Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
File: 0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json)
Hash identifier: 18K0uD0GpkiT7wVnMSvuIyssdzoT/sRgf23riHr1Cvk=
Subject key identifier: 31:C9:7F:65:77:11:CC:DA:B6:1D:82:76:DF:16:16:3D:E7:EB:0C:77
Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
Certificate issuer: /CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Certificate serial: 019E2F9666352C6D94C7EB4B7EEA2F1FB2E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
Manifest number: 190D
Signing time: Sat 16 May 2026 07:00:46 +0000
Manifest this update: Sat 16 May 2026 07:00:46 +0000
Manifest next update: Sun 17 May 2026 07:00:46 +0000
Files and hashes: 1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: qbf2VXYkKGHnSQEhl5iVkFjPTaaWsl/Y1nTNCqD758I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:66:35:2c:6d:94:c7:eb:4b:7e:ea:2f:1f:b2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Validity
Not Before: May 16 07:00:46 2026 GMT
Not After : May 17 07:00:46 2026 GMT
Subject: CN=31c97f657711ccdab61d8276df16163de7eb0c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:99:b0:9f:4f:fd:7e:ed:f2:1c:ee:37:99:54:
a1:7c:15:44:e4:d8:94:53:0d:fa:c3:73:6b:2f:f0:
1f:10:d7:95:7a:a9:41:7f:94:af:3c:83:47:6e:52:
3d:15:5c:e9:eb:c7:1d:5d:4a:80:79:e2:c0:a0:6f:
7b:97:03:23:6a:0e:d8:58:d1:35:46:4d:79:b3:f5:
23:9c:83:40:fc:5f:c6:ac:52:9f:20:f9:97:a5:b9:
15:07:3a:58:7a:9b:0e:df:7e:74:0a:a9:f9:40:45:
ff:0c:c4:39:da:5d:e4:66:59:c4:35:c5:0e:6e:7a:
59:88:ba:41:c6:22:bb:ef:a1:27:20:69:18:f3:04:
d6:be:e6:8d:57:e4:ad:a3:ec:75:71:ff:49:d6:71:
59:d1:e4:d1:e2:b4:89:7b:4b:3c:f2:4b:5f:ea:6b:
a9:14:69:3c:23:ab:b5:76:56:db:8b:33:ce:b3:c8:
14:17:2d:55:2f:c8:77:a1:71:7c:29:0e:ea:3c:2a:
8c:2b:4a:5f:6d:32:96:93:f0:aa:78:2a:31:67:c5:
ff:0a:3b:28:10:aa:2a:9d:1f:fc:42:9d:27:ea:96:
03:d4:ac:50:9b:49:83:02:16:7a:40:70:43:39:10:
61:18:b5:4e:c5:9f:45:40:17:ee:c7:01:28:eb:8f:
eb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C9:7F:65:77:11:CC:DA:B6:1D:82:76:DF:16:16:3D:E7:EB:0C:77
X509v3 Authority Key Identifier:
keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b9:8c:41:19:f9:22:79:07:66:ab:35:b3:3c:df:e4:03:17:
2d:bd:c1:8e:76:7d:dc:fb:0d:ed:df:e9:34:bb:b0:9e:98:59:
e1:98:b5:94:53:40:6c:78:47:c1:b8:7e:8e:d3:ad:be:8a:72:
4b:8d:38:25:68:85:ff:41:4b:3e:6a:69:d6:83:fd:d4:f4:42:
50:da:e9:27:6e:87:5d:ed:ed:32:b2:e5:9a:fb:86:d7:de:43:
12:37:f2:87:28:0d:1f:37:fa:4e:2d:62:fc:79:d1:96:09:dd:
27:f7:98:43:9e:af:02:ec:43:ba:7d:8d:8a:7d:a3:6a:6c:c7:
1b:3a:08:95:b3:6d:92:f0:38:82:f3:99:ef:54:fe:1c:6d:9c:
b1:70:f3:a0:2a:d5:ee:f9:98:5f:85:4a:ca:63:90:2f:00:a1:
03:77:79:cb:c7:66:c8:cc:b5:e9:3a:e4:f2:22:bf:ab:b8:fa:
1e:85:8c:f2:4a:1f:22:6a:f3:c2:77:01:a1:2b:22:ea:8d:8b:
2d:b0:89:82:34:67:2a:da:e5:94:b4:4a:19:77:63:5d:39:70:
6d:7b:1d:1b:69:99:50:b2:46:b5:c6:9f:c2:d1:6c:4c:56:47:
b4:36:32:1c:02:70:11:74:40:18:6b:dc:e9:c3:11:e4:b3:56:
97:d7:bf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:44 2026 by rpki-client