Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
File: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft (raw, json)
Hash identifier: UlSryErMb5LWV1Sjv0DfvAEpnk2CeC9vKTRC5ZFCvaA=
Subject key identifier: B4:DC:FC:04:75:01:EC:52:E6:D6:02:08:6C:66:96:E3:AA:1B:CE:B2
Authority key identifier: D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
Certificate issuer: /CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Certificate serial: 019E1CB5587E1B9503C7F91F73A0C1DEB749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
Manifest number: 163C
Signing time: Tue 12 May 2026 15:01:47 +0000
Manifest this update: Tue 12 May 2026 15:01:47 +0000
Manifest next update: Wed 13 May 2026 15:01:47 +0000
Files and hashes: 1: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl (hash: icZoIO4EsrxbZCZdmEeD50b6lv1RURGScnHBxQvF9Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:58:7e:1b:95:03:c7:f9:1f:73:a0:c1:de:b7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Validity
Not Before: May 12 15:01:47 2026 GMT
Not After : May 13 15:01:47 2026 GMT
Subject: CN=b4dcfc047501ec52e6d602086c6696e3aa1bceb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:27:69:68:57:97:e7:6d:ad:f3:f2:22:47:4b:
62:57:f9:c1:18:fc:29:29:1f:6d:ac:74:4c:26:5c:
b4:60:e0:f5:2c:1e:92:25:86:0f:0c:db:36:1e:69:
13:aa:2c:48:0b:a6:fa:35:7e:21:e9:81:00:2d:e9:
9a:bb:2e:dd:fd:7b:f3:70:78:54:42:f4:87:96:f9:
2f:79:e6:96:5e:11:08:89:bb:60:72:62:cc:e6:9d:
b4:f3:2b:d0:b3:98:0d:56:b7:ff:31:85:53:1c:3d:
2f:1e:7f:90:00:fb:59:24:71:aa:48:06:ac:2a:f8:
5f:84:5d:71:c2:5f:91:bf:02:17:f9:d2:11:f9:38:
d4:2e:a9:d0:96:a0:3f:4c:6a:d6:38:39:6c:a3:a1:
a8:63:9a:3e:87:68:91:8d:03:c4:79:cb:50:4b:fd:
b3:f9:8f:b8:54:3a:38:25:1d:a6:ec:0d:92:8d:c4:
34:bb:be:9c:f1:04:78:c2:3b:16:79:eb:07:8a:0d:
27:90:86:70:22:26:1b:8e:23:e2:66:1c:4b:a2:bb:
4b:dc:ea:1b:5b:f2:23:71:32:e1:16:70:32:15:76:
4c:49:50:25:ce:54:5d:46:f3:b8:1f:22:85:e4:f4:
cf:54:fd:0c:07:8d:12:0d:1d:d9:fe:0e:e2:00:e9:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DC:FC:04:75:01:EC:52:E6:D6:02:08:6C:66:96:E3:AA:1B:CE:B2
X509v3 Authority Key Identifier:
keyid:D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:06:44:db:8f:5b:a1:e6:34:17:b7:e0:ca:18:13:a9:23:8b:
ba:db:0a:37:82:79:5a:8a:c6:6b:25:db:bd:4b:f7:21:ad:48:
64:24:64:29:2b:59:2a:c6:b8:a6:63:a9:bf:da:6e:00:3b:27:
81:29:51:5c:37:79:30:98:74:d2:31:d8:c6:d4:21:ec:d7:0c:
91:32:94:8e:6c:8b:f1:fe:83:36:57:4a:a0:1b:9e:2d:73:12:
87:be:b5:b5:82:fb:f3:26:eb:d4:7d:da:c1:9c:d6:83:3b:55:
e3:1e:3b:ae:23:d3:a2:d3:34:92:bc:e5:10:21:c2:d3:b7:70:
c7:9f:60:f3:c3:ef:66:9f:71:15:68:27:9e:18:fb:30:5d:1f:
9b:42:51:74:02:d2:30:96:fc:65:50:62:ad:eb:c6:98:3c:22:
23:6c:86:7a:e1:73:e2:ee:84:09:72:85:cc:d4:7d:8b:b4:4e:
48:42:d6:f3:35:d9:1e:8c:d5:0c:c0:33:d9:da:d0:d6:4e:94:
6c:7c:66:4c:08:05:ea:20:32:58:5c:14:e8:26:87:53:1d:b5:
d1:d5:9e:40:e8:f1:c4:87:f7:68:e3:06:99:0b:43:6a:62:14:
ad:d7:45:9d:92:3a:6b:6c:3e:fb:16:b9:cd:21:52:70:be:62:
e5:b8:05:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:14 2026 by rpki-client