Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
File: 41wFcLO3dz0eEYgufdLGJVN-sJw.mft (raw, json)
Hash identifier: 34m+o5zi79xMGsBccZRtjeWhNzaElj3vA/m/kTHiduQ=
Subject key identifier: 14:99:CA:D8:22:6D:02:9D:FD:0A:06:86:57:6C:EA:A6:6D:85:6F:9B
Authority key identifier: E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
Certificate issuer: /CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Certificate serial: 01A0CFA413B4B031E07A49BD53D2C32B1193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
Manifest number: 17A3
Signing time: Wed 23 Sep 2026 19:00:31 +0000
Manifest this update: Wed 23 Sep 2026 19:00:31 +0000
Manifest next update: Thu 24 Sep 2026 19:00:31 +0000
Files and hashes: 1: 41wFcLO3dz0eEYgufdLGJVN-sJw.crl (hash: rX2Ow1jZ0rPTNvqcw2T1DAD8jQGJxhuiP5cFHU/sP4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:13:b4:b0:31:e0:7a:49:bd:53:d2:c3:2b:11:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Validity
Not Before: Sep 23 19:00:31 2026 GMT
Not After : Sep 24 19:00:31 2026 GMT
Subject: CN=1499cad8226d029dfd0a0686576ceaa66d856f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:a7:64:d8:50:96:18:b9:a6:b1:97:52:b5:
d6:fe:da:c9:40:6f:84:67:83:4a:3d:26:b4:b8:40:
e3:82:1e:ec:5c:ed:dc:73:a6:e9:44:30:4d:56:21:
04:60:73:41:05:ac:fe:9f:21:e1:d3:33:20:73:81:
70:3e:71:b3:d4:47:ff:d3:d7:a7:f5:1b:a8:a5:ef:
c3:fa:c5:01:37:07:13:49:83:c5:67:02:a1:05:7b:
18:d0:f9:77:6a:56:1d:cd:7b:43:ec:46:80:3a:a2:
c0:ae:73:50:04:0b:87:73:a2:6e:d7:a4:3a:e3:ed:
da:b1:01:05:1e:d8:cd:ee:f7:a8:5a:73:43:3c:ab:
cf:94:79:71:1b:94:0c:78:43:39:e6:aa:d6:16:4a:
15:65:1f:5f:9d:18:1f:dd:3c:34:a0:84:5e:65:57:
d7:d6:ae:d9:e0:c9:85:a7:c1:95:00:43:4a:b5:8f:
27:c7:ae:01:d5:9f:de:7a:a5:ad:2f:d3:3e:17:d3:
bf:21:f8:19:11:a7:56:45:ea:39:32:01:1c:bb:c0:
67:6a:2b:63:d1:93:6f:0a:04:d2:d0:f2:25:8b:fc:
15:fb:73:60:82:73:30:2e:d3:34:e7:e3:11:f6:01:
97:31:a9:9c:71:24:75:92:c8:a6:32:62:03:1a:19:
97:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:99:CA:D8:22:6D:02:9D:FD:0A:06:86:57:6C:EA:A6:6D:85:6F:9B
X509v3 Authority Key Identifier:
keyid:E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:57:74:f9:9a:ec:4d:5b:f2:e8:5b:e7:11:0e:cf:48:b7:4c:
0a:ea:79:ef:6e:d0:48:52:0e:30:30:8d:55:1d:24:36:9c:0c:
1f:6f:56:82:5a:64:95:bc:25:f6:6c:1f:a5:e7:9f:c7:f5:27:
79:85:8a:26:00:16:5e:0b:be:23:82:e7:76:91:8f:3d:cc:e9:
54:39:fd:e2:99:c5:82:ea:da:f1:ac:19:c6:2d:4c:85:25:4b:
f8:9d:9d:79:c6:a9:af:f2:d3:81:3e:b6:43:1e:e6:8c:4a:e5:
95:9c:3f:ab:1b:ca:15:61:3e:78:ba:cc:9b:1c:d8:ce:bb:34:
a6:ab:c1:3a:59:07:22:c1:10:5f:0a:84:cf:ad:27:33:fb:8b:
76:4d:a0:0d:0c:04:2d:ee:a4:f5:d4:bb:bc:6c:0e:85:46:a4:
33:ab:bb:c3:7f:4a:f9:60:04:6c:b5:a7:90:5c:94:d6:65:13:
0a:bd:e0:01:e3:d2:ff:ec:c5:c8:62:51:eb:ea:96:4d:ae:28:
be:4c:47:dc:59:30:e6:9f:e0:8e:20:11:d5:8d:a0:2c:85:70:
f9:ac:90:18:d1:30:1d:c1:14:2e:79:96:ab:22:93:24:e0:dc:
39:7e:a4:aa:c7:10:ff:91:98:02:2d:ce:00:ff:10:fa:91:12:
fe:72:43:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:58:35 2026 by rpki-client