Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
File: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft (raw, json)
Hash identifier: MMNdFyXEF97LoIToNStalBKc0j99sGWc4/gRs1ZNwPI=
Subject key identifier: DF:29:23:E1:79:8F:DC:7F:E3:A9:16:70:F8:5D:43:A9:79:96:98:76
Authority key identifier: D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
Certificate issuer: /CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Certificate serial: 019D258445630CF03A5A902954BA215626A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
Manifest number: 15BC
Signing time: Wed 25 Mar 2026 15:01:58 +0000
Manifest this update: Wed 25 Mar 2026 15:01:58 +0000
Manifest next update: Thu 26 Mar 2026 15:01:58 +0000
Files and hashes: 1: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl (hash: raCnc0qfhghLawccUSykcPtGLxVkkEN6OA7iCfqqo4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:45:63:0c:f0:3a:5a:90:29:54:ba:21:56:26:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Validity
Not Before: Mar 25 15:01:58 2026 GMT
Not After : Mar 26 15:01:58 2026 GMT
Subject: CN=df2923e1798fdc7fe3a91670f85d43a979969876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2a:37:2f:fa:b9:30:41:8b:ef:c7:62:7d:09:
04:85:1b:88:4a:6d:9f:26:bb:72:ca:e2:e6:12:3a:
4a:dc:97:05:26:25:50:72:7e:59:51:60:c8:a9:52:
f5:23:0e:30:4a:d6:36:08:9b:da:98:b9:59:3f:cc:
c2:17:aa:7c:55:cc:e8:7d:e6:11:f3:04:10:06:30:
89:93:a6:12:46:27:96:ab:46:88:a4:e2:e4:07:08:
d1:8c:33:9b:c3:31:91:76:f1:12:5b:0d:cc:82:48:
0d:06:32:4d:1a:26:1e:fc:30:53:ba:69:1a:62:87:
89:81:48:1f:9a:76:4d:09:1e:0b:01:a3:19:4b:3c:
f9:9e:e4:2e:11:76:bc:e3:ea:3e:e2:8c:e6:a7:7e:
e7:b2:cd:b9:23:e8:13:13:94:07:1b:80:33:a0:8b:
b4:6a:06:72:0a:ce:59:e2:94:e4:e9:54:ef:27:e5:
e4:6b:a5:d2:45:38:0e:dc:f1:30:96:42:01:43:7e:
e5:a3:9f:d4:9a:9b:10:9c:ec:cd:14:57:67:29:1d:
01:ee:7b:c8:b0:e4:e8:b4:00:81:bd:5d:8d:c3:8b:
67:d9:bd:3c:68:00:38:77:0b:85:6a:f5:2d:e0:fd:
a4:e3:18:f7:f5:71:61:81:af:2e:e1:bb:72:04:b0:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:29:23:E1:79:8F:DC:7F:E3:A9:16:70:F8:5D:43:A9:79:96:98:76
X509v3 Authority Key Identifier:
keyid:D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a0:b3:39:a7:60:05:f4:12:e0:4d:2b:fd:91:0e:fc:fe:10:
bf:8c:60:df:a1:86:57:60:2c:b6:ce:16:bf:ac:e4:3f:87:a6:
b1:ee:e7:34:b4:42:9c:93:e4:16:6f:1d:01:d5:78:c4:77:65:
79:c6:ab:b1:b7:8f:0a:b5:37:6e:a0:13:ff:fa:60:24:f3:79:
7c:5d:17:6c:b0:76:85:74:88:95:42:f1:10:31:33:58:c3:fa:
09:20:29:de:e3:cd:f6:40:64:a9:30:bb:1b:99:48:cd:d7:64:
e7:b1:3e:86:06:df:64:29:ab:6a:b8:6e:d3:0b:df:26:63:f7:
35:25:b6:a8:d8:bb:d7:fd:db:af:34:e2:d6:8f:67:e5:4a:f5:
08:a0:b1:5a:ac:d5:75:f9:94:e9:3d:6b:d8:94:49:c0:79:c9:
61:96:76:da:74:c5:ad:da:b3:28:f4:d3:7c:31:91:46:92:6b:
b2:f5:7a:0f:90:33:66:36:aa:3e:ad:c2:50:94:6c:11:ea:b2:
77:8d:01:89:88:64:1c:c3:8a:b3:2d:92:ea:52:14:1d:b4:49:
34:78:d4:a3:cd:1a:32:28:71:6c:a8:33:50:11:91:60:83:d0:
8a:2b:12:19:5b:e3:a8:d1:45:f4:2a:06:c5:af:a5:1a:61:2b:
d7:0c:b2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:35 2026 by rpki-client