Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
File: 0_ULT8CViQuDHAPZliXA7lQZ01o.mft (raw, json)
Hash identifier: z2zEAF5Fr71jIWwGcAGMF93Zs3g7vwYnWaVuCIdBJiw=
Subject key identifier: CB:2B:AE:8C:2B:09:F8:5F:CB:8E:0C:8F:33:2F:12:A5:5C:DD:A0:C1
Authority key identifier: D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
Certificate issuer: /CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Certificate serial: 01A13CA5442945F783348CA8195163AC3124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
Manifest number: 1955
Signing time: Wed 14 Oct 2026 23:00:26 +0000
Manifest this update: Wed 14 Oct 2026 23:00:26 +0000
Manifest next update: Thu 15 Oct 2026 23:00:26 +0000
Files and hashes: 1: 0_ULT8CViQuDHAPZliXA7lQZ01o.crl (hash: lbJoeK3y/AwSxjRDFD+GtV5j4MofBPmkCvSotN7Y0G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:44:29:45:f7:83:34:8c:a8:19:51:63:ac:31:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Validity
Not Before: Oct 14 23:00:26 2026 GMT
Not After : Oct 15 23:00:26 2026 GMT
Subject: CN=cb2bae8c2b09f85fcb8e0c8f332f12a55cdda0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:65:75:c4:ae:2e:b6:d2:65:f7:ce:d2:4f:
b8:a1:e2:9a:c7:d9:55:ae:a5:2c:6c:76:4b:7f:1f:
e2:04:32:36:aa:e1:0f:a6:51:17:e7:c8:ef:dd:b7:
3f:bd:40:7f:18:16:5b:ea:38:37:76:78:f3:b7:a9:
d1:70:b7:5f:7f:1b:84:87:23:71:a3:93:85:c2:98:
bd:11:6b:e0:c8:b8:4e:78:40:27:53:69:df:d9:20:
93:05:eb:4e:69:51:04:2e:52:6c:d8:49:d1:d3:43:
85:1a:85:27:c9:a6:76:56:6a:4b:89:f2:c4:03:0c:
18:d4:64:c2:cd:e4:e0:ac:90:1c:fd:27:fc:e0:30:
58:ba:83:e4:90:6e:15:70:da:ae:92:5c:05:4f:60:
11:d2:ad:a2:99:01:90:3a:41:f5:02:e6:11:74:55:
08:cd:05:53:00:c9:b2:f7:8a:08:0b:b0:89:bb:9d:
2f:26:01:72:44:14:df:a4:75:9d:a9:7a:b1:59:b3:
84:0c:e4:e8:98:fa:35:27:6c:75:2c:90:43:2e:9d:
73:86:6f:40:43:3d:57:05:2a:dc:48:d3:3b:1a:49:
53:31:97:65:bb:bc:02:39:ca:8c:d0:18:b7:91:74:
33:7d:80:cc:8e:4c:da:e8:49:ce:0a:9e:a7:df:b7:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2B:AE:8C:2B:09:F8:5F:CB:8E:0C:8F:33:2F:12:A5:5C:DD:A0:C1
X509v3 Authority Key Identifier:
keyid:D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b8:04:6b:0b:07:cd:fa:d9:3c:20:0b:14:b6:0b:aa:0c:b9:
1e:25:cf:7c:70:df:14:bd:b8:6c:ef:0b:e1:3d:6d:1c:8c:ac:
bc:1a:37:87:12:94:e8:d7:14:db:2a:76:fc:8c:dc:40:dc:46:
5b:78:e5:bb:14:a8:d1:d2:9e:64:26:f4:08:16:37:17:c3:31:
1b:96:2a:e1:9a:23:ed:8f:6a:7b:ac:6a:0f:45:2b:0c:89:4f:
55:52:60:b1:0e:6b:91:f9:73:68:6c:8f:6d:78:c2:35:8f:e4:
ed:03:ad:c7:ed:5b:77:9e:7f:86:bb:fa:8a:33:da:ed:3d:9f:
c8:8d:c1:36:7e:20:8c:b9:19:9e:a2:cf:17:d8:45:8c:e4:69:
3b:2c:ab:8b:bd:bd:7e:2a:51:ac:ca:ad:93:e2:4a:82:e5:43:
7f:e4:de:c6:ca:a5:4d:ad:42:ce:e8:ed:41:62:cf:d3:d3:e9:
85:c4:1b:e6:65:69:43:bf:f6:b4:da:0f:66:23:1a:15:30:80:
c3:72:28:7e:54:9c:32:ed:12:b4:fa:8d:db:38:7b:a4:4f:d1:
8a:a4:18:0a:c3:1f:a1:f8:03:6a:fd:9f:31:8a:3c:d6:51:a5:
a0:7c:6c:51:2e:cc:d4:ad:e1:5d:dd:65:b1:cd:ad:1b:ec:c7:
fc:94:c2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:12:41 2026 by rpki-client