Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
File: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft (raw, json)
Hash identifier: oPSVaSx302G9FKPUEBN8XbFoT2bOoFkIIt/T5doNvLs=
Subject key identifier: F6:3C:90:ED:51:D0:05:9D:B8:30:DB:DA:0B:4D:EC:C1:8C:8B:1D:9F
Authority key identifier: D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
Certificate issuer: /CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Certificate serial: 01A0E1742CA220CE3512296C51C40ACCFDE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
Manifest number: 17AB
Signing time: Sun 27 Sep 2026 06:01:22 +0000
Manifest this update: Sun 27 Sep 2026 06:01:22 +0000
Manifest next update: Mon 28 Sep 2026 06:01:22 +0000
Files and hashes: 1: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl (hash: OGSzl7s/7xDvZK6yU0Bi04RShWe0tiMC3OptQN+zNLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:2c:a2:20:ce:35:12:29:6c:51:c4:0a:cc:fd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Validity
Not Before: Sep 27 06:01:22 2026 GMT
Not After : Sep 28 06:01:22 2026 GMT
Subject: CN=f63c90ed51d0059db830dbda0b4decc18c8b1d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:bb:42:13:68:db:25:34:03:19:eb:60:60:
62:25:f9:09:30:c6:e7:ef:90:d0:43:6d:13:37:ae:
bd:32:0d:2a:fc:d8:e5:49:43:a4:cc:ee:f0:e2:62:
d6:2f:f8:ac:7e:fe:b7:d6:1e:8d:b3:96:1a:ae:c4:
48:6f:04:39:76:0f:c0:44:af:99:e8:63:1b:d1:3a:
7d:9f:ab:b6:aa:db:6e:1b:5f:e8:a3:84:77:4e:95:
d4:2c:ec:33:43:b6:bb:0f:e3:90:43:7e:c9:7b:5b:
80:57:c1:f3:06:11:ff:a0:e7:f9:34:78:67:8a:2f:
32:01:5a:2d:19:f5:d7:63:a4:98:f2:67:ef:58:d1:
11:e3:4a:9a:cb:7c:d7:44:7e:97:68:c8:87:87:da:
d6:b5:03:6d:c5:32:83:cc:3d:33:0e:48:87:e5:ca:
bf:ff:ca:57:68:c2:e9:2d:53:a4:46:41:be:7e:48:
77:b9:7b:52:7e:3f:58:61:30:3c:3c:96:61:0b:ff:
b9:6a:0f:79:02:f4:94:d2:2e:24:fc:30:7a:9e:67:
e0:2b:f7:de:80:ff:e0:bd:d2:15:7e:ce:58:1e:70:
59:09:b0:74:84:05:68:2d:c4:66:2d:1b:cf:7f:a7:
0b:1e:12:9f:d4:63:b7:84:ed:83:e4:0c:dd:69:65:
ae:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3C:90:ED:51:D0:05:9D:B8:30:DB:DA:0B:4D:EC:C1:8C:8B:1D:9F
X509v3 Authority Key Identifier:
keyid:D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ab:09:6c:33:63:42:38:90:93:54:cc:20:e9:d6:1c:e2:82:
34:c8:b0:26:9d:92:d7:5a:bd:7d:a8:b8:ca:40:e1:49:13:fe:
37:f5:fc:f5:75:16:e0:53:6b:e3:4b:76:98:78:71:97:c5:b0:
5e:79:29:9a:94:b5:c4:3c:b8:c0:5c:d7:35:9a:c2:dd:68:dd:
47:8d:f1:63:db:21:44:a3:02:d3:4a:50:79:32:53:03:c0:9f:
bd:7a:29:0c:a6:cf:6e:5a:7f:fc:19:29:81:33:dc:84:ba:80:
c0:90:84:44:fe:31:52:55:0a:a2:6b:0d:c1:40:a9:85:96:f9:
c2:77:97:29:a4:2a:89:c1:84:46:75:9e:37:c4:15:24:3d:b0:
56:fa:c7:45:42:4f:cf:88:fd:1e:3c:a1:ad:de:86:fa:0e:6e:
c5:61:61:7c:85:ac:09:81:08:77:73:a9:6d:35:f6:ce:b7:2e:
e6:5a:fd:32:e2:38:f2:a2:fa:3c:7d:c5:99:ff:51:29:90:10:
8a:e4:77:ce:44:62:9e:21:1b:2d:1a:54:a3:a9:fa:57:b7:54:
23:70:42:54:9e:7f:bd:40:38:ee:ed:6a:64:56:8c:dd:b0:42:
e3:05:31:3a:a2:54:f6:53:77:aa:99:fb:87:7e:a0:06:a8:0f:
b3:f7:2b:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhdCyiIM41EilsUcQKzP3mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNzBkNGRkZTIzYTkyMTY2YTY3YmIxM2Y2MGJjNzBiNjY3
ZDg2OTUwHhcNMjYwOTI3MDYwMTIyWhcNMjYwOTI4MDYwMTIyWjAzMTEwLwYDVQQD
EyhmNjNjOTBlZDUxZDAwNTlkYjgzMGRiZGEwYjRkZWNjMThjOGIxZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn267QhNo2yU0AxnrYGBiJfkJMMbn
75DQQ20TN669Mg0q/NjlSUOkzO7w4mLWL/isfv631h6Ns5YarsRIbwQ5dg/ARK+Z
6GMb0Tp9n6u2qttuG1/oo4R3TpXULOwzQ7a7D+OQQ37Je1uAV8HzBhH/oOf5NHhn
ii8yAVotGfXXY6SY8mfvWNER40qay3zXRH6XaMiHh9rWtQNtxTKDzD0zDkiH5cq/
/8pXaMLpLVOkRkG+fkh3uXtSfj9YYTA8PJZhC/+5ag95AvSU0i4k/DB6nmfgK/fe
gP/gvdIVfs5YHnBZCbB0hAVoLcRmLRvPf6cLHhKf1GO3hO2D5AzdaWWuKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPY8kO1R0AWduDDb2gtN7MGMix2fMB8GA1UdIwQY
MBaAFNFw1N3iOpIWame7E/YLxwtmfYaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFhEVTNlSTZraFpxWjdzVDlndkhDMlo5aHBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81NmE2ZWMtMzdiZS00MzY4LTk0MzQt
N2E1NzE0ZjhlNmRhLzEvMFhEVTNlSTZraFpxWjdzVDlndkhDMlo5aHBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC81NmE2ZWMtMzdiZS00MzY4LTk0MzQtN2E1NzE0ZjhlNmRh
LzEvMFhEVTNlSTZraFpxWjdzVDlndkhDMlo5aHBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6sJbDNj
QjiQk1TMIOnWHOKCNMiwJp2S11q9fai4ykDhSRP+N/X89XUW4FNr40t2mHhxl8Ww
XnkpmpS1xDy4wFzXNZrC3WjdR43xY9shRKMC00pQeTJTA8CfvXopDKbPblp//Bkp
gTPchLqAwJCERP4xUlUKomsNwUCphZb5wneXKaQqicGERnWeN8QVJD2wVvrHRUJP
z4j9Hjyhrd6G+g5uxWFhfIWsCYEId3OpbTX2zrcu5lr9MuI48qL6PH3Fmf9RKZAQ
iuR3zkRiniEbLRpUo6n6V7dUI3BCVJ5/vUA47u1qZFaM3bBC4wUxOqJU9lN3qpn7
h36gBqgPs/crtg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:43:32 2026 by rpki-client