Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
File: 0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json)
Hash identifier: 7UXlJVGRpEBMCA0WEq59EjwXLJK5WmfElsOCOq1Exdw=
Subject key identifier: 4F:C4:40:78:48:94:8A:F0:53:60:FC:41:D7:9C:ED:C4:6C:C6:75:A0
Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
Certificate issuer: /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Certificate serial: 01A10A3943C7143D6C9A9CA4221FA8D2AD8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
Manifest number: 17C0
Signing time: Mon 05 Oct 2026 04:01:27 +0000
Manifest this update: Mon 05 Oct 2026 04:01:27 +0000
Manifest next update: Tue 06 Oct 2026 04:01:27 +0000
Files and hashes: 1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: anxyzPCdYogWrpOfv1i/jz+RLq+LVwrvJ7opp4SfQGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:39:43:c7:14:3d:6c:9a:9c:a4:22:1f:a8:d2:ad:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Validity
Not Before: Oct 5 04:01:27 2026 GMT
Not After : Oct 6 04:01:27 2026 GMT
Subject: CN=4fc4407848948af05360fc41d79cedc46cc675a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:f2:78:b2:2c:e2:b1:c5:2c:ed:65:1c:bd:
19:e1:6d:28:b1:d6:3c:b7:bd:6c:30:16:ba:ff:4a:
f5:b8:b7:bb:38:83:b0:d2:3d:05:7b:dc:10:c9:f8:
8b:33:19:4a:3b:ff:fa:83:5b:68:fd:10:ca:02:b2:
6f:90:3d:94:09:9e:75:ec:93:6c:3a:8c:59:1c:f2:
62:0d:24:24:5e:46:8c:20:0e:a9:54:47:e6:6d:26:
a9:73:4b:a0:83:42:cc:5f:e5:41:02:5e:f2:7c:5c:
b1:3c:f5:89:52:11:ae:cf:24:04:26:3c:39:7c:27:
67:0e:52:62:06:17:0c:d5:b1:00:ba:38:ba:6c:62:
23:f1:0a:25:ce:aa:52:c4:68:00:8f:18:cb:fb:21:
d3:06:25:25:90:28:b1:08:d7:9d:33:3b:a9:e0:3a:
f2:31:49:bc:3f:51:42:f4:90:56:c8:e8:cc:d6:b1:
fc:84:f7:3f:85:23:e1:b3:04:3c:c2:eb:b0:db:65:
0c:34:f3:81:21:a6:0f:57:ca:01:62:d7:4a:9a:da:
7c:b2:43:f5:45:66:4c:89:65:2f:e8:76:ab:d3:2e:
02:c0:d1:4c:45:a9:41:00:f0:67:09:1e:05:c1:05:
c5:b1:a9:eb:c2:f9:07:07:8e:6c:b7:c7:52:96:b4:
21:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C4:40:78:48:94:8A:F0:53:60:FC:41:D7:9C:ED:C4:6C:C6:75:A0
X509v3 Authority Key Identifier:
keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:52:d8:45:54:71:c8:66:62:c9:60:64:d8:85:5c:fd:a1:6b:
ba:54:af:8b:49:98:0f:b5:4a:5b:74:ba:d6:52:0c:48:28:e9:
e8:e3:c7:29:92:e7:f3:97:bf:30:c1:f2:3b:76:98:bb:a5:02:
5c:62:02:04:93:5f:72:a9:53:b2:56:07:50:8d:be:b3:a6:24:
5c:ea:f8:c2:36:6f:91:e4:e6:b5:a2:95:59:78:3b:99:b9:77:
c8:52:f6:f7:22:cb:8d:a7:71:de:81:79:69:a1:fe:d7:59:e5:
57:a2:8d:6d:35:b7:38:6a:41:ef:1e:56:be:17:99:ec:54:9e:
34:27:ba:48:72:6b:84:c2:b7:54:94:af:82:b4:eb:5e:57:9e:
4e:9f:1e:6a:f4:98:c1:67:9e:54:a6:a6:7d:b2:99:9e:a1:61:
5c:16:fd:58:db:11:04:bc:96:2b:09:f6:50:17:76:cc:f3:4d:
21:97:c9:0e:35:a0:55:48:9a:b0:ec:cb:db:13:05:42:a6:40:
82:46:90:6d:a2:41:a1:7e:b1:1c:f9:7e:10:b6:74:46:37:f1:
d9:74:41:53:3f:27:a7:14:af:27:76:dd:53:eb:3a:69:e6:a1:
7d:c9:51:52:94:70:a5:57:79:fe:30:b4:c5:12:13:96:7b:15:
fb:57:81:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 11:16:19 2026 by rpki-client