Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File: 65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier: 2bfve3o9cY47STEvFUtQSMSo3Bru+56qTtF9zbEf8Tk=
Subject key identifier: BA:A5:82:8A:E5:51:A5:95:44:8E:FB:A3:CE:39:1F:42:10:41:E3:0E
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer: /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial: 01A13E9461CAA963F6BDF131673A2BFD09D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number: 1A33
Signing time: Thu 15 Oct 2026 08:01:14 +0000
Manifest this update: Thu 15 Oct 2026 08:01:14 +0000
Manifest next update: Fri 16 Oct 2026 08:01:14 +0000
Files and hashes: 1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: rtv8BD79dZu6RxsgWGu/n5y+7y4smoN4kaFH1RTRasQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:61:ca:a9:63:f6:bd:f1:31:67:3a:2b:fd:09:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
Validity
Not Before: Oct 15 08:01:14 2026 GMT
Not After : Oct 16 08:01:14 2026 GMT
Subject: CN=baa5828ae551a595448efba3ce391f421041e30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:5d:ef:d3:42:a6:b7:13:28:76:14:bd:32:
27:fc:ac:9e:5c:ce:9c:b0:df:8a:16:6f:07:6c:b4:
81:9a:4a:a4:5b:07:6f:b3:c3:fc:e6:42:40:40:ce:
53:f7:1e:b3:ac:57:94:2f:96:17:90:c3:b3:a1:56:
db:8c:ec:9d:b6:59:54:a3:49:58:01:5c:ce:2c:c3:
cd:e5:57:24:92:1e:7e:24:52:a1:51:e6:65:2b:23:
e8:1d:4b:22:7b:66:c0:ef:d4:4d:e8:ea:21:8a:50:
ba:af:2c:84:a4:d8:4d:2d:22:44:13:57:d5:38:02:
9b:6e:f7:ae:df:f4:d3:4d:b4:61:c9:b6:ff:77:fc:
7d:af:b3:1d:32:1e:2d:d0:d9:d1:7e:89:cf:28:ce:
a1:dd:e8:25:bc:7f:c2:a4:94:b4:b3:1d:7b:17:c3:
ee:49:ed:c3:9b:69:45:c2:3c:d0:47:14:d5:03:b9:
e1:64:08:75:65:fd:f2:33:f9:1a:b9:00:19:46:94:
69:8b:45:fd:f9:87:5a:77:79:4d:f4:b3:20:af:75:
4d:b9:d2:a8:a1:75:8b:c6:5a:8a:64:e4:b5:62:68:
63:9e:a5:94:2b:1d:3c:cb:8a:1d:18:a3:5c:fc:c7:
4d:1e:9a:a5:03:5f:40:ee:0d:65:55:28:14:d4:5c:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A5:82:8A:E5:51:A5:95:44:8E:FB:A3:CE:39:1F:42:10:41:E3:0E
X509v3 Authority Key Identifier:
keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0a:c2:13:75:a0:c6:a1:3d:ac:89:33:86:f5:40:22:9c:7d:
cd:a4:8d:15:70:13:0c:6d:37:c0:22:63:ca:d2:d0:67:21:d2:
08:93:f9:3e:b5:28:51:0c:db:ac:80:7b:c3:6b:62:8f:e7:71:
e3:fc:dc:e1:6b:53:d4:0b:fd:e0:b1:f1:0a:e6:78:f2:e5:bf:
d4:c1:85:30:fd:5d:d4:17:3e:4e:42:f6:7e:74:e4:fe:f7:ef:
52:11:a1:4e:22:c7:17:1a:0a:2b:ce:42:86:97:0c:45:4e:82:
b7:a0:7f:14:47:d5:54:44:ca:d7:90:7c:f5:ae:ba:1e:d6:d6:
36:4a:fc:cf:a3:49:52:17:da:30:3e:b2:d9:59:c4:f4:01:cd:
f5:e6:66:1d:de:c2:15:99:2b:a9:29:6a:d0:1a:3d:33:12:5a:
09:8f:08:50:ec:c6:66:9a:0f:7e:f8:95:7b:74:51:5d:c5:e2:
71:b3:03:56:a2:80:ce:fd:f2:26:e4:63:5b:18:c7:cd:fd:83:
e8:03:31:a1:a2:93:3b:39:f6:65:b9:88:a3:4f:be:d0:e1:b1:
3f:f9:80:2e:f5:12:e2:1f:31:c4:e0:6c:b9:08:c6:a5:ce:55:
55:96:bb:51:89:73:48:d7:01:d3:78:5d:5b:a3:32:bd:bf:03:
00:81:25:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:30 2026 by rpki-client