Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
File: 0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft (raw, json)
Hash identifier: NWSbPBUFYCf//5OSLCczsJ+I0uxv5t4Cv1a6k3n3Kcc=
Subject key identifier: 49:E7:42:EC:25:D5:7C:9A:0D:99:D2:A0:CB:F0:42:B5:5C:C0:D0:7C
Authority key identifier: D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D
Certificate issuer: /CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
Certificate serial: 01A1404C17173090ED426D7B4B6581C49A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
Manifest number: 19E1
Signing time: Thu 15 Oct 2026 16:01:30 +0000
Manifest this update: Thu 15 Oct 2026 16:01:30 +0000
Manifest next update: Fri 16 Oct 2026 16:01:30 +0000
Files and hashes: 1: 0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl (hash: WI/E4dGNcv4P9lUHW72tcBM0TPOmn9DtKIS92S42xiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:17:17:30:90:ed:42:6d:7b:4b:65:81:c4:9a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
Validity
Not Before: Oct 15 16:01:30 2026 GMT
Not After : Oct 16 16:01:30 2026 GMT
Subject: CN=49e742ec25d57c9a0d99d2a0cbf042b55cc0d07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:4c:2d:9b:34:1a:e9:75:7d:2f:8d:f7:fd:
25:90:03:89:a1:a8:32:78:db:f1:52:f1:61:71:6c:
7e:fe:63:bd:22:0a:c1:91:1d:5c:93:cb:36:f6:8c:
99:21:4c:a8:51:82:ff:98:81:47:c9:4c:8a:ef:90:
6b:4a:2c:fe:b1:dc:ad:bb:a8:a5:b1:7e:81:63:bd:
f1:51:12:14:cf:50:d4:f8:83:94:5a:82:ea:bc:e2:
45:b1:ef:c3:48:f5:f8:2d:dd:6b:d0:a1:53:8c:f2:
6f:a9:ad:13:92:19:03:da:91:4f:2b:4e:aa:e6:f2:
ad:4c:92:56:42:11:69:9b:02:57:a5:f1:07:64:27:
ac:78:0a:e0:b7:89:8f:88:0f:4f:7d:c7:bf:17:85:
74:35:28:b2:fb:d4:63:0d:89:69:55:5b:a2:17:a9:
93:a3:41:af:4d:35:eb:94:c5:dd:8e:88:e2:92:18:
ec:3d:bc:7c:2c:e9:c5:a6:aa:bb:3c:38:b4:13:e9:
e3:d0:a0:d0:5e:f4:04:2a:21:fd:a1:f9:2a:33:8c:
8a:72:93:16:76:62:9c:98:83:75:bf:c2:18:30:fb:
66:fd:a4:8f:35:2f:07:af:cb:ce:d3:fd:a7:41:bf:
c3:6c:ad:1a:a2:0f:e4:01:fe:78:10:66:ec:81:8e:
26:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E7:42:EC:25:D5:7C:9A:0D:99:D2:A0:CB:F0:42:B5:5C:C0:D0:7C
X509v3 Authority Key Identifier:
keyid:D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d6:b7:d0:7c:99:48:99:7b:17:61:04:9a:d6:4e:dd:92:73:
04:13:c4:2b:3d:99:e3:97:00:df:9f:b7:9e:8d:12:1e:fc:43:
74:71:da:ff:75:15:10:9a:7f:7d:c1:04:97:a5:1f:fd:f3:fb:
10:a9:a6:4f:66:3c:ac:f4:ba:67:fe:d2:18:ef:76:b6:fe:e0:
35:c2:9a:24:bb:b5:74:9c:92:d5:6b:33:74:24:08:09:cf:7a:
c0:09:0d:b2:69:ea:9f:b3:3d:74:aa:7d:66:5b:12:ec:30:29:
fa:6c:de:15:c0:53:44:29:97:81:3d:35:82:0f:6e:4f:85:2c:
5f:75:81:a8:ff:3c:0a:55:79:e1:fb:11:ef:8b:59:34:e5:2b:
56:e0:7b:43:27:21:8e:f0:4f:fb:60:23:b1:ab:a6:17:fa:2d:
af:2a:f0:a2:fe:26:83:a9:24:1f:39:cd:a3:37:5d:26:5d:a0:
15:1d:a5:8e:10:b3:e2:00:68:7b:4a:2b:15:6a:2c:3a:2a:f5:
03:3b:13:9d:34:a6:70:22:53:8a:e4:36:29:f4:e7:0b:91:08:
d6:76:7e:a8:2a:ac:18:9b:bc:6a:80:45:80:78:c0:fe:37:5d:
5f:61:14:da:4b:6b:a9:8b:82:38:a0:5e:8b:a6:cb:25:f3:c7:
4e:23:62:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:49 2026 by rpki-client