Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
File: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft (raw, json)
Hash identifier: gcnx2gDDtiCX64KPOo9EODlv6H8DJEdrCGNj32opudY=
Subject key identifier: 46:C8:C4:F2:A1:29:D9:84:B5:5D:E0:70:39:19:49:90:0C:22:ED:E8
Authority key identifier: D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
Certificate issuer: /CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Certificate serial: 01A0016EDE2DB3F1D126C07B5BB202290449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
Manifest number: 1737
Signing time: Fri 14 Aug 2026 18:00:38 +0000
Manifest this update: Fri 14 Aug 2026 18:00:38 +0000
Manifest next update: Sat 15 Aug 2026 18:00:38 +0000
Files and hashes: 1: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl (hash: RmnbzsSTZ/JkPjG+8vUIysch02v1gL/bPWff/5kNBNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:de:2d:b3:f1:d1:26:c0:7b:5b:b2:02:29:04:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Validity
Not Before: Aug 14 18:00:38 2026 GMT
Not After : Aug 15 18:00:38 2026 GMT
Subject: CN=46c8c4f2a129d984b55de070391949900c22ede8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:58:8c:ef:46:e6:7f:e7:e9:7c:53:a3:94:
dd:cd:d8:46:5e:7c:af:4d:b1:89:3b:fe:64:04:c0:
f8:d9:da:5e:a6:b4:5a:a9:32:51:f0:22:31:c7:af:
a6:f8:04:09:70:0e:b3:be:5c:12:f8:90:07:bc:38:
e1:d6:18:1c:3e:dd:94:97:57:c8:70:fc:49:f5:a2:
db:b1:19:1d:3a:e9:a3:d1:1c:0b:ed:24:81:11:ed:
8c:e8:84:b0:e7:b2:b2:8d:57:6f:5e:68:86:d8:2c:
04:2f:50:dd:6b:b1:0e:20:16:25:e4:e5:36:a6:9f:
9a:88:42:95:2d:69:02:a9:94:7f:1e:42:a4:46:a3:
b9:b5:e1:98:9b:71:f3:ae:d2:d9:7e:5a:5a:d2:ab:
09:4b:ba:3f:8e:52:ba:06:1f:c0:3e:cc:9c:80:10:
98:ba:f0:2f:2b:94:ff:02:fa:11:40:33:4d:73:b2:
d5:bf:b5:ba:78:b9:14:f3:48:f7:ca:f4:dc:03:3d:
24:53:09:e0:67:77:e4:e4:d7:88:bc:81:54:88:f0:
0a:0b:ff:93:94:9a:58:25:79:4a:39:47:aa:28:6b:
5d:03:f4:24:ba:67:95:1c:40:7f:9e:e1:e5:8c:05:
45:df:3d:84:bc:e4:10:f4:06:9d:4b:a7:d5:3d:55:
39:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C8:C4:F2:A1:29:D9:84:B5:5D:E0:70:39:19:49:90:0C:22:ED:E8
X509v3 Authority Key Identifier:
keyid:D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:37:80:61:ae:09:b3:c0:18:cb:5a:70:22:30:f1:25:f6:ed:
73:76:c0:ea:41:dc:9e:6f:0a:56:ea:a2:44:55:12:69:c1:86:
2b:bb:f6:6e:67:17:ed:c7:f0:9b:64:a2:25:d7:cc:72:1b:5b:
3c:9e:b6:40:a4:5a:19:78:9d:8c:bb:b3:07:af:17:7b:5c:85:
d0:af:fd:d4:ee:c5:09:1f:19:a2:f5:07:81:9f:3e:a0:70:4d:
a1:70:39:13:35:11:f0:63:c3:0e:27:3e:23:82:94:82:68:29:
18:6a:2a:ac:f3:1b:c1:82:2b:49:5d:5f:51:68:96:61:61:24:
ff:ad:a1:14:07:27:6e:f9:b9:f0:80:5d:fc:44:32:01:92:60:
65:ef:9c:23:10:38:bd:b1:42:3d:f1:ee:de:8c:7d:6d:6e:20:
2f:f7:40:96:1d:8f:19:e7:fa:92:68:54:55:45:51:2e:d7:dc:
3a:64:0c:77:74:5c:be:29:8a:a8:be:ba:83:a5:d5:8e:df:ad:
91:a9:b9:c9:5e:de:eb:76:8f:fb:90:23:de:77:5e:a3:98:99:
aa:2f:80:0c:1c:52:48:30:46:a6:8b:e4:67:64:fd:be:dd:9f:
cd:81:2e:14:d5:59:ee:e2:3c:07:e4:fb:9c:a2:f1:67:96:0d:
5c:8b:80:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:59 2026 by rpki-client