
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier: cCsUhHwn7R/mkuM752UpdE8tO+l7kyUkGpVMKq7lf+Y=
Subject key identifier: CA:7E:0B:11:27:60:78:07:7E:25:CA:E8:A7:00:56:32:8A:D7:CA:FF
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer: /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial: 01A147605195849F73A66E2A2F282BFB7218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number: 097F
Signing time: Sat 17 Oct 2026 01:00:56 +0000
Manifest this update: Sat 17 Oct 2026 01:00:56 +0000
Manifest next update: Sun 18 Oct 2026 01:00:56 +0000
Files and hashes: 1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: lBVyVJHLh6kQeGhZauVS6WtTLYZvucjgpNNTxQQOth4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:60:51:95:84:9f:73:a6:6e:2a:2f:28:2b:fb:72:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Validity
Not Before: Oct 17 01:00:56 2026 GMT
Not After : Oct 18 01:00:56 2026 GMT
Subject: CN=ca7e0b11276078077e25cae8a70056328ad7caff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:7c:5d:ef:b1:15:eb:af:1f:0d:49:40:bb:
eb:df:e9:d8:87:87:1b:71:86:d4:32:2c:3d:42:19:
17:e5:12:ba:63:ba:5b:57:08:13:0e:db:ed:e1:40:
0f:32:a4:d3:15:7a:ca:45:84:82:5f:56:21:ea:2c:
f6:be:4d:06:42:3e:c5:c1:cb:41:32:01:89:34:3c:
a0:06:5b:fd:a1:66:65:53:39:90:60:9b:ee:d0:17:
07:69:ec:12:3c:66:47:0c:38:93:d7:23:6f:71:8a:
ab:4b:0a:12:d9:63:4a:80:59:ed:23:27:d4:17:3c:
cb:07:af:a8:7f:dd:ad:90:5f:8c:f7:2f:7e:0c:97:
fb:53:36:14:09:61:00:99:ee:9a:03:83:19:62:97:
06:59:80:2b:df:5d:93:07:16:91:d8:92:be:84:ac:
7b:93:c3:b0:a2:d8:e8:65:83:a8:71:3c:cb:49:30:
fb:aa:d3:04:4b:42:dc:7f:d3:dd:ad:0e:6c:bb:60:
c4:20:bc:92:b2:4b:c9:27:b2:1a:55:02:6d:7f:93:
25:f0:b9:41:85:43:99:25:6a:8f:f5:3e:9b:f9:1e:
e0:94:92:25:fb:9d:77:14:e5:fd:d0:52:84:55:4c:
dc:c9:22:a1:26:5e:8f:58:c7:b3:ba:9a:cf:b6:17:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7E:0B:11:27:60:78:07:7E:25:CA:E8:A7:00:56:32:8A:D7:CA:FF
X509v3 Authority Key Identifier:
keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:89:e1:f9:26:5f:dd:dd:3e:b0:1d:f1:49:02:39:bc:53:7c:
d2:e5:98:ae:9e:74:06:bc:8f:bc:94:9d:ba:8f:cc:85:06:da:
c0:a3:bd:d0:ae:15:f5:b9:ab:aa:c6:8a:fe:d3:da:69:52:90:
17:30:76:40:d0:26:fb:63:b8:21:53:e9:a0:37:95:83:1e:20:
28:92:c3:b3:32:c0:fb:b2:55:cb:93:0a:db:90:85:16:2f:49:
85:07:f4:5e:08:8f:03:1c:d8:2e:3d:1a:66:29:be:d2:ff:e8:
eb:1e:e5:79:a5:13:39:1b:53:0d:96:52:40:45:8c:f5:c0:dd:
16:8c:d0:04:c5:11:71:20:a9:b0:51:7a:0d:53:af:80:30:bc:
e8:a5:e6:04:fa:09:5d:e6:3b:ae:24:a3:a5:8a:05:01:09:31:
77:1a:5e:6b:f7:20:55:6a:f7:29:b9:7b:96:5f:74:4a:82:f4:
25:be:ed:1e:88:92:8f:47:f2:47:18:86:26:a1:80:8c:ed:5b:
08:56:fe:a2:b0:f9:0a:ca:0f:35:ba:52:ba:bb:ef:76:93:5d:
da:72:26:39:08:79:39:a6:ab:47:22:7f:18:00:d5:9d:5c:5f:
3d:5e:09:30:37:a6:f9:12:90:c4:27:ff:6f:cb:89:dd:02:26:
cc:cf:92:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:12:50 2026 by rpki-client