Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
File: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft (raw, json)
Hash identifier: Ql95cbker6S6kC+RjahFTFSDnsCD2Fsb5US2Cayecfk=
Subject key identifier: 01:2E:15:1B:F1:1B:E6:2B:9C:73:26:DA:5A:C8:8B:E2:F1:98:DC:A0
Authority key identifier: D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
Certificate issuer: /CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Certificate serial: 019F8F7E243550CB8CC7510337CAD7CAD43C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
Manifest number: 16FC
Signing time: Thu 23 Jul 2026 15:00:36 +0000
Manifest this update: Thu 23 Jul 2026 15:00:36 +0000
Manifest next update: Fri 24 Jul 2026 15:00:36 +0000
Files and hashes: 1: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl (hash: Zt0rN+CLY+L3apCI7a5/G7WA+sPK24SLW45rdTqrtDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:24:35:50:cb:8c:c7:51:03:37:ca:d7:ca:d4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Validity
Not Before: Jul 23 15:00:36 2026 GMT
Not After : Jul 24 15:00:36 2026 GMT
Subject: CN=012e151bf11be62b9c7326da5ac88be2f198dca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:28:45:89:73:c8:fb:28:35:e0:51:57:40:c3:
34:e1:63:28:5a:83:23:2a:c1:14:57:71:e4:c5:64:
23:d6:e5:f6:d1:8b:44:94:f1:73:66:3d:82:28:a8:
e6:71:c2:91:39:35:35:51:66:bd:06:c3:26:36:3d:
ba:54:ac:70:38:dd:54:3c:17:ee:d6:74:5f:40:62:
17:b5:5a:9d:cb:de:b1:12:d2:fe:e7:95:ab:e7:c1:
96:85:37:a4:fb:75:0e:9c:dc:2e:cf:2b:4f:07:4a:
79:c4:ee:07:2c:98:70:47:16:a4:d1:6e:37:b1:ab:
e7:11:ef:ea:91:e1:ca:88:35:5b:1f:d2:ef:be:84:
7b:bc:7f:7a:16:76:99:de:6f:fe:02:84:a4:9a:21:
f5:5e:e2:27:71:00:44:2b:ec:8f:83:1b:5e:e4:5c:
a5:cf:90:bb:64:41:c5:47:bf:26:56:24:0b:65:3d:
6a:89:a2:47:b4:74:df:fb:ca:64:7c:eb:39:09:1b:
1b:a2:19:af:18:98:10:19:9a:e4:2f:7c:9b:56:44:
0e:32:7d:2e:8f:91:ad:2c:b0:5b:8c:aa:7d:e4:69:
88:ba:db:93:dd:26:9e:ff:63:62:31:ef:d1:1e:24:
37:f5:d9:f4:d7:1c:7d:c2:6e:90:67:28:3c:59:db:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2E:15:1B:F1:1B:E6:2B:9C:73:26:DA:5A:C8:8B:E2:F1:98:DC:A0
X509v3 Authority Key Identifier:
keyid:D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:26:57:6f:7c:70:c0:2b:51:e2:4b:d2:dc:10:38:15:ab:26:
4e:c3:51:1d:e8:91:32:57:9d:04:a1:08:a6:9e:64:8d:8d:20:
2f:49:ad:9f:9c:3c:5d:2a:7a:9e:a7:82:24:60:e2:09:87:be:
53:f9:b0:6d:88:ee:56:fb:81:6d:c9:0b:e2:df:e7:4c:3b:63:
57:05:ae:e9:79:7f:c6:db:8b:6a:ce:10:54:de:ca:93:41:80:
b4:5b:fd:82:c0:11:b9:29:2d:6a:c3:88:03:47:e9:af:32:e8:
0c:52:b1:8f:7a:b0:00:df:9a:9f:30:32:64:b1:fd:10:71:c1:
3e:05:a5:d4:00:79:49:3c:e6:59:b7:d9:73:9f:18:cb:30:47:
fa:a5:5d:60:7f:6b:67:40:35:88:42:fb:9e:24:0a:06:7b:bc:
90:e5:bc:bb:2d:c7:25:43:2c:65:4c:81:ba:f6:1f:3f:0d:cb:
98:40:19:f6:fa:56:76:29:4a:aa:b2:61:24:47:72:dc:b9:78:
12:e1:82:3f:bc:79:ae:18:f0:97:a2:98:27:b4:16:98:9f:ff:
4c:96:76:6e:ae:e9:d8:b1:6e:07:9e:ba:12:e3:80:73:53:42:
47:68:13:d5:6b:fb:40:6c:42:02:f2:a2:73:7b:de:40:bf:4c:
01:7f:5b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:23:22 2026 by rpki-client