Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
File: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft (raw, json)
Hash identifier: dsMQKDIhwMlOfN9WLAgAwtMZ6fb9x2dIubJh3ehZzso=
Subject key identifier: 3B:E6:A4:B1:36:5B:2F:2D:18:70:70:BE:47:96:1A:A7:6F:A9:12:BA
Authority key identifier: D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
Certificate issuer: /CN=d217978586bff3a6777d55a9a9635841516d43b4
Certificate serial: 01A125AFF3FAA65E664EE3EE6DD871D9FBCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
Manifest number: 102B
Signing time: Sat 10 Oct 2026 12:00:50 +0000
Manifest this update: Sat 10 Oct 2026 12:00:50 +0000
Manifest next update: Sun 11 Oct 2026 12:00:50 +0000
Files and hashes: 1: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl (hash: 1xDrJnWEJbUTgerpJF61AKCvU+h6ytE+DUA7QMxFonI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:af:f3:fa:a6:5e:66:4e:e3:ee:6d:d8:71:d9:fb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217978586bff3a6777d55a9a9635841516d43b4
Validity
Not Before: Oct 10 12:00:50 2026 GMT
Not After : Oct 11 12:00:50 2026 GMT
Subject: CN=3be6a4b1365b2f2d187070be47961aa76fa912ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:38:2b:c3:48:cd:03:cc:d7:54:6c:81:57:
00:90:aa:73:58:ce:4b:0a:34:a6:c7:6e:df:3b:ba:
27:61:93:66:14:05:d7:c7:91:f9:77:d1:a9:3d:a5:
ea:a5:08:bc:64:3b:2d:b6:7b:07:c4:56:3d:d5:92:
e4:1e:cf:0a:e0:78:49:95:4a:27:b1:d5:6c:83:ae:
4c:73:a2:26:fa:7a:a5:05:79:ad:73:e7:69:60:ee:
e4:93:db:a1:eb:fe:25:88:4c:a1:61:af:ed:90:2d:
70:68:0c:00:0b:ee:b9:ac:d6:0e:96:3f:ba:ad:49:
ef:2c:8d:ad:ed:cb:07:90:61:ab:b8:fc:92:dd:e5:
3c:56:ef:53:32:f6:74:11:45:a4:63:bf:0e:8d:3d:
5c:3d:c1:ed:2f:74:c8:a8:48:02:22:14:5f:02:25:
e0:0d:38:42:74:92:36:ba:36:9f:ee:31:90:e2:4d:
d0:4c:ac:7f:39:57:1c:fd:0b:f4:df:0e:61:4d:0d:
82:5b:58:65:78:e4:d3:48:29:c7:93:3e:a8:14:72:
56:0e:32:18:60:89:07:da:1a:d8:8f:00:74:a4:ca:
36:3a:bc:10:4b:30:1d:d3:a2:de:f3:9e:6d:12:48:
e5:53:7f:c7:bd:5d:61:3f:36:08:f8:f8:0e:bd:97:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E6:A4:B1:36:5B:2F:2D:18:70:70:BE:47:96:1A:A7:6F:A9:12:BA
X509v3 Authority Key Identifier:
keyid:D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:05:8f:ed:fc:d0:14:37:a2:ef:98:04:16:56:3e:9b:7b:db:
89:f5:23:d5:f4:b3:21:6a:c5:5b:f0:1b:f5:2b:f3:36:be:0d:
77:1c:f5:ff:13:46:67:f7:8a:0d:f9:79:e5:a3:db:4f:e2:44:
b5:b2:aa:b8:72:2b:ef:d7:8b:13:30:49:72:d4:56:db:22:23:
8c:1e:0c:0a:86:02:94:c6:19:e1:96:af:9b:c5:a1:0b:34:38:
f2:a5:aa:0b:a9:73:da:ca:16:0c:00:dc:68:db:25:6e:4c:de:
41:c9:49:71:d9:69:47:eb:9d:23:10:0a:55:14:e3:85:40:2b:
3b:70:76:5c:d9:b6:98:9a:01:07:d5:64:4f:26:62:7f:d2:bf:
41:95:2b:db:79:c3:61:f7:89:03:a1:90:70:14:35:21:8c:15:
ab:0c:a7:f2:39:1a:01:b1:ee:04:c7:8a:dd:fa:40:2d:a8:bd:
42:90:cd:eb:39:50:e1:e3:ec:de:f6:10:23:a0:83:76:4c:2f:
28:21:3c:bc:00:7c:c6:62:7d:55:af:fb:d6:f1:93:a8:34:8e:
c5:4f:4d:29:01:f8:9e:3f:86:d8:d3:31:ee:d5:92:b1:ec:04:
7a:80:16:57:ae:ed:6d:44:51:c5:4a:72:17:cd:5b:4a:6c:ff:
75:27:66:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:24:24 2026 by rpki-client