Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.mft
File: 071kNvoORRSIST9pLHbb_fZUo9U.mft (raw, json)
Hash identifier: nKQpWDpWPuvy1n2P049/pWySxL3KFkF2UeLVhinJrTM=
Subject key identifier: 25:56:0B:39:B4:AE:32:A3:6D:30:51:04:73:3B:B6:BE:06:48:F0:6F
Authority key identifier: D3:BD:64:36:FA:0E:45:14:88:49:3F:69:2C:76:DB:FD:F6:54:A3:D5
Certificate issuer: /CN=d3bd6436fa0e451488493f692c76dbfdf654a3d5
Certificate serial: 01A1DD947B7E208D5C37CE2474209D3F4EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/071kNvoORRSIST9pLHbb_fZUo9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.mft
Manifest number: 0170
Signing time: Sun 15 Nov 2026 05:00:57 +0000
Manifest this update: Sun 15 Nov 2026 05:00:57 +0000
Manifest next update: Mon 16 Nov 2026 05:00:57 +0000
Files and hashes: 1: 071kNvoORRSIST9pLHbb_fZUo9U.crl (hash: PRa6/yeZ4RalXpFwefBuUdDWVWS1TcALfgZxVp6JWLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/071kNvoORRSIST9pLHbb_fZUo9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:7b:7e:20:8d:5c:37:ce:24:74:20:9d:3f:4e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3bd6436fa0e451488493f692c76dbfdf654a3d5
Validity
Not Before: Nov 15 05:00:57 2026 GMT
Not After : Nov 16 05:00:57 2026 GMT
Subject: CN=25560b39b4ae32a36d305104733bb6be0648f06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:f9:41:cd:ce:a3:04:d0:30:b6:bf:ac:d5:
7f:19:be:2b:4f:fe:b4:27:17:80:59:2b:83:03:49:
ef:49:50:78:46:ed:d3:39:5d:63:02:43:60:3b:8b:
dd:1c:cd:17:a9:b3:c9:93:05:6c:4d:56:c6:8e:3b:
7b:01:fe:f4:29:e9:b6:6d:47:27:d2:b5:d0:ad:03:
cf:83:6e:41:00:f6:c1:10:e5:bf:70:41:e8:a6:4f:
06:2a:73:c6:1b:3c:93:d6:80:c3:e9:2e:c0:73:ed:
d8:8d:48:b2:f9:aa:ea:bd:13:63:4d:16:39:bf:7c:
b3:3d:bb:34:3e:7d:c6:e5:3e:a1:50:14:15:40:27:
18:71:af:35:15:1e:59:1f:b3:71:3d:95:6a:02:94:
93:42:02:c0:2b:fc:02:cc:a1:87:d3:5a:c8:ac:f0:
ec:15:bb:90:09:e1:ee:ac:5e:14:d2:d7:4f:a5:80:
1c:a4:a4:96:ca:ab:15:ed:f9:db:ea:2e:28:60:08:
ca:d5:38:e2:4c:94:6a:55:be:ce:1d:1e:94:50:a5:
c4:65:42:9e:49:a0:45:be:05:42:6a:1f:36:e1:be:
82:21:f0:93:09:cf:26:96:40:85:e6:9d:20:cf:86:
97:4f:23:ed:fb:06:93:b9:2f:d0:6a:26:c3:54:31:
4c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:56:0B:39:B4:AE:32:A3:6D:30:51:04:73:3B:B6:BE:06:48:F0:6F
X509v3 Authority Key Identifier:
keyid:D3:BD:64:36:FA:0E:45:14:88:49:3F:69:2C:76:DB:FD:F6:54:A3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/071kNvoORRSIST9pLHbb_fZUo9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/da24d8-0e35-4b85-8688-7d2581919301/1/071kNvoORRSIST9pLHbb_fZUo9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1e:bd:13:88:50:e8:ac:a4:be:2e:b0:bd:f0:21:7b:ad:78:
41:66:46:ca:0d:24:97:bc:8b:1d:12:8f:75:6e:19:e4:be:8f:
d4:d4:3e:77:ad:b6:5a:db:ec:95:1b:52:fe:0b:78:ee:6a:dd:
a3:82:6f:c8:95:0b:59:66:34:24:94:e5:22:8d:c5:4e:b0:d0:
9b:58:4c:d8:c9:6b:3f:b2:4f:9a:d9:ff:0b:11:43:1f:80:0b:
1b:c9:7e:7f:98:59:f7:79:a5:89:65:48:a8:f4:ec:6e:dd:5c:
4b:60:46:fd:2e:df:c7:d5:56:47:5c:89:af:54:e0:b2:9a:39:
c9:e1:09:16:6d:07:80:28:3e:04:78:93:3d:74:db:54:ea:9f:
37:2f:f4:22:b1:24:ec:cd:31:db:a5:15:8e:9d:2b:d4:92:34:
6c:68:3e:0c:01:1a:26:0b:4c:b3:73:7d:dd:83:9a:7e:bc:ff:
ff:49:44:c7:d4:de:df:89:54:9c:79:a5:b1:0c:7a:2e:72:8b:
46:45:74:dc:ee:1c:14:44:1b:81:2b:45:56:7c:c7:d5:ba:51:
42:08:fd:60:f7:21:bc:41:7a:59:0c:e4:70:49:85:09:43:dc:
81:85:2f:66:d0:35:58:5a:5d:42:8f:b6:8c:65:54:e8:8d:35:
d9:ed:28:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:04:48 2026 by rpki-client