Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/9669c9-7351-4994-89ec-68b068a65736/1/0XlssTcCGZhlHyrEERLLjwWyoKA.mft
File: 0XlssTcCGZhlHyrEERLLjwWyoKA.mft (raw, json)
Hash identifier: mkdjJIAAvRCL0pwexmfcvErxOHBwu+rtPyOYhjI3PRU=
Subject key identifier: 49:1D:5A:B2:D3:16:EA:15:E3:FF:0E:88:3A:F2:3A:A5:88:04:46:4D
Authority key identifier: D1:79:6C:B1:37:02:19:98:65:1F:2A:C4:11:12:CB:8F:05:B2:A0:A0
Certificate issuer: /CN=d1796cb137021998651f2ac41112cb8f05b2a0a0
Certificate serial: 01A0CF6CE53A579E1A0129FA0BDDD0E0F331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XlssTcCGZhlHyrEERLLjwWyoKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9669c9-7351-4994-89ec-68b068a65736/1/0XlssTcCGZhlHyrEERLLjwWyoKA.mft
Manifest number: 98
Signing time: Wed 23 Sep 2026 18:00:15 +0000
Manifest this update: Wed 23 Sep 2026 18:00:15 +0000
Manifest next update: Thu 24 Sep 2026 18:00:15 +0000
Files and hashes: 1: 0XlssTcCGZhlHyrEERLLjwWyoKA.crl (hash: WPu7z9KMzG3zNwRMl4wEfJXQCIlVSoqbFWYLt6xAOcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9669c9-7351-4994-89ec-68b068a65736/1/0XlssTcCGZhlHyrEERLLjwWyoKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9669c9-7351-4994-89ec-68b068a65736/1/0XlssTcCGZhlHyrEERLLjwWyoKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0XlssTcCGZhlHyrEERLLjwWyoKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:e5:3a:57:9e:1a:01:29:fa:0b:dd:d0:e0:f3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1796cb137021998651f2ac41112cb8f05b2a0a0
Validity
Not Before: Sep 23 18:00:15 2026 GMT
Not After : Sep 24 18:00:15 2026 GMT
Subject: CN=491d5ab2d316ea15e3ff0e883af23aa58804464d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:a1:4e:74:7b:28:eb:bc:04:6f:d3:48:2c:
2b:3b:3c:34:60:31:60:93:f9:a4:9d:94:c3:cc:23:
f4:24:b8:32:14:65:a5:bb:89:3e:54:ca:66:25:df:
e7:31:d7:a5:cf:df:1c:4a:d2:79:c9:1b:78:48:15:
ad:44:b1:1e:18:e5:ec:e2:da:83:70:b8:df:2a:a0:
93:67:b2:0f:08:ed:8f:3f:cb:f3:9c:0a:79:2f:7f:
c4:a0:0b:76:15:d4:5d:30:e3:84:7b:fe:cb:cc:29:
49:e5:65:bd:e0:e0:a8:19:5e:c9:b9:a3:b6:22:98:
72:cf:5a:b0:f1:0b:15:d4:71:8e:af:af:83:63:38:
26:eb:07:16:01:84:c8:bc:43:0e:f6:a8:ae:9b:28:
6e:d3:db:dd:49:a6:bd:ef:b5:e0:77:63:e8:80:e4:
ba:ee:20:35:2e:1b:bf:55:49:5a:c2:80:73:92:ec:
3a:fe:62:ff:e4:25:9c:aa:6d:fe:a5:f0:9d:ac:67:
cf:8b:4c:d4:c3:62:f2:53:36:0c:f8:e0:4a:ff:27:
47:0a:4b:94:d5:32:3b:83:f2:90:15:3d:d9:6b:7f:
b7:54:de:6f:00:7f:90:08:d4:af:49:20:6a:c1:ac:
c5:31:b4:a9:d7:c8:a7:53:f4:31:93:a2:e9:60:9e:
49:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1D:5A:B2:D3:16:EA:15:E3:FF:0E:88:3A:F2:3A:A5:88:04:46:4D
X509v3 Authority Key Identifier:
keyid:D1:79:6C:B1:37:02:19:98:65:1F:2A:C4:11:12:CB:8F:05:B2:A0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XlssTcCGZhlHyrEERLLjwWyoKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9669c9-7351-4994-89ec-68b068a65736/1/0XlssTcCGZhlHyrEERLLjwWyoKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9669c9-7351-4994-89ec-68b068a65736/1/0XlssTcCGZhlHyrEERLLjwWyoKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:7e:88:6b:8b:14:dd:72:ac:18:70:ae:74:a6:5e:53:09:11:
f6:f0:b9:98:1d:79:83:b1:fd:f0:28:82:f9:7a:42:50:dc:57:
7f:dd:87:17:66:2a:72:65:f1:9b:96:1d:1f:7f:1b:20:8e:8d:
5b:3a:9a:1d:05:ed:ae:f9:4b:2e:dd:c2:d7:59:b9:0c:23:0b:
d4:09:4c:b8:db:88:39:93:18:b5:77:46:1e:37:50:6e:a4:f0:
eb:51:68:62:99:27:b6:1a:d2:fd:29:48:5c:e1:dd:f1:91:f1:
e1:e7:dc:aa:cb:fe:f5:10:81:da:8f:e1:b2:3b:d4:6a:cb:91:
fa:f7:35:ce:35:05:05:d1:98:4f:af:16:8d:8b:24:d7:0e:6e:
15:cd:99:cb:59:67:87:ed:59:44:3d:a4:44:3d:48:70:d0:18:
5c:0d:f8:3c:06:21:3e:bf:53:58:13:51:b8:d2:fd:3e:92:cd:
45:24:96:99:e3:9f:9a:ad:e9:02:33:4a:e9:52:bb:f5:bc:d1:
58:38:93:2f:18:49:58:29:7a:cd:cc:44:32:8a:bc:c3:41:32:
63:60:08:de:a8:c8:a3:d3:54:84:5b:86:1d:9f:dc:43:69:f7:
3a:31:d3:6e:db:b8:4f:17:8c:bb:64:1a:c3:35:2f:e9:18:84:
fc:af:ff:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:24:10 2026 by rpki-client