Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
File: 0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json)
Hash identifier: 9iOOp4o3JL1YDAthxGGV4BJLI7XdY3pnL7rIn+bIRzI=
Subject key identifier: 66:FE:D6:0D:2B:14:1D:DD:AE:5A:0B:41:2F:8A:6F:DA:B9:CB:1C:F0
Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
Certificate issuer: /CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Certificate serial: 019F19433B08FDCB50EB4D95AF439DF46CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
Manifest number: 1986
Signing time: Tue 30 Jun 2026 16:01:04 +0000
Manifest this update: Tue 30 Jun 2026 16:01:04 +0000
Manifest next update: Wed 01 Jul 2026 16:01:04 +0000
Files and hashes: 1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: U5vKAiJ/lejXjrwNbGMhUdqPDzYfNeYBWvlNKkdEnQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:3b:08:fd:cb:50:eb:4d:95:af:43:9d:f4:6c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Validity
Not Before: Jun 30 16:01:04 2026 GMT
Not After : Jul 1 16:01:04 2026 GMT
Subject: CN=66fed60d2b141dddae5a0b412f8a6fdab9cb1cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:45:92:0e:7f:1b:7f:0c:c0:76:50:63:84:
6f:6a:da:ce:12:d9:e9:24:48:4a:31:a2:81:ca:cc:
b0:54:3a:b5:20:2c:55:1d:66:e4:85:a4:80:ff:46:
13:8c:33:c4:a8:89:85:23:9f:74:27:95:df:66:49:
b7:7b:64:f4:5f:18:f3:43:ef:99:ef:3f:ea:22:42:
a2:24:6c:8b:79:3b:cf:57:7e:cb:d5:41:8e:ec:30:
a9:10:05:e5:f1:35:5c:43:d2:59:f8:c7:64:f8:a4:
0d:fb:c2:bf:55:bb:6b:72:8b:43:ad:ab:0b:f2:8f:
15:ce:54:6d:e9:bb:ec:aa:42:1b:48:5e:7c:58:22:
f6:e2:00:0c:a2:d1:7e:cb:01:ec:76:c3:09:cb:d4:
95:b1:a1:65:cc:4b:12:72:17:a4:6a:ac:96:59:28:
1b:38:93:01:86:61:48:c6:13:e7:08:b8:66:0c:3f:
ab:a6:df:66:fe:f6:84:bd:5d:ba:0e:73:d7:30:f2:
b1:e7:88:d8:b3:71:ea:bb:7d:45:0f:b8:92:71:0e:
23:1f:fb:bf:7e:94:ff:04:05:32:66:ca:ec:7a:54:
aa:03:43:c4:63:44:f8:c7:6c:12:e5:53:74:5d:ce:
d3:97:e5:1d:6c:73:93:b8:68:64:69:d1:eb:02:cb:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FE:D6:0D:2B:14:1D:DD:AE:5A:0B:41:2F:8A:6F:DA:B9:CB:1C:F0
X509v3 Authority Key Identifier:
keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9d:de:e5:f1:e2:83:37:c7:08:56:6a:80:43:4e:71:1e:eb:
ed:27:b0:7d:91:46:73:ce:7a:81:ca:12:33:b2:37:4c:a4:f4:
e1:49:bb:2f:27:e3:f5:74:39:8e:90:16:cc:dc:f5:25:f2:03:
9a:52:95:da:5c:f8:12:f7:72:0b:58:c8:02:ce:39:a1:ce:86:
3d:f7:30:ca:13:35:fb:b4:3b:6b:c8:b0:cd:b9:32:28:b1:65:
4f:75:e5:07:c7:19:5b:0a:d3:79:4e:fb:6d:71:b3:d1:b5:77:
6c:58:9a:6a:04:31:af:80:9f:0b:15:ad:06:b8:3e:eb:a5:2d:
d1:05:82:f1:49:2a:bb:c8:21:b1:7e:02:94:c8:cf:f4:02:a3:
53:45:13:4e:2a:38:a8:82:4b:40:8c:8f:0d:c8:ce:d3:45:24:
ba:ad:26:d5:96:48:ad:7e:c8:62:b3:d9:b6:6d:ef:df:b0:ac:
ee:32:67:05:40:37:ea:16:02:ba:9d:1c:9c:ed:14:ed:76:0b:
37:0c:de:5e:a9:dd:e8:43:97:d0:da:75:c9:3e:f4:ad:dd:f3:
22:6d:21:fe:90:09:3b:a3:8c:aa:5b:a0:1a:0d:47:b0:99:ce:
a1:a9:af:82:23:14:92:7c:9a:28:1b:76:33:e4:40:cf:a2:27:
ec:69:29:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:11 2026 by rpki-client