Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier: 4XIcWRunTCk+eRLJbGtIacNzWqIKq73YdIBN1fDzAbM=
Subject key identifier: 86:AF:BF:4D:7C:19:60:A6:40:07:D7:5D:D0:CF:C9:39:0C:A9:6D:7C
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer: /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial: 01A0D1922DC9ED13C0985B10E25A49F018A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number: 0942
Signing time: Thu 24 Sep 2026 04:00:13 +0000
Manifest this update: Thu 24 Sep 2026 04:00:13 +0000
Manifest next update: Fri 25 Sep 2026 04:00:13 +0000
Files and hashes: 1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: uKbnsbfb+BOyHaRUwEtOuVhojsroe7FXwQA1JvkigQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:2d:c9:ed:13:c0:98:5b:10:e2:5a:49:f0:18:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Validity
Not Before: Sep 24 04:00:13 2026 GMT
Not After : Sep 25 04:00:13 2026 GMT
Subject: CN=86afbf4d7c1960a64007d75dd0cfc9390ca96d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:bc:c4:45:09:c0:db:32:c6:2f:7d:3b:be:
34:4a:20:5e:cd:db:08:cf:44:a6:c2:40:8b:e3:37:
6f:52:60:af:1e:49:13:3f:30:6e:4e:05:ce:7b:b6:
dd:51:8a:8b:0b:f3:ef:38:9d:e6:96:c7:c7:2e:fe:
74:e1:73:b6:c8:71:b6:3c:1b:50:72:ec:85:b6:e9:
85:e7:a9:92:fd:a5:23:f8:f9:e3:15:9b:cb:04:60:
43:3f:cd:ee:92:dd:21:1c:bd:45:74:45:6a:a0:7f:
48:f9:c9:17:90:da:54:2c:b2:75:98:e6:8d:12:56:
f6:62:b4:af:17:58:84:e8:9e:ac:a6:9a:9a:07:53:
65:23:84:45:13:1e:95:a7:68:40:78:70:80:67:34:
f3:8d:81:88:0a:48:9f:49:c3:48:89:9d:25:6f:e7:
b3:57:d5:95:99:88:0f:e2:2f:07:5d:cf:49:05:42:
f2:07:cb:30:5f:ed:15:81:9f:a0:17:38:b0:42:a7:
c7:48:d2:cb:68:10:bf:1b:ce:3b:00:77:0a:37:d0:
7c:a6:fa:48:7e:56:ea:b3:46:14:e5:52:02:81:0e:
b0:c3:e0:bc:fc:fd:c1:31:fb:f8:60:53:f5:0a:b2:
ad:ba:0a:4a:9b:b8:cc:0d:3c:34:ac:37:e6:12:a5:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AF:BF:4D:7C:19:60:A6:40:07:D7:5D:D0:CF:C9:39:0C:A9:6D:7C
X509v3 Authority Key Identifier:
keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:88:60:d0:5e:2b:5b:9a:57:4f:09:08:ef:cd:68:ef:60:98:
5c:7f:1a:86:8c:a9:60:b1:eb:4d:97:77:5c:54:40:11:7c:fc:
c1:0e:cb:58:1f:1f:8d:67:0e:3a:60:64:6d:68:bc:f6:d2:15:
02:ff:6b:8d:a9:06:9d:ec:56:7a:4f:b1:56:a4:89:fb:47:11:
4c:62:7e:8a:65:09:2b:14:fa:8d:da:9a:01:57:8a:63:d3:79:
1e:e8:12:50:62:5b:8e:50:41:a3:77:3b:a1:f0:94:21:1a:4d:
11:bc:b7:bd:2f:3a:05:17:a4:e7:e7:8d:e8:d1:89:8f:63:97:
98:bf:5e:45:f1:78:cd:0b:86:22:56:6f:14:99:04:7b:2b:11:
3e:26:80:d1:89:69:a5:58:6d:65:e1:4c:07:6b:31:0f:f3:0d:
7e:8d:d5:02:65:0b:25:35:8b:25:87:91:fc:26:27:a4:c2:80:
f1:73:06:66:30:26:18:2f:b9:91:30:45:9a:b8:1d:db:3e:f4:
1c:c4:37:f3:d8:c9:e2:97:47:7a:fd:dc:39:3b:cb:82:5e:46:
99:d9:e6:8c:96:20:29:de:19:7c:d2:9c:7a:bc:88:53:34:68:
46:ab:f4:60:dd:43:c9:24:d8:fa:37:c8:17:9e:35:66:6b:3a:
bb:74:93:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:07:37 2026 by rpki-client