Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File: 15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier: RP86yzPzvo6h6zMzHDMs33AhJaxfs8qZlGZuAAuF294=
Subject key identifier: A6:58:16:04:BF:CC:DC:2A:FA:BB:DA:D8:3D:1B:D1:58:8A:14:26:32
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 01A0024ABB1E4C6F421C3EBB4A4917E60BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number: 0A83
Signing time: Fri 14 Aug 2026 22:00:46 +0000
Manifest this update: Fri 14 Aug 2026 22:00:46 +0000
Manifest next update: Sat 15 Aug 2026 22:00:46 +0000
Files and hashes: 1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: 5HNMebilEtQRHnAthYUPVK1jxhUVulHlxcMmn8yRmTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:bb:1e:4c:6f:42:1c:3e:bb:4a:49:17:e6:0b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Aug 14 22:00:46 2026 GMT
Not After : Aug 15 22:00:46 2026 GMT
Subject: CN=a6581604bfccdc2afabbdad83d1bd1588a142632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4c:3e:a6:4f:f5:a9:3a:87:95:5d:63:2e:69:
b2:24:18:3a:cf:c4:f3:b9:fd:2c:16:f9:10:50:d8:
c6:41:d3:40:b0:13:c9:02:20:e4:59:27:49:ea:ef:
17:9e:01:c3:83:67:55:60:6b:8f:83:1b:fe:b9:af:
54:e5:6c:71:1e:fe:85:62:29:f0:97:3f:e1:1e:2a:
12:7a:2a:21:b1:e7:9e:fc:fa:ff:07:c3:1e:f0:1a:
b4:72:a0:0a:ac:ef:1c:06:aa:4f:77:6c:35:9a:55:
28:86:b0:73:f3:64:75:b2:de:1e:00:07:f7:73:38:
c3:d8:70:25:0b:5b:8a:04:d0:2c:2d:2f:22:38:02:
db:f6:25:7d:80:45:77:99:7c:d3:81:19:1a:e7:74:
8e:9d:72:89:f8:77:f1:b2:be:93:68:50:47:65:5c:
5e:ef:dc:f7:63:56:3a:06:2c:c2:76:86:fe:74:ff:
33:e0:92:d4:72:65:55:84:55:be:d3:d1:c7:49:cb:
01:46:1c:6f:a3:ce:38:55:4c:4f:af:b1:e5:1c:f1:
f9:83:2e:b2:b5:a9:48:27:16:b9:45:90:7e:84:7d:
73:ff:2a:b3:e8:27:1e:4a:05:b9:b2:39:43:1f:b4:
70:a8:a9:ea:85:e0:ad:73:a0:18:17:05:fa:74:f5:
4b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:58:16:04:BF:CC:DC:2A:FA:BB:DA:D8:3D:1B:D1:58:8A:14:26:32
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:46:a8:27:d1:ea:4b:ce:37:a7:59:3c:7e:c7:fd:b8:ff:13:
e2:c3:ba:b3:83:b8:2d:c5:50:08:bb:18:b9:42:45:cf:be:0f:
e5:35:56:32:aa:08:6c:34:b7:e4:6a:db:d8:4a:ee:24:5e:b4:
e8:36:53:c7:48:bd:2f:b5:57:93:9f:8a:94:b3:02:67:63:aa:
d6:df:d3:ec:c0:7c:ec:6a:b1:de:6a:5b:74:2a:83:98:4e:13:
b2:e6:a6:62:64:39:71:f6:d3:57:94:14:78:53:bc:e9:c5:19:
8c:5d:2d:d0:17:f1:b6:6b:e8:8b:7e:72:1c:64:2f:ff:a7:d5:
85:1f:24:3a:da:82:0e:64:5d:b7:83:8f:99:e3:ba:7e:7a:f0:
5f:91:3d:b6:cd:a2:82:f0:06:ba:b6:51:9f:ec:b7:8a:55:e6:
c5:c5:70:0b:a5:b8:0e:cb:74:54:95:72:0d:cb:99:a2:0d:70:
fe:70:fc:23:60:e1:38:1b:c3:2e:9a:41:18:fe:a7:71:59:00:
dc:36:f5:f1:11:8d:3e:f8:07:73:40:80:be:1e:71:c1:c6:df:
de:57:d6:4a:96:14:e7:93:fd:3d:ba:19:a1:a5:fa:e9:3f:91:
3f:0d:5d:1e:69:fb:32:86:67:94:d5:4b:0a:77:b9:0b:d0:b6:
d3:c6:20:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:37 2026 by rpki-client