Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
File: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft (raw, json)
Hash identifier: 0PtTnyQKGS1KXmtnnfaTpiU4gIH0qfwE/kqqWUf0YU0=
Subject key identifier: 59:7F:43:4A:02:87:84:A4:18:2D:16:9A:5D:50:18:17:D1:3C:D0:9F
Authority key identifier: D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
Certificate issuer: /CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Certificate serial: 01A128E8D7CF68C1522D5AEB424F670BC1B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
Manifest number: 17D0
Signing time: Sun 11 Oct 2026 03:01:50 +0000
Manifest this update: Sun 11 Oct 2026 03:01:50 +0000
Manifest next update: Mon 12 Oct 2026 03:01:50 +0000
Files and hashes: 1: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl (hash: 68YbiA/UBCMB+PfLtHuoW9YR05Zhgkxv5KK3H9bMy94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:d7:cf:68:c1:52:2d:5a:eb:42:4f:67:0b:c1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Validity
Not Before: Oct 11 03:01:50 2026 GMT
Not After : Oct 12 03:01:50 2026 GMT
Subject: CN=597f434a028784a4182d169a5d501817d13cd09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:6d:2d:9c:42:64:ce:c3:72:86:07:7f:75:
a1:a1:51:8d:c3:da:60:22:8e:a5:d6:20:ca:56:c7:
5f:3a:6d:2f:1e:89:71:73:d1:8c:3f:28:fa:af:d5:
04:82:e0:e1:f8:40:20:cb:cc:78:39:3a:ce:d3:f0:
5b:32:92:70:f3:0b:e0:0d:75:91:66:c3:33:91:f2:
fd:f3:3b:b1:70:8a:ba:8e:5d:39:5c:00:33:bb:e0:
34:d4:8b:33:bf:5d:03:06:1d:92:03:05:26:57:81:
0b:cf:67:d9:73:19:ac:fd:1c:ee:6f:c9:3f:23:7f:
2b:e1:e5:05:cc:6a:12:49:47:5d:b5:1b:1f:b4:22:
8d:1c:e4:a8:c4:57:fc:a9:4d:68:5d:d2:a6:87:c8:
f9:bc:94:8b:34:e3:7f:77:3f:9b:98:ad:52:ba:12:
18:3f:0b:3f:a7:bc:f4:25:20:19:3f:a0:cb:82:c9:
ae:1b:f3:7c:2e:82:8a:92:c7:7e:f8:6d:4b:0c:bc:
72:8f:32:b8:13:21:65:4e:3b:ba:97:4c:17:b3:8b:
5f:f3:9e:14:58:b7:3f:f6:9d:64:a4:cb:06:f9:b7:
bb:ba:9c:c5:47:24:38:bb:3b:0f:5c:d1:8f:f0:6d:
b6:b4:dc:fe:74:21:1a:26:bb:77:41:c8:8f:a8:de:
c5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7F:43:4A:02:87:84:A4:18:2D:16:9A:5D:50:18:17:D1:3C:D0:9F
X509v3 Authority Key Identifier:
keyid:D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fb:70:55:b0:47:a9:d4:76:ef:a2:81:60:69:ab:be:66:ba:
0e:f3:61:19:a0:61:a5:5b:c4:bc:4e:57:19:9f:8d:c0:37:d8:
97:5a:9f:8b:19:0a:c1:a9:62:2e:e5:30:96:89:19:86:93:ce:
7d:41:b8:bc:77:a7:b9:16:8c:02:ef:23:bb:03:62:24:46:bc:
5d:78:83:3f:d6:e0:6e:af:36:97:a1:5a:f8:90:2d:97:9a:f2:
7f:14:fa:4d:f3:61:e2:d3:10:f3:98:59:dc:f6:5e:95:e1:ba:
6c:90:bd:90:1e:c9:f4:57:a5:06:c4:cd:6a:42:52:46:56:82:
2d:6a:49:a3:58:6f:99:df:ad:f3:61:b6:2d:21:cf:6e:a7:bb:
d7:14:61:2f:6a:9b:90:c8:ff:b5:8c:4e:b4:79:6f:d4:9e:9d:
6e:6a:da:55:54:d0:6c:7b:9d:d0:67:8d:28:68:65:bb:3d:60:
c7:de:b6:4c:33:c4:fd:1e:b4:ce:7e:9e:73:a4:63:24:39:a5:
75:78:f2:4b:0f:06:0b:3d:a7:06:da:5c:79:32:a0:75:97:15:
0f:b5:81:42:86:13:fd:7d:bd:b6:ea:28:8f:77:6c:5f:3d:23:
68:ba:4b:c7:8f:a8:df:c1:7c:31:ac:49:84:6e:06:d0:44:5a:
9c:d6:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:24:02 2026 by rpki-client