Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
File: 0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json)
Hash identifier: tsOzxww1qZGRCqseGU9/pZEkEE9maPcRndSPKPirPHk=
Subject key identifier: 6B:02:81:42:C0:25:09:51:F8:D1:99:D6:EF:45:95:42:7D:60:65:D7
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial: 01A13E945827F81F8918B7833047F5B6311A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
Manifest number: 19A4
Signing time: Thu 15 Oct 2026 08:01:11 +0000
Manifest this update: Thu 15 Oct 2026 08:01:11 +0000
Manifest next update: Fri 16 Oct 2026 08:01:11 +0000
Files and hashes: 1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: jrpXuZTWsBFFuXwdMa6smwN4bFhZHkNkp/mKaE5jrvY=)
2: cjgT7b7LYeNp4gJNcn-t-JKsvkw.roa (hash: 8t1u0wHQqLOP5QRswUwGb0F26EqFaE1jpZ2Y496m/4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:58:27:f8:1f:89:18:b7:83:30:47:f5:b6:31:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Validity
Not Before: Oct 15 08:01:11 2026 GMT
Not After : Oct 16 08:01:11 2026 GMT
Subject: CN=6b028142c0250951f8d199d6ef4595427d6065d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fd:b7:63:d3:fb:97:c3:cc:b3:6c:57:ad:a9:
00:d4:92:f5:5f:5b:21:73:15:00:c5:1b:6b:40:a1:
ad:ed:c1:9e:37:b7:b2:47:da:04:35:0f:46:e5:47:
a3:e3:46:c2:70:f8:54:4e:b1:7f:42:2b:5f:e1:43:
ff:43:81:ee:51:90:03:d6:be:e6:51:8f:32:b5:19:
ce:e8:e8:59:24:46:16:0e:91:50:ab:ad:5d:e8:11:
42:bb:46:e0:99:1f:19:2c:59:84:95:65:54:86:a6:
52:a2:bd:a2:e1:9c:92:21:12:93:4e:01:28:33:fa:
a1:b5:52:dd:2f:15:0f:7e:40:dd:c9:a7:13:18:b2:
26:ea:c4:09:7b:a8:5d:28:70:be:ab:db:28:69:7d:
db:17:a2:b8:b2:09:17:64:06:03:7e:18:16:e4:e3:
a6:ff:71:fe:06:af:e1:b8:d6:b1:2e:7f:3c:76:e8:
4e:cd:eb:e2:b6:85:ea:34:4b:54:8a:c4:d0:33:1a:
be:f8:df:00:c5:04:55:a8:77:80:34:bc:81:2c:2a:
97:c3:7f:e2:8e:08:5f:b5:d4:07:90:22:c8:97:6a:
a7:b8:42:f7:ab:ee:44:a2:3b:17:c4:4b:5a:68:ce:
e6:88:7f:8f:c6:f8:a1:10:80:46:a0:b5:09:8d:11:
3d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:02:81:42:C0:25:09:51:F8:D1:99:D6:EF:45:95:42:7D:60:65:D7
X509v3 Authority Key Identifier:
keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e8:45:36:1a:7b:05:11:2f:8b:89:79:da:33:4b:2f:7c:d9:
e6:70:94:b8:e2:cd:d3:be:86:48:de:75:8c:f6:70:65:46:9b:
87:bf:41:75:a2:c4:a2:41:66:82:fa:6f:f0:98:5e:05:db:43:
a3:84:3b:96:b5:9b:50:f9:ae:59:49:dc:9a:a9:b3:d9:86:c4:
5a:a0:27:aa:a6:0a:19:ea:ae:7c:88:e6:e7:e5:46:75:5e:b2:
c8:58:8f:41:e7:96:4b:36:b5:cc:e2:44:ec:65:e5:6b:2e:74:
80:41:b6:9d:ee:96:71:f5:45:45:31:d7:74:77:1a:cf:60:d6:
54:df:5a:7a:9d:c6:d9:ec:5e:eb:c9:46:4c:c3:42:c5:b2:02:
97:ab:12:89:02:b5:90:4b:cd:02:18:e1:f2:7c:53:55:f4:32:
15:76:96:8a:dc:60:fd:17:72:6f:9a:a2:59:e3:d3:a2:f7:75:
0f:3c:8f:9c:ef:66:e3:60:da:79:db:56:b5:96:1e:70:05:cb:
60:09:a9:71:d7:44:61:26:b2:5c:6f:d8:9e:92:c1:d1:a1:19:
b4:22:83:6a:5e:d9:47:2e:ed:71:b2:e2:6b:84:a8:02:51:8c:
9f:88:ad:92:c1:90:ed:35:a7:a0:6b:fc:6c:f4:21:67:32:bc:
fa:8a:63:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:20 2026 by rpki-client