Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
File: D4jGhrHhIvzcFlwCN6D149mQvwE.mft (raw, json)
Hash identifier: l9Kn05EfzOd8lZzbxB2beifcrSx4B/KIBG9P/73iYgQ=
Subject key identifier: 61:90:B7:4A:75:E2:CC:5A:CD:29:21:D0:0B:6D:27:3A:9D:BF:F7:01
Authority key identifier: 0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
Certificate issuer: /CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Certificate serial: 01A13DB8D0FFE19182B0D99A178A06D267E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
Manifest number: 1051
Signing time: Thu 15 Oct 2026 04:01:24 +0000
Manifest this update: Thu 15 Oct 2026 04:01:24 +0000
Manifest next update: Fri 16 Oct 2026 04:01:24 +0000
Files and hashes: 1: D4jGhrHhIvzcFlwCN6D149mQvwE.crl (hash: RNWpfvP06ol3vnLMrkWzn6NJlFVfNTUMYUbCscynr4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:d0:ff:e1:91:82:b0:d9:9a:17:8a:06:d2:67:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Validity
Not Before: Oct 15 04:01:24 2026 GMT
Not After : Oct 16 04:01:24 2026 GMT
Subject: CN=6190b74a75e2cc5acd2921d00b6d273a9dbff701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:62:af:f8:1f:09:33:4d:d2:f2:15:82:fb:
91:b9:f2:fd:f8:c0:80:d1:a9:37:db:c1:28:f7:11:
cd:59:7a:a5:b3:63:45:04:6a:ed:d8:77:80:38:8d:
ca:1d:13:5e:a2:e1:56:98:03:71:5b:43:73:23:20:
7b:a4:5b:64:46:a7:e6:38:bd:b0:dc:bb:2a:c4:64:
d0:8c:9a:44:cc:5c:fd:10:ce:73:a8:83:d0:d0:90:
be:23:6b:37:a1:e7:7c:09:88:9d:10:f5:87:04:74:
c0:a7:8b:00:b6:9f:f1:6d:13:7e:f9:78:be:b3:1f:
91:1d:c3:ea:34:ba:17:70:2c:80:37:ab:f2:32:e3:
08:d3:c0:b7:c2:e9:c7:98:b4:27:37:cc:34:0c:3a:
96:9c:ab:d7:9e:48:b8:57:23:be:30:ea:eb:ea:2a:
83:d4:c3:39:84:24:73:13:79:02:62:2f:1b:e8:78:
d6:9f:d5:cf:fe:5c:1e:e3:f4:b6:a3:c2:53:9f:16:
ff:6b:78:bc:11:55:05:bc:a1:03:e3:45:31:1f:83:
4f:b6:bc:42:c3:49:86:b0:97:a5:76:7a:98:2f:30:
b0:6e:bd:b9:5e:a3:65:c5:25:d3:46:f4:99:a2:bc:
00:14:41:40:c3:71:b9:d4:71:36:c7:5e:87:11:f5:
b9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:90:B7:4A:75:E2:CC:5A:CD:29:21:D0:0B:6D:27:3A:9D:BF:F7:01
X509v3 Authority Key Identifier:
keyid:0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:60:8d:81:a1:99:9e:8e:4a:09:60:a6:00:0b:8c:37:35:8d:
43:08:05:b5:37:48:37:13:48:b5:37:a9:e4:6a:1f:e3:e9:35:
b9:37:88:de:49:dc:19:4a:75:9c:bf:e7:32:a5:3e:f2:de:1c:
41:0b:f8:da:7a:25:06:2d:d8:3c:35:82:92:60:52:2f:ab:ad:
40:d1:b8:17:55:74:95:60:71:2b:8d:43:11:6f:08:10:26:90:
4e:f6:a2:2b:26:f9:39:af:2f:50:d9:d5:0f:c9:bc:cd:42:06:
83:49:51:15:91:03:24:74:76:ad:44:77:8b:aa:ae:a7:26:f7:
69:61:44:7d:de:54:93:c6:ad:5a:61:f7:36:7a:1c:c7:9a:7a:
1f:94:77:19:73:9c:ba:09:2e:ea:94:67:aa:75:a8:58:22:62:
85:36:17:24:a6:99:bf:6e:65:ea:88:53:78:0d:6c:83:30:14:
20:21:89:13:06:4d:ad:be:b9:4a:6a:de:e7:2f:50:02:67:53:
58:09:b9:e7:3d:d2:9a:7d:c4:c9:0c:3e:b6:59:7c:7c:b2:4a:
b6:f9:11:78:d6:6a:4f:bd:d9:bb:6b:7a:87:2a:66:3f:58:5c:
0d:c8:56:84:87:b7:72:f0:a8:2e:3e:a2:9c:28:39:d9:af:bd:
6f:66:3e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:36:13 2026 by rpki-client