
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
File: 0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft (raw, json)
Hash identifier: hPkG3XLehupkug1wtA9Qjyj+KGsEZCVcLVxd0TLuLS4=
Subject key identifier: DE:1B:79:10:69:47:2B:97:FD:BC:35:2E:B5:D4:13:79:79:39:A5:90
Authority key identifier: D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B
Certificate issuer: /CN=d02ea90148d4e688c9492d9467159cd10575591b
Certificate serial: 01A13DB85F820243D57E16F9F9657F08167D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
Manifest number: 0BD3
Signing time: Thu 15 Oct 2026 04:00:55 +0000
Manifest this update: Thu 15 Oct 2026 04:00:55 +0000
Manifest next update: Fri 16 Oct 2026 04:00:55 +0000
Files and hashes: 1: 0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl (hash: Iq4IrTwuTWaXmrQGXKQh/t83SJc30eWOJSs/Y5yx2Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:5f:82:02:43:d5:7e:16:f9:f9:65:7f:08:16:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d02ea90148d4e688c9492d9467159cd10575591b
Validity
Not Before: Oct 15 04:00:55 2026 GMT
Not After : Oct 16 04:00:55 2026 GMT
Subject: CN=de1b791069472b97fdbc352eb5d413797939a590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:aa:fe:47:80:bc:7e:17:c6:e1:fe:3d:ab:a5:
60:75:b2:17:e1:d0:0a:ca:70:cd:6a:3e:bc:d9:a1:
41:ff:d9:96:02:e8:74:3b:c4:84:a0:2c:22:69:b0:
3c:13:17:64:3e:3e:cf:ff:d9:c9:72:86:69:77:b1:
42:78:85:4c:fa:53:b6:76:6f:d5:4c:f9:1e:42:5e:
8b:10:ce:b5:07:e7:98:36:95:d1:8e:8f:2a:21:6e:
9c:73:97:0d:ca:07:93:fd:0e:cc:69:37:90:e6:f9:
b6:84:78:52:40:c2:a8:92:a0:05:f5:d2:9a:9d:33:
34:ee:2d:8b:c9:3a:63:03:b4:5d:34:25:0f:a5:2f:
38:2b:cf:f5:5a:ef:44:b7:ff:77:5f:e7:e0:62:b4:
7c:f2:28:e7:6d:11:11:22:6e:0f:b1:62:af:41:e2:
23:dd:d1:c2:97:56:41:e8:54:32:4f:ee:a3:85:64:
b2:86:3f:18:e4:ad:c0:44:cf:de:46:32:bb:60:dd:
ff:9c:e7:e0:05:10:49:67:d1:b3:5a:8e:35:76:8a:
2b:1d:66:dc:54:95:e1:fd:79:44:f2:a2:be:83:9e:
b1:30:96:32:78:27:69:89:47:11:41:95:1b:6d:a5:
b9:71:b9:57:dc:a4:e5:c7:0d:30:82:e5:87:4a:61:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1B:79:10:69:47:2B:97:FD:BC:35:2E:B5:D4:13:79:79:39:A5:90
X509v3 Authority Key Identifier:
keyid:D0:2E:A9:01:48:D4:E6:88:C9:49:2D:94:67:15:9C:D1:05:75:59:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0C6pAUjU5ojJSS2UZxWc0QV1WRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d2a887-0ae5-441c-a393-fdc3b3fce83a/1/0C6pAUjU5ojJSS2UZxWc0QV1WRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8a:90:37:83:9a:80:e4:5c:53:77:06:46:2c:b9:30:a5:c0:
78:c8:4e:09:5d:5a:1c:b6:d7:8d:0b:c2:e8:75:0c:c1:8c:f4:
ff:94:51:20:24:4f:7c:36:c8:6a:f6:77:82:1d:84:97:33:24:
42:46:8f:05:0c:66:82:68:c4:d3:3f:33:34:e4:e8:46:4d:26:
62:5d:ba:6d:00:f3:36:8b:a7:cb:4f:4c:5c:ba:3a:0b:46:87:
09:34:39:3b:69:e8:82:49:43:ac:33:a6:c9:49:9b:f1:92:cb:
b3:c0:8a:84:7e:f2:9d:5a:21:8a:2d:0d:3d:7d:43:31:3d:b9:
66:00:21:81:1a:43:a9:a4:ad:88:86:f3:f5:05:64:d2:07:b1:
cc:bc:04:ed:f4:30:5d:0c:a7:5d:c5:9c:30:d0:f4:8c:86:48:
38:92:33:d6:f9:d0:99:93:6a:83:0e:e3:2b:e4:07:3e:aa:98:
fd:55:b0:62:0f:f0:bc:aa:2b:f0:d8:b1:ff:07:b1:35:47:e6:
fe:77:56:1b:6a:ba:5f:e1:37:25:5e:15:84:a4:52:db:df:5d:
ed:a9:c4:f8:64:c7:59:f8:1e:95:43:b4:9f:e3:d2:99:e7:c2:
fc:c5:64:e4:c6:68:c1:43:34:34:bf:25:0f:69:88:52:1d:10:
49:c2:b9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:17 2026 by rpki-client