
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
File: xorAnHI17TE4Ph_ThzkY3RgzNCo.mft (raw, json)
Hash identifier: YF+OVszfuAg6iZ+jX4saWb5e6RlvD/qBJJXpOBDwng0=
Subject key identifier: 0B:D2:48:09:77:AC:70:54:9E:E9:1D:4F:54:85:6C:EA:A6:DB:58:18
Authority key identifier: C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
Certificate issuer: /CN=c68ac09c7235ed31383e1fd3873918dd1833342a
Certificate serial: 01A08B314ECE872B6875010CFE503C340742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
Manifest number: 0A17
Signing time: Thu 10 Sep 2026 12:00:59 +0000
Manifest this update: Thu 10 Sep 2026 12:00:59 +0000
Manifest next update: Fri 11 Sep 2026 12:00:59 +0000
Files and hashes: 1: xorAnHI17TE4Ph_ThzkY3RgzNCo.crl (hash: 7bl/BURGg8qpKOjK33zy6MDgcoLc0peH7XPycPFKWaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:4e:ce:87:2b:68:75:01:0c:fe:50:3c:34:07:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ac09c7235ed31383e1fd3873918dd1833342a
Validity
Not Before: Sep 10 12:00:59 2026 GMT
Not After : Sep 11 12:00:59 2026 GMT
Subject: CN=0bd2480977ac70549ee91d4f54856ceaa6db5818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:65:e7:8a:5a:32:36:97:3d:02:0a:b4:04:d5:
5a:3c:c1:cd:7a:d3:36:e3:92:2f:bd:85:54:e5:1b:
57:9c:46:64:74:b2:2c:be:56:d7:fd:67:c5:17:b7:
bc:c8:2f:f5:4f:83:79:d7:1f:d5:33:12:bd:07:de:
de:f2:32:b3:a0:f4:2b:3f:b8:70:24:a2:5e:10:2c:
d4:b7:cd:5f:4a:83:6a:b4:28:e3:7b:4c:a0:e3:28:
f3:f3:43:98:bf:2a:40:1a:83:93:12:87:c5:8b:30:
03:11:30:ec:25:41:02:c9:59:f0:bf:32:c8:e3:db:
38:1a:fd:3f:f8:70:af:9f:23:e7:72:21:cd:eb:c6:
32:f7:b7:96:49:12:0f:d9:d6:26:70:aa:5b:62:f5:
7c:1f:9b:6d:5c:29:37:cc:96:5a:38:13:4e:9d:18:
16:eb:1d:37:a9:68:ea:57:c0:22:20:0a:06:0a:7d:
58:15:18:54:dc:d7:44:70:90:f4:90:c5:be:a6:40:
6c:b9:4b:5b:ad:66:06:be:9e:6e:6b:16:23:34:9a:
68:e2:56:43:38:4b:6c:90:51:c0:90:52:c0:94:2b:
c5:3a:73:4f:31:e6:d4:49:69:73:f4:0d:2c:78:ec:
98:e9:72:20:da:a8:d5:78:ff:4a:a7:06:23:a6:14:
87:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D2:48:09:77:AC:70:54:9E:E9:1D:4F:54:85:6C:EA:A6:DB:58:18
X509v3 Authority Key Identifier:
keyid:C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1b:a0:f4:43:dd:12:47:28:24:8a:a1:bb:23:3c:f6:b7:86:
56:fa:51:61:63:8d:a0:66:a4:50:eb:ae:9b:75:d6:b3:48:d1:
f6:09:5a:24:63:03:d9:68:89:5e:fe:30:4a:eb:46:e5:dc:d0:
fb:39:c6:49:91:30:fc:a7:69:cc:81:5d:9a:e2:33:9d:01:4f:
b3:ac:70:ab:40:3a:0f:6f:42:de:fc:b5:c5:12:e7:ba:81:b5:
84:81:bb:d4:ad:83:f5:83:12:c6:78:de:bd:7a:ec:c4:0f:83:
52:ee:20:ed:2e:7d:83:06:e0:9e:e7:de:cb:5d:21:6c:fa:be:
52:99:68:54:ce:aa:db:21:0d:9e:3e:39:11:fd:f9:e4:94:7e:
82:3f:f6:a4:86:a9:7a:dd:b9:d6:2e:70:37:df:eb:21:d7:02:
f3:d7:9e:a2:23:58:be:71:be:7d:24:23:67:53:6b:e5:b3:00:
cf:ff:d5:64:1c:08:5a:e8:63:ba:f2:a0:76:fa:3c:0f:a4:87:
22:22:75:ee:ae:79:4a:87:98:1b:c1:80:fd:42:af:d5:58:81:
c1:ef:5d:ac:1f:88:e5:89:34:19:8e:83:96:72:a6:95:2d:90:
72:e1:4d:2e:26:f3:fe:d9:a1:f6:2e:f7:7d:8c:97:ed:ac:38:
66:2e:79:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:24:37 2026 by rpki-client