:b8:97:80:0d:71:50:55:c7:f7:bc:89:8c:0c:3b:dc:38:83:
ae:29:d1:de:3c:3f:76:46:22:f8:e1:61:89:31:57:18:9f:ec:
89:fc:19:79:56:a9:3d:cb:0d:c0:b3:5f:9e:d7:86:d9:df:1b:
6f:d7:8f:65:de:53:db:24:7f:71:cf:d0:8b:6f:96:39:3d:15:
b6:7e:28:6f:cc:f7:3f:0f:c2:29:f1:2a:37:08:9d:e6:17:cb:
f3:11:51:70:87:b4:8d:94:49:f7:53:05:87:c1:be:76:8d:23:
c1:e8:e0:4a:3c:1f:9e:be:ef:ce:44:df:28:5d:5c:90:0c:00:
75:15:7c:ee:32:2f:67:d7:83:d2:fb:38:03:f0:a2:6d:c5:ed:
92:42:dd:0f:a3:1c:2f:d1:97:71:45:97:95:00:89:7b:43:c5:
46:1d:89:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:05:35 2026 by rpki-client