Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
File: 0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json)
Hash identifier: 3FEud5Oydn3MPTcppkRS55fcRuLVzkXR2VgteGeMcqc=
Subject key identifier: E7:05:13:65:CA:F0:E2:F3:F4:35:5F:3C:1A:91:B2:6F:9C:4E:6E:34
Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
Certificate issuer: /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Certificate serial: 01A1404BB81727793DC707C5DA9D0D65CE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
Manifest number: 17DC
Signing time: Thu 15 Oct 2026 16:01:06 +0000
Manifest this update: Thu 15 Oct 2026 16:01:06 +0000
Manifest next update: Fri 16 Oct 2026 16:01:06 +0000
Files and hashes: 1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: DH9UrFQVel5Ctduos/5+NxWRbTKm3UFBeDv7kNTqupY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4b:b8:17:27:79:3d:c7:07:c5:da:9d:0d:65:ce:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Validity
Not Before: Oct 15 16:01:06 2026 GMT
Not After : Oct 16 16:01:06 2026 GMT
Subject: CN=e7051365caf0e2f3f4355f3c1a91b26f9c4e6e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:e2:87:63:5c:c6:d7:e4:58:e6:cf:e3:e8:
f7:62:3f:25:2c:aa:0d:50:25:2a:55:63:75:45:94:
07:d1:b7:fe:b5:b9:0f:7f:36:8c:4d:10:84:41:32:
9f:b4:b7:a4:64:f9:85:96:c4:24:2f:35:1e:44:bd:
22:6d:36:1e:7a:44:93:57:b5:d5:12:11:6c:3c:5e:
d1:74:b2:f0:95:68:da:0f:75:34:b7:a4:72:e2:e1:
a5:14:4c:01:d0:3d:58:f9:00:e4:f3:1d:19:e6:8c:
bf:87:b4:4e:58:8e:61:08:a3:4c:53:6c:98:02:11:
04:51:99:bc:52:31:4c:fd:5e:1a:e8:69:84:94:18:
54:b7:99:95:29:03:b5:01:18:78:37:36:32:9c:df:
00:6b:8f:43:7e:33:fe:38:4c:3e:29:43:36:47:be:
12:27:b9:2d:0c:30:c4:ec:05:0f:26:fe:d1:dc:cf:
d7:bc:15:7c:02:7e:9f:6a:2a:fe:6a:7c:9e:18:88:
52:73:0b:21:71:db:bb:b4:72:62:a9:fd:93:8c:07:
a4:60:90:02:ba:5d:c4:05:e7:74:53:53:aa:c2:23:
97:f1:46:68:69:40:a8:92:e3:c3:2f:c7:8e:17:a5:
04:6f:6f:db:9b:6b:a2:3e:2f:78:90:3e:03:e8:eb:
a6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:05:13:65:CA:F0:E2:F3:F4:35:5F:3C:1A:91:B2:6F:9C:4E:6E:34
X509v3 Authority Key Identifier:
keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f4:7b:31:53:20:09:20:5a:de:ec:03:8a:b2:a1:20:25:5d:
cb:19:71:f7:de:57:e6:44:e4:fe:c4:05:46:0a:a6:d1:e8:50:
db:22:55:ca:2f:8b:87:a2:ff:4a:a0:ce:60:89:d5:03:a0:d4:
46:9c:7c:32:ff:2f:da:df:49:5f:c8:90:c5:5a:3b:08:32:c3:
f4:7d:c5:2e:45:ae:ed:06:80:e4:22:c0:f6:62:af:c5:73:72:
f1:2f:d1:c9:04:51:6f:e2:41:8a:6e:2f:35:54:fe:ef:ff:3e:
e7:aa:b8:29:e2:c5:c5:56:08:16:89:42:03:42:94:a7:e2:d1:
0c:de:7f:7c:81:d4:18:61:0c:4d:b6:85:c3:59:2a:4d:51:52:
aa:5b:5f:08:cb:81:0e:9a:d2:25:f0:66:57:44:d0:ff:cf:ce:
53:0a:73:76:10:a5:02:34:6d:46:23:f8:7f:0c:83:96:5a:40:
74:8b:64:fd:62:43:fc:cf:df:12:9e:e4:3e:43:a7:1b:4d:80:
e3:7f:a1:21:c4:c7:d7:a1:cf:9a:be:8c:de:52:67:df:c5:f5:
92:a1:82:78:1c:89:24:bd:6b:fd:a2:01:b9:e6:c0:7d:76:5f:
88:80:93:1c:4a:27:24:3e:dc:72:dd:30:3f:fc:b7:27:3b:60:
78:04:f3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:07:51 2026 by rpki-client