Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
File: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft (raw, json)
Hash identifier: za7eAB+RL2VSuWAnHE2CItmNEfKmzMYxS9xBVKLQT28=
Subject key identifier: EB:F7:D0:93:A1:EF:AF:FB:A4:AE:56:69:EB:99:24:21:D7:83:1B:46
Authority key identifier: D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
Certificate issuer: /CN=d217978586bff3a6777d55a9a9635841516d43b4
Certificate serial: 01A180740EFB22E78BEE80564FF56096195A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
Manifest number: 105A
Signing time: Wed 28 Oct 2026 03:00:51 +0000
Manifest this update: Wed 28 Oct 2026 03:00:51 +0000
Manifest next update: Thu 29 Oct 2026 03:00:51 +0000
Files and hashes: 1: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl (hash: FR1SIXglX1d0PLf9LnRnjy0Hzp/XmXBxJ9dhK5/f96U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:0e:fb:22:e7:8b:ee:80:56:4f:f5:60:96:19:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217978586bff3a6777d55a9a9635841516d43b4
Validity
Not Before: Oct 28 03:00:51 2026 GMT
Not After : Oct 29 03:00:51 2026 GMT
Subject: CN=ebf7d093a1efaffba4ae5669eb992421d7831b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:f3:46:31:ee:69:79:bf:fb:d9:21:b0:50:
4d:d9:b5:ab:98:7e:54:3d:35:f3:f1:b2:a3:d2:71:
f6:3e:b7:2e:c2:9e:9c:41:f1:df:70:30:09:85:ad:
7d:4d:f8:a5:69:06:27:e9:7a:80:26:dc:2a:ae:e6:
9a:91:c4:f8:91:22:2c:68:d3:b7:8f:ac:ab:9b:ba:
8c:6a:ec:b3:e4:12:05:21:dc:e9:01:e9:10:92:a6:
81:24:37:f1:50:62:14:36:f9:5f:2b:36:91:31:88:
87:40:0b:76:ac:c6:50:7a:b1:ef:0d:b4:ad:8c:7e:
4b:51:4f:f6:2c:61:e4:23:68:97:69:b3:86:9f:7f:
fd:bf:2d:09:3b:62:83:1d:21:6e:9f:d9:91:7a:e6:
99:bd:df:af:cf:4a:28:4a:7e:90:a9:ed:4f:fc:87:
8f:98:6d:6c:f9:3b:1f:91:bf:07:0c:a0:ff:b4:b2:
c8:8e:21:06:40:84:02:f0:06:48:38:5c:8c:ed:ff:
ef:fd:bc:60:8e:2f:03:9f:6f:c4:e6:88:63:ab:55:
64:ff:0d:96:94:39:2d:b0:7a:88:6d:a9:dd:14:2b:
79:7d:7f:49:05:72:41:d9:6a:33:bd:c5:b0:f4:b3:
b4:6f:f0:0a:49:f7:1b:39:33:fa:5d:a2:56:49:e4:
05:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F7:D0:93:A1:EF:AF:FB:A4:AE:56:69:EB:99:24:21:D7:83:1B:46
X509v3 Authority Key Identifier:
keyid:D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:55:7b:af:5f:46:52:90:00:da:26:77:e3:85:b1:a3:07:e8:
7d:f8:51:9a:2b:85:cf:4a:ce:2f:f8:f8:c9:cc:99:57:9a:d6:
6e:0e:cd:27:b5:ce:21:c9:86:45:c6:6a:5e:f2:f6:5b:e8:3d:
5c:9c:c0:cd:89:eb:56:f3:e9:ef:fb:2e:59:69:b3:3a:2c:a0:
c9:27:64:dd:e5:33:a2:30:c9:c9:2d:40:cd:0a:4a:43:da:d4:
67:e5:af:22:7a:11:0d:74:08:1e:c2:af:73:7d:52:1e:9a:72:
74:76:cf:7f:cb:ac:e6:84:8b:68:aa:86:01:e5:f2:a7:87:8c:
35:ce:83:28:68:7b:5b:cb:51:79:36:fe:f8:e5:77:af:10:40:
c2:15:c4:de:e3:ce:4a:af:2f:9f:1e:a1:17:2b:26:97:83:f9:
95:27:0c:fc:5d:7b:19:d9:c7:0a:06:6d:98:58:95:90:5d:cd:
7d:9f:e8:6d:af:7a:b3:56:b9:3e:60:8e:d7:05:78:a0:6d:32:
83:9e:69:d6:f9:db:b8:c0:df:2b:38:57:fd:66:c1:3e:e4:bf:
07:fc:8f:d1:fd:17:2c:2d:16:c9:fd:0d:81:85:c7:23:71:9d:
95:52:82:b5:d7:e0:d4:fb:1d:b2:2f:2a:ce:39:d8:48:c6:84:
73:72:c7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:12:25 2026 by rpki-client