Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
File: 898KdcnvaBuNIzZ9vo7a0FPzvZU.mft (raw, json)
Hash identifier: Frvwz2dSuLizLo1003EJJbEnFvd2aXO2iBa4eNOo1t4=
Subject key identifier: 21:7E:07:6C:D1:BB:21:74:3E:99:3E:39:87:22:7C:A9:A6:88:D8:95
Authority key identifier: F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
Certificate issuer: /CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Certificate serial: 01A0C7EA29AB8468E50D067019825E0ECA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
Manifest number: 1A65
Signing time: Tue 22 Sep 2026 07:00:07 +0000
Manifest this update: Tue 22 Sep 2026 07:00:07 +0000
Manifest next update: Wed 23 Sep 2026 07:00:07 +0000
Files and hashes: 1: 898KdcnvaBuNIzZ9vo7a0FPzvZU.crl (hash: w3x0plc0jhcIrTJUvnp1kyV96KaLGY5q9fcXn8xEOno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:29:ab:84:68:e5:0d:06:70:19:82:5e:0e:ca:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Validity
Not Before: Sep 22 07:00:07 2026 GMT
Not After : Sep 23 07:00:07 2026 GMT
Subject: CN=217e076cd1bb21743e993e3987227ca9a688d895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:f2:62:fd:ec:b7:db:a2:b2:d9:8e:c2:9b:
9b:2a:e7:78:34:d3:fa:83:ec:dc:c0:05:de:c1:90:
97:bf:1b:a6:1b:fe:e3:44:be:83:59:e7:f2:a8:7c:
ba:1d:5f:49:83:ad:87:62:1d:e9:5a:6c:4d:4e:3d:
17:91:78:e2:0d:a7:66:f9:f5:0c:d6:e7:54:a5:d6:
a1:8c:73:03:bf:16:21:95:69:01:38:d0:cf:fe:72:
d7:c2:cf:a9:44:a0:8e:f4:33:f5:06:89:7f:55:f3:
bb:5f:ee:a3:d8:c7:60:76:f2:fd:7d:6a:82:08:6b:
cb:e7:d0:7c:98:ac:3e:03:36:2a:23:8d:9f:c9:7d:
64:0d:dd:88:35:1c:7e:51:23:ee:e8:ae:4e:24:90:
b8:ad:66:3a:4f:34:d6:63:7b:b2:29:70:fe:60:cb:
a2:fb:6a:0f:1c:2e:6d:1b:f9:d6:90:54:63:8a:b9:
4a:e1:e0:70:4d:48:db:aa:23:69:cf:ca:68:4f:a2:
7a:e0:e2:40:84:53:9b:75:32:90:1a:11:9f:65:62:
38:7f:3c:a6:4f:73:c0:46:d9:62:5c:52:b7:76:c2:
f6:13:10:f0:0b:34:d7:9a:d4:4a:48:b2:8c:39:ec:
19:2b:93:63:8a:58:73:80:c1:a9:38:f9:9e:a5:51:
2a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7E:07:6C:D1:BB:21:74:3E:99:3E:39:87:22:7C:A9:A6:88:D8:95
X509v3 Authority Key Identifier:
keyid:F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:62:f2:2f:e5:d9:01:34:28:ed:e8:1f:4d:26:5a:10:60:d3:
ec:34:40:49:2d:c3:ee:e6:32:6c:9e:3c:56:c7:02:f0:0f:ef:
98:68:5b:f6:39:0e:2c:59:06:14:ee:8d:b0:ed:a6:3b:53:c6:
63:53:42:7e:24:13:b8:41:e8:92:98:64:6e:e9:94:13:71:2f:
b0:7a:fd:f1:ae:b8:9a:d1:c2:ea:6d:e7:91:15:17:67:2c:84:
79:e9:73:d0:37:ec:20:29:22:4f:59:eb:e1:cd:93:f5:6a:81:
0e:d4:77:6b:55:dd:b0:05:5a:64:63:08:fb:8f:28:ce:a7:f1:
fd:ac:e0:14:82:9f:61:b8:68:8c:7f:05:9f:01:a1:2a:1e:2b:
11:95:b8:32:db:cd:a4:63:99:ed:61:44:64:0c:c3:38:68:13:
30:b1:5d:46:2b:87:5f:de:4e:6a:67:5a:b9:ba:aa:41:e9:96:
00:81:45:17:98:16:2a:30:d2:6f:7e:a3:2a:da:6e:28:e2:d8:
1f:0d:2f:e8:d0:10:b2:a4:e0:af:5c:58:d2:3b:7c:b7:c1:22:
19:d1:f6:fc:e1:00:c1:20:17:32:b5:6e:2a:fa:b9:c6:08:e2:
df:c0:d1:0d:08:f7:51:4d:c4:ed:b9:0a:3e:75:0d:8b:1a:62:
11:61:eb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:08:29 2026 by rpki-client