Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
File: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft (raw, json)
Hash identifier: xX9sUYuUJG/lCYie3egsEcctpOl9vZw0ogIH1C6R4GQ=
Subject key identifier: 30:29:81:B3:04:72:37:D8:08:CE:66:F2:FE:6F:E6:6A:57:F0:B2:5B
Authority key identifier: D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
Certificate issuer: /CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Certificate serial: 01A14014D8FAF056430169EDED9E0EDA0839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
Manifest number: 114F
Signing time: Thu 15 Oct 2026 15:01:10 +0000
Manifest this update: Thu 15 Oct 2026 15:01:10 +0000
Manifest next update: Fri 16 Oct 2026 15:01:10 +0000
Files and hashes: 1: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl (hash: YSgu0p96LjO93v8lc48X0DckxFaWQDafzOoCnwqe2GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:14:d8:fa:f0:56:43:01:69:ed:ed:9e:0e:da:08:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Validity
Not Before: Oct 15 15:01:10 2026 GMT
Not After : Oct 16 15:01:10 2026 GMT
Subject: CN=302981b3047237d808ce66f2fe6fe66a57f0b25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:a6:10:e2:ba:ab:01:56:1d:80:87:ee:72:
5f:9e:22:f9:dc:eb:1b:83:15:6e:3b:ea:44:c0:b9:
d9:75:a2:33:c1:0d:dd:61:85:2a:2f:a5:de:e7:f1:
0e:1e:f2:3f:64:6b:f6:0c:e7:7e:b0:b6:df:a3:71:
08:1c:51:bb:7d:f9:7d:a4:08:ec:72:1b:74:9c:20:
14:7b:94:d4:11:98:e7:44:07:f8:b3:5d:62:68:d9:
de:c8:38:e6:9a:ab:82:b6:60:41:30:10:41:1e:ff:
e9:b4:54:34:fd:c0:3f:9f:26:75:28:bd:6f:a7:95:
2e:1c:c7:f3:57:13:88:77:c7:ce:0a:8a:47:98:50:
86:89:61:dd:f8:f0:d0:6f:aa:94:8d:31:f7:98:96:
a2:19:d5:0e:56:21:5c:c7:84:8b:e5:bd:67:29:34:
ef:fd:6b:aa:0c:cd:3c:17:35:58:3a:fe:6a:91:74:
ac:4d:d5:0e:16:ad:64:c5:29:26:db:30:e9:99:0d:
fa:0f:e5:91:70:c1:be:b3:02:2c:32:d2:dd:7e:7b:
17:a5:64:9f:fa:48:91:b8:2f:2d:8f:c9:9a:06:cc:
4d:bb:86:4b:3c:03:82:86:7d:d1:c9:f1:5e:49:f4:
a4:25:cc:b8:1d:2d:00:48:56:b5:b1:fa:46:be:38:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:29:81:B3:04:72:37:D8:08:CE:66:F2:FE:6F:E6:6A:57:F0:B2:5B
X509v3 Authority Key Identifier:
keyid:D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:38:5c:a4:fe:b4:58:43:cb:9e:bb:30:39:a9:eb:af:24:3d:
b9:67:27:52:0a:76:35:ef:b7:0e:86:d1:d6:57:fd:83:be:ed:
61:a2:73:9f:48:64:77:f2:2d:ca:b0:e6:72:3a:f3:0c:cc:20:
76:44:5b:09:cb:28:60:90:63:c4:5b:50:02:ec:32:0e:b6:54:
d8:3d:2e:11:92:f5:4b:9c:1a:4e:d7:4f:ad:68:ab:07:1b:4e:
36:82:5d:d4:8a:dd:9d:13:3a:6f:b2:da:18:e7:96:a6:fc:95:
2a:5c:5f:56:9c:b7:a0:67:8b:5a:ea:d7:b2:13:57:91:e6:a5:
d4:07:98:e5:c2:76:67:8e:a5:af:ff:75:53:53:8f:79:9c:1f:
9b:7c:c6:43:af:bc:aa:1f:88:f4:6a:82:f6:e0:15:e4:b4:0d:
48:c8:16:64:c9:d8:01:62:86:33:0c:ce:b6:4c:de:89:94:6e:
0b:57:f2:15:f2:b1:fe:7f:d3:3a:94:ac:52:aa:62:4e:76:56:
83:d3:2d:59:11:5c:18:43:49:d9:ff:cd:98:f4:b3:1d:00:99:
4a:3e:51:c4:08:cc:cd:92:c8:d2:57:e3:c4:6d:da:9b:a9:93:
15:39:9b:6a:da:93:37:3d:81:95:f7:a9:bc:6c:ee:4a:83:0d:
cd:e4:fa:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAFNj68FZDAWnt7Z4O2gg5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGI0YTdkMWU2YWJmZmJjZGE3OGJmYzMzMTI1MGRkMTZi
ZTNkZTAwHhcNMjYxMDE1MTUwMTEwWhcNMjYxMDE2MTUwMTEwWjAzMTEwLwYDVQQD
EygzMDI5ODFiMzA0NzIzN2Q4MDhjZTY2ZjJmZTZmZTY2YTU3ZjBiMjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKKmEOK6qwFWHYCH7nJfniL53Osb
gxVuO+pEwLnZdaIzwQ3dYYUqL6Xe5/EOHvI/ZGv2DOd+sLbfo3EIHFG7ffl9pAjs
cht0nCAUe5TUEZjnRAf4s11iaNneyDjmmquCtmBBMBBBHv/ptFQ0/cA/nyZ1KL1v
p5UuHMfzVxOId8fOCopHmFCGiWHd+PDQb6qUjTH3mJaiGdUOViFcx4SL5b1nKTTv
/WuqDM08FzVYOv5qkXSsTdUOFq1kxSkm2zDpmQ36D+WRcMG+swIsMtLdfnsXpWSf
+kiRuC8tj8maBsxNu4ZLPAOChn3RyfFeSfSkJcy4HS0ASFa1sfpGvjh/NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDApgbMEcjfYCM5m8v5v5mpX8LJbMB8GA1UdIwQY
MBaAFNHbSn0ear/7zaeL/DMSUN0Wvj3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGR0S2ZSNXF2X3ZOcDR2OE14SlEzUmEtUGVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xNWFkMDgtMGZkMC00MDAwLTk2NjIt
Y2M3OGFmNGU4MDE2LzEvMGR0S2ZSNXF2X3ZOcDR2OE14SlEzUmEtUGVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xNWFkMDgtMGZkMC00MDAwLTk2NjItY2M3OGFmNGU4MDE2
LzEvMGR0S2ZSNXF2X3ZOcDR2OE14SlEzUmEtUGVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjhcpP60
WEPLnrswOanrryQ9uWcnUgp2Ne+3DobR1lf9g77tYaJzn0hkd/ItyrDmcjrzDMwg
dkRbCcsoYJBjxFtQAuwyDrZU2D0uEZL1S5waTtdPrWirBxtONoJd1IrdnRM6b7La
GOeWpvyVKlxfVpy3oGeLWurXshNXkeal1AeY5cJ2Z46lr/91U1OPeZwfm3zGQ6+8
qh+I9GqC9uAV5LQNSMgWZMnYAWKGMwzOtkzeiZRuC1fyFfKx/n/TOpSsUqpiTnZW
g9MtWRFcGENJ2f/NmPSzHQCZSj5RxAjMzZLI0lfjxG3am6mTFTmbatqTNz2Blfep
vGzuSoMNzeT6Bw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:11:26 2026 by rpki-client