Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
File: 41wFcLO3dz0eEYgufdLGJVN-sJw.mft (raw, json)
Hash identifier: VMTKbz24Mrm7L5A8kFkV6603D59FhSK/fK/1rWoQDFM=
Subject key identifier: 65:4A:89:A9:07:8F:02:40:AD:9E:59:D1:C3:FB:7B:D1:89:E1:A4:9D
Authority key identifier: E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
Certificate issuer: /CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Certificate serial: 01A13FA73252A945D39B0CC5D6CD4EE76658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
Manifest number: 17DD
Signing time: Thu 15 Oct 2026 13:01:24 +0000
Manifest this update: Thu 15 Oct 2026 13:01:24 +0000
Manifest next update: Fri 16 Oct 2026 13:01:24 +0000
Files and hashes: 1: 41wFcLO3dz0eEYgufdLGJVN-sJw.crl (hash: PvPEbi8d6F1Nnq4tG/ymJeZpNbdAgQSPfDGrh2ddVeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:32:52:a9:45:d3:9b:0c:c5:d6:cd:4e:e7:66:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Validity
Not Before: Oct 15 13:01:24 2026 GMT
Not After : Oct 16 13:01:24 2026 GMT
Subject: CN=654a89a9078f0240ad9e59d1c3fb7bd189e1a49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:89:79:b5:e0:f7:2b:61:96:91:69:5b:1d:80:
d6:09:b1:fe:5a:35:c3:89:2f:9a:83:7f:42:26:5a:
86:7d:c2:9b:00:9d:a9:23:1c:f3:88:06:02:07:ab:
b1:b3:89:f6:4a:06:c5:f8:31:73:dd:ef:e0:78:6f:
d8:f8:6d:9b:89:99:70:fb:0e:fd:a7:7e:7e:b8:a3:
80:e5:6b:85:18:6b:1c:7c:fa:c1:da:01:28:6b:09:
91:3f:5a:2d:9e:06:cb:5f:60:12:b7:f1:a5:0f:8d:
c8:b8:37:4b:04:8a:2e:85:a7:6f:cb:a4:ca:58:45:
d9:e6:1f:4a:2a:a6:e9:7d:0b:99:4d:93:83:a2:1e:
76:0d:1d:84:94:b0:86:46:15:cd:4c:d5:4f:ba:41:
a8:50:fa:af:c9:ed:c8:0a:23:56:2d:01:9c:ee:7a:
0b:ad:f5:ee:6c:bb:4f:d0:94:bb:ef:59:b6:78:bf:
00:c5:ff:f0:5c:f5:ff:d0:c8:61:2d:3a:25:0a:c4:
c0:73:cf:53:37:df:4a:69:ed:db:57:38:ad:e3:cb:
4b:af:54:b0:7f:8c:24:e5:d1:ab:1a:81:7e:3e:99:
08:3e:f5:e4:65:2a:f8:c5:12:0d:c7:01:1e:79:be:
e4:97:d1:3a:f8:33:7c:63:75:61:e4:9f:84:02:c3:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4A:89:A9:07:8F:02:40:AD:9E:59:D1:C3:FB:7B:D1:89:E1:A4:9D
X509v3 Authority Key Identifier:
keyid:E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:50:cc:26:67:d5:cd:2e:b3:3c:0b:8d:44:31:bb:a7:b6:92:
f5:22:1d:b7:fa:94:27:e0:9a:27:3f:1f:d0:b3:cd:da:0d:ca:
f1:63:0d:ed:8a:7a:97:d1:3e:f5:f0:a6:34:fe:88:d9:d5:68:
ce:c8:ac:df:8c:96:92:6e:c9:f2:7f:31:bc:b9:16:b7:bb:a4:
78:04:e8:79:32:9a:4e:45:0a:d5:c2:af:94:49:55:81:99:56:
80:d7:5a:15:ac:ad:0b:e1:67:86:79:2a:77:cb:90:e4:a0:8a:
bc:32:6f:df:51:0e:d8:53:6f:24:70:d0:4d:23:2b:2e:5c:c0:
40:0e:f8:bd:98:89:ad:06:06:3c:4a:d7:0c:c1:58:b8:d0:01:
f7:a8:fa:07:ae:22:3a:63:8f:cd:f2:2f:0a:37:45:dd:65:92:
a5:23:93:b9:6d:5a:18:bc:f2:97:5c:df:24:8b:82:8c:ca:36:
a3:3e:9a:c4:3a:ea:59:85:12:d5:98:bd:cd:f5:e2:a1:47:3b:
ae:cf:77:a7:81:91:c3:3a:51:38:a2:9f:2f:73:29:ac:e9:7e:
e6:f7:a8:46:a3:9e:71:65:3d:8a:60:e3:34:47:52:e0:ea:40:
c1:bd:22:b3:34:7d:91:61:6a:88:69:9b:a9:f0:dc:fa:e3:7b:
b9:c7:aa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 22:45:38 2026 by rpki-client