Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
File: 0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json)
Hash identifier: EFgbknPYF/B3Flho1JuKMJjmAyJdTRV1vJcrF09rhX4=
Subject key identifier: D8:3A:45:57:09:83:D8:0B:BA:1D:B2:08:30:51:B9:CF:AC:FB:9E:A4
Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
Certificate issuer: /CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Certificate serial: 01A13DB7E04E1C740FC6293A348009CA2333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 04:00:22 +0000
Manifest this update: Thu 15 Oct 2026 04:00:22 +0000
Manifest next update: Fri 16 Oct 2026 04:00:22 +0000
Files and hashes: 1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: ulS78VGdJV5MQFAteDF2dcIh8Lwr8yAyi+VSsHWEVpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:e0:4e:1c:74:0f:c6:29:3a:34:80:09:ca:23:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Validity
Not Before: Oct 15 04:00:22 2026 GMT
Not After : Oct 16 04:00:22 2026 GMT
Subject: CN=d83a45570983d80bba1db2083051b9cfacfb9ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:2d:1e:ec:38:1b:7e:e3:8d:82:ef:20:21:
f1:13:94:2c:80:e5:5f:a7:9c:9f:ae:98:f4:71:e1:
97:c6:aa:fb:71:ad:fa:50:c8:87:fd:0f:22:08:eb:
01:4b:a5:78:4d:a0:93:20:61:95:28:62:84:70:95:
b1:4f:0a:fb:f3:85:3e:a1:42:90:c2:27:d0:b2:86:
6d:d7:d9:92:ee:20:95:6c:c7:41:ca:47:d8:12:49:
f0:cf:84:92:e3:ab:6d:2b:fc:12:33:c3:ce:66:4f:
ee:c4:84:11:41:60:1c:88:c9:f3:76:eb:05:ec:3d:
eb:4c:dc:e4:e9:03:b0:34:80:52:35:87:f3:6e:8c:
7c:fe:2c:17:24:cc:04:69:60:eb:b6:ee:b8:a2:13:
03:fd:f0:43:06:4d:12:57:64:37:b5:f1:50:89:34:
4d:12:eb:7c:ad:ed:49:e6:52:7e:4c:4d:9a:fe:82:
71:62:c8:6c:50:06:9c:cc:22:a7:1a:99:0b:25:3a:
9f:7f:41:9b:bb:bb:b1:4e:00:db:e8:14:3d:3e:5a:
8a:36:5f:1a:bc:d1:7a:01:b9:1f:98:74:83:e0:41:
04:c5:6f:1d:fd:79:61:bf:b9:3a:44:99:9d:2b:eb:
64:ed:9a:56:5e:a3:8a:0e:2b:1c:55:c7:b3:bd:b8:
78:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3A:45:57:09:83:D8:0B:BA:1D:B2:08:30:51:B9:CF:AC:FB:9E:A4
X509v3 Authority Key Identifier:
keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bc:3a:40:7e:c6:6d:90:43:7f:39:aa:fb:df:10:5b:47:9a:
4b:99:c9:d2:19:73:f8:e1:fe:b0:b1:df:9a:82:a9:b4:4f:6a:
22:e6:a3:23:ce:f4:0c:ea:1f:b3:fe:e7:97:0f:3d:70:38:df:
2e:fe:71:4d:7e:8c:ba:40:ab:71:77:ee:19:22:66:70:b2:66:
3a:4a:3e:b7:2b:c6:9f:c9:ba:f8:81:7f:3b:77:54:d5:15:fe:
dd:76:be:6f:e7:2a:12:09:21:86:b2:ea:b9:50:05:9e:6e:b4:
87:00:92:59:84:91:56:f4:b9:40:ee:f8:ed:4b:35:5b:c3:b1:
29:42:d4:69:4b:d4:de:19:95:67:df:5b:d5:ca:2f:b3:e7:a0:
06:dc:52:e7:b7:40:b6:30:ae:49:85:f9:c1:ed:2f:98:9b:ce:
e9:aa:80:2f:99:4d:6e:15:bd:b0:d8:fb:97:af:df:08:e1:59:
24:fc:cb:91:a6:03:3a:ee:6b:43:8f:cf:89:e7:5b:e3:8a:f5:
93:08:c4:90:10:f9:a9:5d:d3:92:1d:00:ca:b3:83:08:ac:f1:
fe:2e:0e:77:1a:5a:05:0f:c9:ff:92:7b:09:c0:2f:66:92:19:
9d:24:ee:e0:1f:2c:7d:d2:ff:fc:c4:66:e6:68:4b:80:7d:f4:
bb:ae:b6:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9t+BOHHQPxik6NIAJyiMzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZGM1NzBiYzFjOTY0YmFiN2VkNTZjNjczYWE0MDUxOGY4
NTQ1NzgwHhcNMjYxMDE1MDQwMDIyWhcNMjYxMDE2MDQwMDIyWjAzMTEwLwYDVQQD
EyhkODNhNDU1NzA5ODNkODBiYmExZGIyMDgzMDUxYjljZmFjZmI5ZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6AtHuw4G37jjYLvICHxE5QsgOVf
p5yfrpj0ceGXxqr7ca36UMiH/Q8iCOsBS6V4TaCTIGGVKGKEcJWxTwr784U+oUKQ
wifQsoZt19mS7iCVbMdBykfYEknwz4SS46ttK/wSM8POZk/uxIQRQWAciMnzdusF
7D3rTNzk6QOwNIBSNYfzbox8/iwXJMwEaWDrtu64ohMD/fBDBk0SV2Q3tfFQiTRN
Eut8re1J5lJ+TE2a/oJxYshsUAaczCKnGpkLJTqff0Gbu7uxTgDb6BQ9PlqKNl8a
vNF6AbkfmHSD4EEExW8d/Xlhv7k6RJmdK+tk7ZpWXqOKDiscVcezvbh4fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNg6RVcJg9gLuh2yCDBRuc+s+56kMB8GA1UdIwQY
MBaAFNDcVwvByWS6t+1WxnOqQFGPhUV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80N2Q2OTItZGQ0MC00YmYyLTg5M2Yt
ZDM4ZGQwYjc4OTA5LzEvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80N2Q2OTItZGQ0MC00YmYyLTg5M2YtZDM4ZGQwYjc4OTA5
LzEvME54WEM4SEpaTHEzN1ZiR2M2cEFVWS1GUlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7w6QH7G
bZBDfzmq+98QW0eaS5nJ0hlz+OH+sLHfmoKptE9qIuajI870DOofs/7nlw89cDjf
Lv5xTX6MukCrcXfuGSJmcLJmOko+tyvGn8m6+IF/O3dU1RX+3Xa+b+cqEgkhhrLq
uVAFnm60hwCSWYSRVvS5QO747Us1W8OxKULUaUvU3hmVZ99b1covs+egBtxS57dA
tjCuSYX5we0vmJvO6aqAL5lNbhW9sNj7l6/fCOFZJPzLkaYDOu5rQ4/Piedb44r1
kwjEkBD5qV3Tkh0AyrODCKzx/i4OdxpaBQ/J/5J7CcAvZpIZnSTu4B8sfdL//MRm
5mhLgH30u662HA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:21:48 2026 by rpki-client