
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
File: 0ur89N6SC5zmRdbmlt8IqosFUZs.mft (raw, json)
Hash identifier: 2oUFtSWrNtXL9HIXfu4c0+/rWSJOaSCf7EApXxancbQ=
Subject key identifier: 6B:DE:37:B5:CA:16:E3:84:79:7D:64:2E:ED:2D:81:9B:73:82:AE:45
Authority key identifier: D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
Certificate issuer: /CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Certificate serial: 01A13E94ED7B9D141465A66BEE44EAF03B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
Manifest number: 17A6
Signing time: Thu 15 Oct 2026 08:01:49 +0000
Manifest this update: Thu 15 Oct 2026 08:01:49 +0000
Manifest next update: Fri 16 Oct 2026 08:01:49 +0000
Files and hashes: 1: 0ur89N6SC5zmRdbmlt8IqosFUZs.crl (hash: X5PuUAh2eqStSfUpAJV4TGppx0Tyx4r4ujRJ4CBHNPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:ed:7b:9d:14:14:65:a6:6b:ee:44:ea:f0:3b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Validity
Not Before: Oct 15 08:01:49 2026 GMT
Not After : Oct 16 08:01:49 2026 GMT
Subject: CN=6bde37b5ca16e384797d642eed2d819b7382ae45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:61:4b:a4:e4:b2:72:f9:9d:51:05:da:cb:c1:
6f:3e:c9:eb:a8:f3:dc:a3:d3:0a:0a:4a:4f:da:3d:
02:cd:72:7a:13:0d:90:0c:d6:27:66:98:5e:54:99:
77:3e:fe:3d:3d:2d:e4:fb:c5:00:4f:07:99:e1:4e:
76:e4:32:28:f3:fe:26:82:ab:d5:0a:98:04:7f:ea:
71:aa:ed:89:85:a7:81:fd:98:50:28:0b:6f:79:2e:
70:32:43:90:3b:fe:d1:02:4f:2c:ad:33:bf:61:4e:
85:58:1b:c9:1b:09:be:79:85:ce:aa:8b:70:cd:98:
fc:a2:4a:4c:f8:9b:9e:6b:87:ce:08:05:d3:37:f4:
1a:67:55:f2:5a:71:a6:73:f4:12:7b:02:4b:72:41:
79:25:d6:db:1e:db:a0:81:b9:5a:b5:9a:4b:db:11:
5a:72:e2:d2:c4:9f:1d:00:5a:31:00:43:ae:0d:35:
ea:76:64:8c:75:31:bb:9a:a4:98:e8:88:ce:15:de:
1e:2b:21:e4:ae:42:77:82:76:53:8a:a3:73:72:0e:
19:b5:43:b1:2b:a5:62:37:2a:e2:f8:01:a5:5c:8f:
f2:43:7d:b8:58:d5:66:03:24:37:95:31:1c:dc:a0:
ee:af:88:94:27:7b:31:b0:dd:54:b6:2e:d0:fd:e4:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DE:37:B5:CA:16:E3:84:79:7D:64:2E:ED:2D:81:9B:73:82:AE:45
X509v3 Authority Key Identifier:
keyid:D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:35:dd:53:c9:be:f2:18:4a:1b:8c:9e:02:3d:8e:34:55:85:
92:3c:19:df:b0:8e:af:4c:57:08:7f:f6:f5:0e:fa:90:01:ec:
11:00:6a:b3:ad:35:8f:8b:dc:56:01:fa:21:61:cd:81:64:54:
63:7a:7d:b7:5a:8b:0a:35:84:c5:76:f3:2d:e2:99:a5:ba:d5:
82:25:43:b7:57:26:1d:39:1a:23:e5:bd:03:e1:08:81:68:43:
87:e1:98:4d:e4:5c:3e:9b:85:87:7b:87:17:e4:92:64:9d:4f:
f4:7a:cc:69:a6:47:e7:9d:57:d6:6c:fb:59:b5:dc:05:2a:c5:
bc:00:2d:4a:d0:23:2d:03:02:1b:ec:26:de:bd:e9:cb:e2:aa:
c2:e7:a5:cf:57:75:fd:f3:dc:56:b4:e3:36:6d:c4:5a:15:f9:
88:d6:95:a3:84:b9:f2:96:9b:e6:12:e3:4e:04:ff:bf:c9:c9:
a1:cf:9b:6e:e1:a1:e0:f7:97:f4:45:ea:09:2a:b1:dd:64:da:
3e:c1:c8:79:ba:c4:a4:d1:b4:4d:ad:74:5c:03:ab:e8:3b:c1:
6e:fc:a1:af:90:b4:6c:5a:c3:76:9f:71:70:96:fd:7c:af:80:
aa:36:72:b2:59:44:ca:bb:56:61:49:24:7b:dc:b3:2d:43:e5:
4e:3a:44:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:45 2026 by rpki-client