Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
File: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft (raw, json)
Hash identifier: 0tY1Np4GeSLUi/6VI51QWe2TmPoijh44ILvnwunxsH0=
Subject key identifier: F7:32:36:5E:8F:1A:87:E2:92:07:9B:CB:EF:F8:53:F1:60:F2:1A:51
Authority key identifier: D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
Certificate issuer: /CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Certificate serial: 01A14014C7C0FE6B356F8BE261C538A1E5A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
Manifest number: 17DC
Signing time: Thu 15 Oct 2026 15:01:05 +0000
Manifest this update: Thu 15 Oct 2026 15:01:05 +0000
Manifest next update: Fri 16 Oct 2026 15:01:05 +0000
Files and hashes: 1: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl (hash: dHj1QwUBL3F2SGAx8UpiRmj+iIhJlXIGk44KVGYow2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:14:c7:c0:fe:6b:35:6f:8b:e2:61:c5:38:a1:e5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Validity
Not Before: Oct 15 15:01:05 2026 GMT
Not After : Oct 16 15:01:05 2026 GMT
Subject: CN=f732365e8f1a87e292079bcbeff853f160f21a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:e1:13:b1:3b:2a:7c:36:6a:82:e4:35:10:
56:b5:cf:7c:ca:fa:12:3e:33:93:e7:56:45:58:c0:
fe:4a:2b:d6:92:df:c0:d3:d6:59:b7:a3:85:d9:8f:
84:78:57:e5:ae:7a:ed:26:91:7e:b3:b8:7c:4b:44:
37:86:fc:b9:71:e8:8d:55:0b:86:0d:ef:b5:d1:40:
3b:61:7f:7c:ba:a0:8d:b0:62:ba:92:00:4f:7a:a5:
12:9b:f9:d3:68:68:0d:71:18:bb:c7:56:a9:84:e1:
d1:f7:0b:aa:f5:c1:05:5b:8f:33:40:d3:09:1e:dd:
ea:5b:a0:7c:de:2b:ce:09:cf:8d:77:30:e7:47:3d:
ca:8b:2a:98:28:a2:30:ce:2f:4c:71:f1:70:12:e1:
b3:3c:d6:5c:41:8d:d8:46:c5:16:4e:c1:ed:bd:19:
cf:c6:1e:9a:ff:0b:bf:0e:56:0d:df:6d:9e:e6:6c:
dc:47:4e:84:df:77:2e:6b:3d:54:cc:56:84:06:60:
c6:7a:5e:7a:de:cb:dd:3f:4e:54:79:30:73:2c:76:
21:af:b8:00:54:ea:7f:12:8f:2e:6a:9e:37:96:66:
9b:75:7f:ff:07:bc:3f:27:25:25:e2:84:c1:bd:6f:
dd:4d:a6:05:0a:5b:64:d4:3d:4c:7c:16:0f:28:66:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:32:36:5E:8F:1A:87:E2:92:07:9B:CB:EF:F8:53:F1:60:F2:1A:51
X509v3 Authority Key Identifier:
keyid:D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d7:6d:86:ec:56:1d:67:93:9f:e8:ad:f2:e3:3d:d5:29:8a:
7f:19:d4:56:5f:8f:42:9f:57:71:dd:97:bc:d1:ef:48:6f:a7:
7a:74:f3:12:3a:c7:ef:d0:26:29:0e:0a:fe:0a:16:b9:3f:5f:
d6:47:56:05:86:6d:51:7c:2e:dd:1e:b8:82:68:53:51:78:30:
38:09:ba:18:48:bd:8c:ef:13:49:ce:e3:f3:da:4f:6a:0c:05:
5d:70:1a:74:09:e9:2c:d4:62:f8:2d:78:ea:08:56:84:b2:80:
15:ed:1d:43:89:a1:4b:bc:a2:0e:d8:76:b1:ce:56:25:ed:d2:
b0:15:60:d9:23:5a:a8:9a:b6:d5:5a:ed:56:a4:d4:ed:0b:a8:
46:8d:44:db:12:6b:1f:e8:04:a2:e0:37:40:b0:87:9f:a8:9b:
58:82:ff:53:8e:0b:44:42:76:8c:e7:84:d9:1f:e7:63:d8:fb:
ed:66:df:41:b8:f9:84:5b:2d:02:1f:c3:a3:df:74:54:ab:09:
90:26:14:fb:20:0a:65:87:64:1f:05:2c:b9:76:6d:fc:c2:dc:
41:65:04:af:3f:e6:4f:e3:7e:be:d8:7c:dd:ae:7b:3c:1b:08:
d7:a3:d2:0c:26:9f:1f:81:f1:1c:5e:6d:a8:05:17:2a:3b:3d:
2d:d2:66:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:22 2026 by rpki-client