Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
File: 0NxXC8HJZLq37VbGc6pAUY-FRXg.mft (raw, json)
Hash identifier: BqoMp2l/nMNHLB/23KpeQqPei3y/YtmxomZUP7M+InE=
Subject key identifier: 49:E6:0F:5B:76:8E:16:80:56:EB:29:7E:59:F5:10:67:4C:AA:59:6D
Authority key identifier: D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
Certificate issuer: /CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Certificate serial: 01A11CE3B258F3DEF29A0F923CE3681F109E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
Manifest number: 1A91
Signing time: Thu 08 Oct 2026 19:00:46 +0000
Manifest this update: Thu 08 Oct 2026 19:00:46 +0000
Manifest next update: Fri 09 Oct 2026 19:00:46 +0000
Files and hashes: 1: 0NxXC8HJZLq37VbGc6pAUY-FRXg.crl (hash: 8TcedhjnijWurb+059FRmloaGKpR3rlQ656PcE992yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:e3:b2:58:f3:de:f2:9a:0f:92:3c:e3:68:1f:10:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0dc570bc1c964bab7ed56c673aa40518f854578
Validity
Not Before: Oct 8 19:00:46 2026 GMT
Not After : Oct 9 19:00:46 2026 GMT
Subject: CN=49e60f5b768e168056eb297e59f510674caa596d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:ac:59:4c:92:6c:cb:1c:27:18:59:34:d6:
1b:ba:42:d4:89:b1:59:b8:a5:de:82:f4:27:d3:48:
d2:99:fd:34:21:a2:50:92:c8:28:4f:ad:59:31:ea:
7d:7e:cf:b1:15:cb:9a:42:71:af:34:8b:db:4d:5c:
80:03:3e:e3:6b:e8:e6:5b:f9:d3:ad:c3:7e:f5:9b:
a5:90:16:02:50:c5:09:98:9d:c7:cf:65:3b:ea:1e:
12:5d:30:25:50:16:3e:49:67:be:a4:cb:f4:28:f7:
b5:3a:92:ae:1f:3e:e8:78:f0:b5:bf:a2:29:fd:9f:
ba:42:16:15:a8:a6:c5:73:a4:64:b1:66:c8:11:1d:
43:0a:51:13:31:c5:aa:5d:04:10:c0:fc:c4:d7:49:
9d:04:62:51:4a:dc:54:30:66:12:80:74:3e:83:49:
3e:04:65:56:a3:f8:35:4d:8c:f1:7a:16:3e:e1:bd:
40:16:a9:5c:01:8e:05:a8:a0:f5:82:fe:c7:37:28:
1e:50:63:3a:b3:30:40:a5:1f:ca:71:54:ca:de:11:
5e:14:82:ea:f5:18:0d:1d:0a:8b:34:8b:51:2e:67:
3b:cd:8e:38:ab:0b:39:1e:2b:8b:f2:2e:fe:87:b1:
ed:6a:b0:7b:67:08:bf:c6:88:26:1e:92:5f:b0:d0:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E6:0F:5B:76:8E:16:80:56:EB:29:7E:59:F5:10:67:4C:AA:59:6D
X509v3 Authority Key Identifier:
keyid:D0:DC:57:0B:C1:C9:64:BA:B7:ED:56:C6:73:AA:40:51:8F:85:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NxXC8HJZLq37VbGc6pAUY-FRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/47d692-dd40-4bf2-893f-d38dd0b78909/1/0NxXC8HJZLq37VbGc6pAUY-FRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:af:f8:65:eb:53:7b:65:2b:88:ae:18:94:03:9b:51:da:a8:
7b:16:3e:67:94:cf:d2:21:af:b5:4a:95:2e:0c:48:b4:ab:55:
fd:8c:aa:22:59:36:e4:c9:a8:4c:20:a0:11:2f:66:a0:7a:ee:
b6:56:85:28:8a:5e:e8:a3:dc:03:fd:2a:f2:7e:b1:fd:a3:0e:
1b:5b:c2:40:80:40:2f:ab:7b:28:23:c7:f0:9b:68:af:12:20:
d3:c8:5e:ce:a9:b6:7b:98:0e:12:ff:69:b8:5f:87:25:bb:0b:
5f:1b:c6:e5:24:5c:0f:be:48:82:6a:d5:03:5b:ea:fb:ed:46:
7b:f8:03:04:5a:df:a4:f0:da:69:6a:a7:3c:f5:3b:b1:75:8d:
16:44:95:44:ef:9b:63:9f:70:75:f9:15:e0:13:09:fa:52:fe:
bf:46:df:0a:d0:27:03:c5:4c:f8:80:03:c4:2d:53:c4:58:b0:
5c:5e:c2:3e:46:ca:de:75:11:ec:e0:56:c4:99:ec:18:3a:df:
d5:cb:3d:41:0d:17:b0:98:08:89:a3:af:9a:b7:f5:ad:59:cc:
6b:18:f1:98:f6:b6:39:5b:2c:dc:0c:f9:24:3d:17:02:fd:62:
d6:dc:7f:84:ea:42:bf:bd:a1:c4:d7:39:ec:e5:de:98:f7:ca:
f4:f1:1a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 03:06:30 2026 by rpki-client