Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
File: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft (raw, json)
Hash identifier: 5zQfSKCFFybkzhfbUxVozvKOx93rp9ei5GQRqfEh6AE=
Subject key identifier: 22:3C:B1:03:7C:D0:A7:25:68:D2:36:33:4D:12:DF:2B:32:EA:DF:84
Authority key identifier: D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
Certificate issuer: /CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Certificate serial: 01A0016FCA6FC5C01F5F860A810EA31C33A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
Manifest number: 10AA
Signing time: Fri 14 Aug 2026 18:01:38 +0000
Manifest this update: Fri 14 Aug 2026 18:01:38 +0000
Manifest next update: Sat 15 Aug 2026 18:01:38 +0000
Files and hashes: 1: 0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl (hash: Hno6JvMzStFXjQz1iCnc/Hc176kH1Y7rvthtQPntq0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:ca:6f:c5:c0:1f:5f:86:0a:81:0e:a3:1c:33:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1db4a7d1e6abffbcda78bfc331250dd16be3de0
Validity
Not Before: Aug 14 18:01:38 2026 GMT
Not After : Aug 15 18:01:38 2026 GMT
Subject: CN=223cb1037cd0a72568d236334d12df2b32eadf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:47:ce:5f:17:a1:7f:b4:d5:e3:41:6c:18:
40:99:db:e8:0f:66:64:e1:42:81:4d:ce:92:9c:e7:
44:d6:07:78:2b:92:b0:31:7e:15:e2:a5:98:6e:e2:
58:f0:88:83:32:3d:b0:a8:b6:19:6c:ae:8b:5e:12:
12:c0:46:29:98:3a:5e:de:ca:9e:db:fd:90:2a:eb:
e2:65:33:8b:0b:50:13:58:61:15:0b:65:53:50:04:
0c:d6:20:90:07:a9:e7:4b:09:e7:ab:f2:35:b2:d6:
11:28:ab:b9:b5:f8:32:69:09:ef:8a:f9:f4:14:db:
a0:69:30:d7:98:4b:b7:0b:f0:2e:03:b2:b2:85:7d:
eb:89:c9:37:0c:fb:cc:50:89:4f:e1:6d:69:9f:af:
c2:f8:4e:60:96:92:5d:27:83:1d:fd:d8:94:62:17:
4a:3e:e7:52:31:08:e7:34:b6:f5:34:5f:76:25:6b:
31:23:e1:73:1e:75:32:0b:18:7a:11:02:62:f0:82:
a2:cf:55:29:4b:f1:21:4e:f0:91:cd:6b:ab:f6:ba:
9c:c7:31:82:a0:b8:38:d7:9f:79:0f:38:29:59:e0:
2a:f9:27:4c:67:6e:be:0c:fe:92:e2:69:b8:99:af:
23:44:f0:7f:01:95:ad:4c:12:56:3d:67:c1:d1:a0:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3C:B1:03:7C:D0:A7:25:68:D2:36:33:4D:12:DF:2B:32:EA:DF:84
X509v3 Authority Key Identifier:
keyid:D1:DB:4A:7D:1E:6A:BF:FB:CD:A7:8B:FC:33:12:50:DD:16:BE:3D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/15ad08-0fd0-4000-9662-cc78af4e8016/1/0dtKfR5qv_vNp4v8MxJQ3Ra-PeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:06:da:14:56:12:13:cf:81:ff:6b:dc:e4:33:5f:68:99:35:
8a:3f:4b:b2:f2:4f:d1:cf:78:68:c4:df:7f:42:0f:5f:29:53:
51:0b:5e:f4:28:66:75:1e:6f:18:e2:0f:b8:dc:88:e1:68:ee:
f1:10:fd:d4:09:0c:21:af:d9:2f:88:12:dc:c4:ed:f2:d1:f2:
24:80:38:2a:bf:33:7f:01:99:58:05:15:4a:9c:3b:5e:5f:6a:
14:02:49:24:1a:8e:38:ef:43:e2:2c:56:f3:b5:6d:3f:53:ff:
97:19:1a:90:e1:c4:23:4d:37:c4:77:f6:67:13:2f:2d:e3:19:
11:ff:6a:6c:5d:89:4a:44:92:b1:73:a0:e6:b4:0b:c0:48:b6:
72:9b:11:cf:89:21:81:59:24:5e:94:f2:34:79:24:90:87:f8:
6f:96:94:68:a6:4a:33:5f:97:90:fd:22:09:1c:a7:db:d0:21:
af:a2:98:47:ca:e2:31:40:f8:01:ca:75:fa:15:77:1c:66:d2:
22:58:6e:a2:a3:12:e5:92:02:7e:66:f7:10:ed:95:38:20:63:
89:b2:e5:de:d5:24:d5:93:4e:0c:cc:9b:46:25:ef:0c:61:03:
49:a2:1b:52:28:b1:f2:5b:ba:09:92:65:4b:64:f1:8e:8b:c1:
eb:5b:89:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:05 2026 by rpki-client