Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier: dNPxqxCt7o6GvDuxe/azW8vOqbDZuBVU32+p5rnnvj0=
Subject key identifier: 21:44:8F:53:B2:87:D3:7D:30:C2:64:B6:F1:A4:CC:10:99:DC:F0:56
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial: 01A140832DCAF2831530E4B9372D9E1D341D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number: 10CC
Signing time: Thu 15 Oct 2026 17:01:41 +0000
Manifest this update: Thu 15 Oct 2026 17:01:41 +0000
Manifest next update: Fri 16 Oct 2026 17:01:41 +0000
Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: mf/dDIkK6DVUesvo2MhgA8je2mmKXqogy1GDmeTrgNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:2d:ca:f2:83:15:30:e4:b9:37:2d:9e:1d:34:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Validity
Not Before: Oct 15 17:01:41 2026 GMT
Not After : Oct 16 17:01:41 2026 GMT
Subject: CN=21448f53b287d37d30c264b6f1a4cc1099dcf056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:34:73:80:6e:04:bd:d1:ed:bb:d5:00:b0:
be:e5:38:fe:20:08:c3:28:6a:66:13:41:ca:31:e4:
78:79:03:e3:0a:1c:47:d2:8d:32:60:1a:b5:f6:6e:
d5:ce:5a:90:28:07:fa:dd:49:b9:b3:4c:23:cd:14:
8c:0b:85:42:9e:3a:a0:7e:36:4f:78:45:3b:75:4a:
79:b8:e0:de:fe:9a:fa:23:b2:ea:d0:52:ed:0f:32:
59:96:c8:e3:cf:18:47:0f:22:af:e7:59:34:2d:ae:
ea:1a:b9:b3:32:45:03:ce:b7:6b:83:01:18:2b:2e:
a4:41:7c:bc:66:e8:bd:83:93:bc:d2:b8:cd:4d:80:
01:52:06:74:70:09:c0:21:81:49:11:04:44:ba:f7:
9e:85:92:c9:a1:8f:ec:2f:af:35:f3:15:73:6c:94:
41:fa:3d:77:d1:fe:61:5d:9c:25:f8:43:01:eb:73:
44:97:05:61:b0:d3:19:06:10:dc:87:ad:7e:e3:26:
b8:c3:9d:18:df:4b:c0:9b:e1:f6:4f:85:0d:3e:af:
4a:59:09:8b:68:e1:1a:54:40:0c:0c:75:4c:51:f0:
37:35:25:6b:ce:1a:37:06:75:50:10:27:d1:ff:25:
9f:f9:1f:13:f6:25:fa:88:d7:53:68:ac:e7:86:be:
44:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:44:8F:53:B2:87:D3:7D:30:C2:64:B6:F1:A4:CC:10:99:DC:F0:56
X509v3 Authority Key Identifier:
keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c1:d5:48:94:de:86:f4:8e:d5:86:92:c3:24:b5:b3:05:d6:
cc:52:3e:6f:3f:19:57:01:63:90:cb:c3:7b:62:cb:b5:85:7d:
df:55:b9:65:a3:c5:88:65:a9:63:46:6c:f9:37:88:29:dd:63:
35:f1:3e:a0:b4:04:8a:98:37:5b:8b:45:0d:ba:98:51:a7:e3:
b6:25:1f:08:a7:7e:d6:06:ce:6a:d3:65:82:c2:72:42:9f:d0:
13:dd:78:aa:30:56:74:a7:9e:44:92:45:60:e7:31:90:c6:6b:
7c:d4:ad:b8:44:7f:4c:6a:25:40:5e:9d:63:24:70:e4:96:49:
00:2e:05:d0:71:b2:56:85:c0:e0:7c:9d:7b:3a:f9:d2:47:25:
97:07:56:80:b8:36:e7:45:4b:8e:9f:cb:51:c3:f3:41:b7:0e:
59:99:a8:fe:da:ff:ea:89:7b:e4:19:9d:ed:8f:86:f0:36:1d:
ef:e1:e6:c3:24:14:4c:ed:1f:d3:52:52:0d:f8:4a:13:37:94:
17:a6:92:7f:ec:93:78:63:f6:44:82:1a:5e:f6:37:e2:74:f6:
59:ba:42:f6:59:91:d4:3e:1a:76:9a:fc:15:13:34:6e:25:bd:
05:1b:af:5f:98:07:35:c5:24:cd:93:c7:a3:63:f7:30:16:55:
89:f9:8e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:08:48 2026 by rpki-client