Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
File: 0_ULT8CViQuDHAPZliXA7lQZ01o.mft (raw, json)
Hash identifier: 7ZMVhZ09ULMG2tcX7/MBgsKabzlk5MaZqCRRvi6mx90=
Subject key identifier: 0D:41:B2:A6:19:16:73:7B:E5:44:A4:F5:C6:F8:3B:CC:A5:E1:F8:EE
Authority key identifier: D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
Certificate issuer: /CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Certificate serial: 019E3072670EB362D04D10612461F7CFFF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
Manifest number: 17C1
Signing time: Sat 16 May 2026 11:01:04 +0000
Manifest this update: Sat 16 May 2026 11:01:04 +0000
Manifest next update: Sun 17 May 2026 11:01:04 +0000
Files and hashes: 1: 0_ULT8CViQuDHAPZliXA7lQZ01o.crl (hash: srdr2vn9Pu9q4VmRYn70JKfi2nqci2/cmXa4IJQGxvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:67:0e:b3:62:d0:4d:10:61:24:61:f7:cf:ff:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Validity
Not Before: May 16 11:01:04 2026 GMT
Not After : May 17 11:01:04 2026 GMT
Subject: CN=0d41b2a61916737be544a4f5c6f83bcca5e1f8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:71:55:89:eb:22:11:88:0e:dd:9c:b2:3d:21:
c4:89:e0:cf:1e:3d:0b:72:ba:fb:3a:96:e0:3c:97:
84:1b:ba:98:22:ff:c4:47:06:36:65:1f:c3:ca:11:
7a:3b:30:07:df:57:de:e8:1f:61:ef:ed:46:cb:b2:
ae:38:60:6a:23:fb:d2:b9:21:8d:28:cb:d6:27:13:
73:b4:5c:8a:7f:cb:47:06:82:02:e5:b5:1b:57:93:
a5:2f:c7:19:08:88:6a:94:83:d4:2d:21:6d:57:40:
19:68:61:70:f6:bd:95:83:0c:2c:b9:d4:f6:6e:6c:
bc:ee:00:14:45:44:6e:e9:78:ed:07:b5:d6:90:16:
3f:0a:0b:27:cd:d1:96:04:f4:12:da:83:01:ee:dc:
21:89:66:9b:a1:81:98:66:76:71:bb:0a:b4:71:03:
26:98:52:d0:8a:83:b1:d1:0f:87:bb:6b:35:4b:14:
d7:a9:9a:e0:c7:0d:10:a7:09:8b:6b:9c:c1:08:71:
1a:8c:2a:1f:c1:1a:92:39:c4:c5:2e:1c:a6:9d:64:
93:e0:7c:28:1a:3e:f1:c3:5d:bd:79:b5:5f:5d:4c:
53:d0:8b:dd:72:6e:8e:75:0f:bf:87:0f:0a:1b:fb:
96:19:07:3c:51:4f:14:e3:a9:c6:77:9a:fa:8c:c1:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:41:B2:A6:19:16:73:7B:E5:44:A4:F5:C6:F8:3B:CC:A5:E1:F8:EE
X509v3 Authority Key Identifier:
keyid:D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bd:25:8f:b9:d9:54:2d:08:ee:de:22:dc:19:92:63:e7:e6:
cb:7b:e4:54:74:79:27:20:1f:73:88:7a:bc:8f:20:b2:83:33:
9b:58:cc:67:d0:e4:c0:b0:46:68:6b:7d:46:66:4e:d9:07:ad:
6f:2d:03:38:50:11:17:c8:1f:29:8a:ed:92:fc:0c:1d:f3:1d:
4a:76:d4:67:aa:d8:df:1b:70:b2:6b:b5:dc:c9:6a:b0:3b:93:
f8:15:53:07:42:41:d4:bf:d1:2f:be:69:a6:6b:99:32:5a:a4:
ce:8c:72:82:72:54:e7:6c:89:0f:5a:f3:9a:d5:bb:51:a3:a2:
ea:2c:2e:21:3b:13:4d:46:0d:dd:b1:8c:18:47:cf:3d:85:39:
0e:63:1c:b3:8d:6a:7a:c2:e8:56:f3:33:8d:82:06:27:3f:fe:
52:c6:3b:e6:1d:aa:dc:f9:b6:60:81:3b:15:86:ac:62:25:35:
d7:6f:9b:7a:d0:26:08:98:7f:d0:4c:37:73:18:47:d9:db:73:
70:05:d6:c1:8f:2d:9b:73:fa:ad:f2:1d:a3:8c:4f:cb:cf:e2:
77:41:de:55:bd:20:9a:8a:49:30:90:0d:54:0c:b6:a8:7c:f9:
c5:56:67:80:d2:a7:75:d0:1d:6e:26:b5:c1:45:b2:af:7b:72:
4a:2a:5f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:39 2026 by rpki-client