Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
File: 898KdcnvaBuNIzZ9vo7a0FPzvZU.mft (raw, json)
Hash identifier: ai1W3iGKz3KxMlGPqRf/N8luvKq+XXagoKKOlOlYKEg=
Subject key identifier: D5:3A:8D:24:5F:91:4C:E6:E2:15:47:D8:DC:9C:F0:1E:9C:C6:9C:15
Authority key identifier: F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
Certificate issuer: /CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Certificate serial: 01A0D192BB01FBD4A8656B35EA261A47D7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
Manifest number: 1A6A
Signing time: Thu 24 Sep 2026 04:00:49 +0000
Manifest this update: Thu 24 Sep 2026 04:00:49 +0000
Manifest next update: Fri 25 Sep 2026 04:00:49 +0000
Files and hashes: 1: 898KdcnvaBuNIzZ9vo7a0FPzvZU.crl (hash: YUIQmmDF8hEDM8UZ4cr/z8hzV17lhwSTH6Zvasa10sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:bb:01:fb:d4:a8:65:6b:35:ea:26:1a:47:d7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Validity
Not Before: Sep 24 04:00:49 2026 GMT
Not After : Sep 25 04:00:49 2026 GMT
Subject: CN=d53a8d245f914ce6e21547d8dc9cf01e9cc69c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:05:c6:eb:aa:41:b0:51:a5:c6:d3:1e:a9:36:
aa:7b:62:1d:de:87:2a:a5:26:a1:5a:6d:d6:0d:e1:
61:d2:7b:5d:45:75:26:d6:c2:1a:64:42:b4:ed:03:
59:e3:5a:64:54:ea:7e:75:3b:37:74:d4:35:35:61:
ec:36:a5:9b:0b:13:8e:32:33:8c:e0:00:9b:5e:ea:
11:2d:ec:a0:fa:d3:a4:f9:7e:55:e9:76:4c:a2:51:
ac:64:9f:d1:7e:06:ba:b1:38:50:bb:ca:e6:52:20:
e0:95:79:ce:d2:38:0e:97:d6:96:e9:7d:8b:3c:4d:
80:7c:03:04:ce:23:50:73:86:1e:74:a5:7b:59:5b:
ba:cf:52:84:83:53:e6:47:d6:bf:e2:57:d1:4c:2b:
da:a2:b3:6d:09:c3:ca:25:68:d8:8f:5a:44:b1:8c:
d7:ee:0e:8c:2e:ca:3c:fe:4a:df:a3:32:f2:4a:45:
35:0f:c2:71:0c:c6:27:41:23:e4:ed:7e:4d:25:a8:
fd:22:ca:cb:8d:6f:80:fc:ec:5c:04:c8:96:4b:37:
38:50:3d:e5:06:38:35:d1:57:87:00:fd:cc:6e:2f:
7d:cb:80:be:2a:34:64:f5:27:a9:83:c4:2c:3d:a2:
a4:79:d2:72:50:14:19:9f:91:d6:41:3e:cf:7e:ff:
a6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3A:8D:24:5F:91:4C:E6:E2:15:47:D8:DC:9C:F0:1E:9C:C6:9C:15
X509v3 Authority Key Identifier:
keyid:F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f4:25:8a:f5:29:46:b1:cb:36:f7:ad:2d:54:ba:e3:8f:8c:
87:e1:0f:66:c4:6d:e9:6b:52:5f:43:39:ad:dd:1b:d4:47:96:
52:c4:4a:95:c6:6e:29:95:6e:8b:ff:0a:ee:c0:02:29:fc:39:
e0:a6:de:b1:67:95:c5:3f:15:73:94:8b:97:84:da:7b:2c:09:
6f:17:c4:a2:71:ff:59:e3:00:4d:f7:cc:3d:b7:0a:3a:ef:10:
04:03:b6:fc:8a:91:de:66:bc:39:db:8d:20:d2:16:79:49:22:
a9:50:a7:f4:14:b1:1c:18:cd:9b:47:70:ac:ca:e6:db:8f:c1:
f7:70:e7:22:c8:52:36:19:4a:05:a7:f8:49:6e:6b:c5:9b:10:
7d:2d:b2:74:16:aa:20:3d:a9:59:e0:76:d5:c8:54:c5:fe:7c:
04:ff:bd:30:3c:e6:51:c9:88:08:0f:63:30:f9:05:64:9c:46:
c0:87:c2:4f:b4:9f:3f:5e:65:56:06:be:fe:b6:80:90:1f:71:
67:01:62:5a:b7:82:10:8f:21:d6:74:4f:94:ba:54:b9:0c:1f:
f6:ce:ce:23:68:0d:8c:f7:58:43:11:9a:d5:79:01:c8:ae:e1:
3f:74:16:98:b2:c5:38:8f:31:bb:4a:0c:e4:10:6e:83:46:9e:
ee:37:dc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:47:33 2026 by rpki-client