Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
File: 189nO-jwMimh57bmFhbzl0ziL_4.mft (raw, json)
Hash identifier: /vWiMAzXsoSK9nkHSbIkStbRdAVOeu6BcvE1O2HLGjM=
Subject key identifier: 1B:C7:2F:BC:08:E0:41:7C:DB:DC:F9:74:83:1F:39:9A:67:FF:A2:48
Authority key identifier: D7:CF:67:3B:E8:F0:32:29:A1:E7:B6:E6:16:16:F3:97:4C:E2:2F:FE
Certificate issuer: /CN=d7cf673be8f03229a1e7b6e61616f3974ce22ffe
Certificate serial: 01A11A87B6C3BF542CE6A787752677DBDFEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/189nO-jwMimh57bmFhbzl0ziL_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
Manifest number: 0237
Signing time: Thu 08 Oct 2026 08:01:03 +0000
Manifest this update: Thu 08 Oct 2026 08:01:03 +0000
Manifest next update: Fri 09 Oct 2026 08:01:03 +0000
Files and hashes: 1: 189nO-jwMimh57bmFhbzl0ziL_4.crl (hash: fA56H69mAow1QiQMjn9AMssHoLF1XA/wRHU92xhDfQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/189nO-jwMimh57bmFhbzl0ziL_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:87:b6:c3:bf:54:2c:e6:a7:87:75:26:77:db:df:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cf673be8f03229a1e7b6e61616f3974ce22ffe
Validity
Not Before: Oct 8 08:01:03 2026 GMT
Not After : Oct 9 08:01:03 2026 GMT
Subject: CN=1bc72fbc08e0417cdbdcf974831f399a67ffa248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:61:65:05:d6:bb:11:43:d7:03:cf:22:cc:07:
c4:3c:e6:68:85:a2:1d:60:e2:ae:b3:98:51:da:3a:
f8:bf:b4:42:5e:82:c7:5a:86:b8:5d:46:48:1b:47:
e5:9e:57:2b:23:ef:95:66:b5:80:b5:05:48:90:24:
7d:1c:e0:e1:88:48:81:e9:4a:cb:2a:ac:7a:26:c7:
69:33:f7:1a:19:23:74:34:25:c2:e1:2a:e8:cb:b8:
38:80:79:08:a7:36:2d:b0:77:94:a0:84:73:07:5e:
9f:ab:e6:8d:b3:f7:e5:a9:7f:5d:ae:3e:ae:fb:1b:
01:04:0a:43:35:6c:55:f3:84:ed:85:b3:1f:45:27:
b9:2b:26:83:c2:99:24:8c:90:c8:97:27:46:09:6d:
48:9c:7f:54:4b:89:4e:02:94:be:53:ee:a5:40:ed:
73:43:fd:f8:35:8a:73:95:fa:70:cd:2c:b8:a7:9c:
1b:45:10:67:f6:f9:6c:44:74:0c:2c:64:8b:8c:3a:
c7:a8:5e:8f:11:c9:74:df:da:93:39:f0:ca:da:a9:
a2:3c:b9:06:06:d2:d7:16:72:2d:a7:47:09:b1:9d:
9a:76:fe:f2:95:83:86:ee:e0:f7:bd:9c:f7:b6:5c:
61:5e:d8:9e:f7:e7:bb:4a:e3:2b:51:16:81:a1:38:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C7:2F:BC:08:E0:41:7C:DB:DC:F9:74:83:1F:39:9A:67:FF:A2:48
X509v3 Authority Key Identifier:
keyid:D7:CF:67:3B:E8:F0:32:29:A1:E7:B6:E6:16:16:F3:97:4C:E2:2F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/189nO-jwMimh57bmFhbzl0ziL_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:12:f0:cb:92:43:75:ed:45:c3:6f:63:d2:10:9d:62:28:87:
79:77:54:f7:da:4b:e7:92:e6:5d:fd:92:4e:af:6c:c4:65:22:
99:8e:9e:ba:06:e7:cf:6a:f9:ed:ca:b6:3d:d2:c1:f9:86:e6:
bd:f3:91:6f:e5:16:96:75:65:19:28:39:27:74:a2:23:32:00:
d5:79:1a:83:98:fe:96:06:f6:c5:50:ce:f0:15:54:7e:95:0a:
cd:7b:74:5c:0c:fc:cb:a3:b6:cc:2d:f8:86:da:14:2a:ff:4d:
00:9a:44:67:a1:43:94:8e:32:7d:e8:5f:fa:81:85:e5:8b:46:
d0:a8:24:3f:ec:40:ad:30:9a:7f:bc:c7:91:bd:a3:4b:06:eb:
27:a9:15:89:f9:99:b4:8d:13:d8:26:76:e2:22:be:d7:d4:81:
35:62:d8:eb:32:f5:0a:97:79:a8:f3:16:37:b3:e2:b0:87:8c:
95:20:e2:ee:b1:46:2c:be:0a:76:dc:a5:79:0d:70:cb:ab:a9:
ee:09:ae:bc:f8:c0:a7:22:c2:9a:e9:8b:bd:6b:63:aa:97:2f:
36:69:43:82:2e:e5:d3:66:55:bc:84:a2:74:b4:8a:8d:19:58:
c9:25:e9:8e:71:ea:5f:43:c8:10:8d:8a:a2:39:22:ad:45:71:
3e:fb:d9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:27:34 2026 by rpki-client