Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
File: 0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json)
Hash identifier: a7mzRmbXoXWrz8CfMyb75QqOYJpnWn69+vnPTELZ/AE=
Subject key identifier: 15:F1:21:96:AC:83:74:54:85:12:83:3A:20:66:43:DB:0F:F4:FC:11
Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
Certificate issuer: /CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Certificate serial: 01A001012F16D560E010B81F7A73471D8DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
Manifest number: 19FE
Signing time: Fri 14 Aug 2026 16:00:49 +0000
Manifest this update: Fri 14 Aug 2026 16:00:49 +0000
Manifest next update: Sat 15 Aug 2026 16:00:49 +0000
Files and hashes: 1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: rUXcTQRDPI40YVGa8hVTfeOQCyig5tUG8088wr/Pk28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:2f:16:d5:60:e0:10:b8:1f:7a:73:47:1d:8d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Validity
Not Before: Aug 14 16:00:49 2026 GMT
Not After : Aug 15 16:00:49 2026 GMT
Subject: CN=15f12196ac8374548512833a206643db0ff4fc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f9:ea:bf:5e:f2:50:0f:16:20:dd:2c:36:91:
e2:a2:f3:9b:0d:72:ed:f3:2b:42:a5:83:1b:5b:88:
f8:16:16:f7:a0:b4:5f:97:45:f4:ca:35:00:28:f6:
69:88:02:39:dc:be:2b:07:21:36:16:72:a1:56:06:
5b:d5:a5:50:de:32:5e:cd:3b:6f:60:a6:b3:04:e6:
18:11:b8:fd:d2:94:9c:4b:2b:c0:fd:74:31:20:bf:
d6:9a:3a:ca:82:51:e2:bc:36:70:bb:bc:7c:28:9f:
6d:56:96:d2:02:fc:29:73:4c:64:3f:86:5d:29:a3:
d3:a9:50:0c:02:23:ff:b3:64:f4:95:47:0a:91:40:
6f:2c:c1:f7:24:99:d6:cf:54:df:6c:cb:97:24:d4:
7b:6a:b8:7c:86:01:84:c4:9b:49:e7:28:34:10:dc:
a8:19:96:6b:7a:b6:ff:48:46:30:af:19:99:ea:2a:
dd:25:cd:4c:10:fc:84:29:d9:bd:89:52:db:f3:ae:
49:55:37:43:a1:fc:9a:b0:a1:be:c3:cd:30:11:b6:
5c:34:ac:cf:0e:0c:96:5a:3c:87:2e:ec:87:fb:a9:
b9:4d:ba:49:fc:b5:95:dd:84:ff:c6:bf:e8:08:b7:
cb:14:d8:00:5e:aa:57:d3:5a:4e:6b:c9:fb:bb:e1:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F1:21:96:AC:83:74:54:85:12:83:3A:20:66:43:DB:0F:F4:FC:11
X509v3 Authority Key Identifier:
keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bb:ef:9d:9b:8c:3d:9a:08:98:c8:70:25:40:da:ca:7a:d5:
ee:1c:af:82:ad:23:a4:57:df:ab:35:78:85:82:70:49:14:2d:
41:3c:05:36:88:a3:25:9e:8f:ad:e8:f7:14:20:fd:5c:98:b5:
f5:b2:6e:51:3d:8a:21:6e:7f:7e:1d:e1:be:54:cd:46:3c:bd:
35:ff:3f:b4:b0:f3:51:c7:cf:65:c4:0c:f2:bb:79:06:7a:5d:
67:cd:c0:a8:b6:e0:bd:52:9a:6c:cf:d0:64:81:46:1d:32:b0:
29:29:ef:26:fc:5f:0f:93:66:76:1a:32:03:7b:34:0a:32:b6:
73:24:1f:88:2f:51:8b:c9:8f:c6:75:2c:3c:9b:5c:26:09:78:
1e:ab:a6:ab:0c:53:1e:05:ed:54:9a:04:ca:0a:d1:55:d7:22:
85:93:37:19:eb:7f:db:48:03:26:bd:b4:8e:b5:7e:6d:51:bd:
1f:7f:65:0c:b7:54:4f:66:54:a8:cd:40:32:39:7a:21:d0:72:
f0:0f:d4:11:44:e1:cd:6e:7d:b8:3a:5c:b5:50:40:84:f1:43:
44:36:ab:db:f2:c9:cd:91:89:27:91:4c:86:ab:22:b4:59:83:
f5:f5:1f:b6:ed:f9:18:41:8f:16:d7:0f:3f:40:e2:68:4c:4f:
5d:85:b3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:07 2026 by rpki-client