Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
File: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft (raw, json)
Hash identifier: w5xKc/o7YJuwhYy0zbRKgw4dnaSoxlFCg6FwCMdKKVc=
Subject key identifier: 80:17:58:23:C0:14:75:E0:17:5B:28:D5:CB:70:CA:7C:4D:DC:49:A4
Authority key identifier: D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
Certificate issuer: /CN=d217978586bff3a6777d55a9a9635841516d43b4
Certificate serial: 01A00025C3E376518921B6CAB9E5E6775C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
Manifest number: 0F93
Signing time: Fri 14 Aug 2026 12:01:09 +0000
Manifest this update: Fri 14 Aug 2026 12:01:09 +0000
Manifest next update: Sat 15 Aug 2026 12:01:09 +0000
Files and hashes: 1: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl (hash: QebNPcr8XTYbItDprTQEbl7S89yzpc9NPTGa+fVIYhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:c3:e3:76:51:89:21:b6:ca:b9:e5:e6:77:5c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217978586bff3a6777d55a9a9635841516d43b4
Validity
Not Before: Aug 14 12:01:09 2026 GMT
Not After : Aug 15 12:01:09 2026 GMT
Subject: CN=80175823c01475e0175b28d5cb70ca7c4ddc49a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dd:df:f0:c1:7d:fa:19:3f:e9:03:36:8a:35:
22:c3:c4:a9:f9:35:a9:89:77:b0:42:7b:27:73:3d:
e8:45:dd:8c:07:20:10:ee:f6:52:39:22:0d:04:5a:
71:5b:a5:da:9a:29:39:14:20:59:aa:e4:1b:ba:d8:
0e:9b:5e:92:38:72:ed:d5:db:40:ad:8c:0e:0b:dc:
46:5e:b7:8b:6d:16:f5:8f:ba:db:df:2c:ae:83:9c:
f2:b5:1f:7d:3a:8d:fa:d4:9f:66:a9:57:d6:45:7b:
5e:50:01:0d:8f:45:4f:28:b7:11:08:2b:28:cc:42:
ef:d7:cd:0b:d8:cc:b5:61:33:2c:35:44:b5:63:e0:
64:f7:fb:5e:ec:5f:ed:7f:71:10:77:56:51:b4:6b:
d8:58:11:6e:0c:85:55:5a:b8:8d:2f:0a:f8:5a:3f:
82:03:c7:49:91:9b:da:5f:77:2a:43:c7:c1:cd:e0:
45:79:e9:d1:88:8a:69:03:19:61:43:6a:72:4c:2c:
23:60:ee:f0:b0:c8:16:44:73:e1:70:4a:29:27:be:
11:42:6c:9b:61:31:11:4f:bd:d2:02:49:7b:7a:ee:
77:eb:53:53:1c:94:2f:c0:65:a7:7c:c7:8d:46:5c:
8d:47:07:d2:b2:d8:9b:4a:5b:f9:d0:aa:58:66:f4:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:17:58:23:C0:14:75:E0:17:5B:28:D5:CB:70:CA:7C:4D:DC:49:A4
X509v3 Authority Key Identifier:
keyid:D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:1e:7b:76:d6:a7:48:26:4d:16:2e:59:2a:e7:07:aa:fe:11:
41:93:f2:f7:d0:80:3e:cf:44:b0:bb:61:e5:45:a9:58:fc:bf:
ab:55:4c:b8:c1:06:b9:8b:d4:05:5c:9b:f8:fc:09:75:9c:9b:
3d:c5:e1:f0:02:4f:9a:ab:07:68:c7:34:97:89:1c:95:f2:b7:
73:09:e7:96:89:7a:03:32:15:3f:12:f1:af:31:2f:15:c9:48:
de:1d:c4:d3:3c:90:a4:9f:ac:78:6c:84:d7:dd:8d:89:8d:27:
f8:45:bb:3c:08:c7:eb:48:18:c7:46:70:9c:2f:3a:41:54:d3:
16:22:4a:8c:db:34:ee:a9:61:7a:2a:6d:df:c5:f1:55:8e:6c:
32:0f:e5:f9:a1:46:b8:67:90:c5:c7:a8:2f:21:6e:b5:ee:b7:
32:ec:be:3b:90:a8:b9:5c:62:34:43:d9:81:c5:88:e6:71:18:
b4:7f:f7:c9:a8:b0:10:b4:d6:4d:91:fc:e1:00:2f:eb:cb:46:
89:af:75:bd:b3:b4:39:42:8e:81:74:48:aa:8d:6e:64:75:50:
60:6e:99:db:62:8e:15:f8:fe:8a:66:41:fe:46:fe:17:23:69:
ea:1a:36:96:69:1f:3c:3b:5e:8c:1e:a1:14:c1:9f:ef:f7:46:
ed:1b:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:55 2026 by rpki-client