
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
File: 0_ULT8CViQuDHAPZliXA7lQZ01o.mft (raw, json)
Hash identifier: Mv7tecE2mBwoBt7fttjSJUf4Beexwh+MhF9DgUyDktg=
Subject key identifier: 48:68:B7:D7:20:5A:9B:C3:C3:23:E6:72:E7:4E:E7:F6:D3:53:5B:60
Authority key identifier: D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
Certificate issuer: /CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Certificate serial: 01A0C2FB0C2047657A442122773B403CAA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
Manifest number: 1916
Signing time: Mon 21 Sep 2026 08:00:27 +0000
Manifest this update: Mon 21 Sep 2026 08:00:27 +0000
Manifest next update: Tue 22 Sep 2026 08:00:27 +0000
Files and hashes: 1: 0_ULT8CViQuDHAPZliXA7lQZ01o.crl (hash: NSFEw96+PRy9Qb61lvF+cFCkfInQmQwvR3EzwV9vYPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:0c:20:47:65:7a:44:21:22:77:3b:40:3c:aa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3f50b4fc095890b831c03d99625c0ee5419d35a
Validity
Not Before: Sep 21 08:00:27 2026 GMT
Not After : Sep 22 08:00:27 2026 GMT
Subject: CN=4868b7d7205a9bc3c323e672e74ee7f6d3535b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:e9:8a:5c:05:84:dd:d9:b3:cc:23:e1:51:
eb:45:35:59:19:91:6b:29:35:ad:66:35:a1:69:e5:
80:39:18:39:32:dc:5d:51:bb:ee:41:d5:b4:d4:aa:
08:e5:77:a8:b0:bd:0a:7f:8d:8c:de:60:cc:b0:87:
6e:f6:35:2f:82:f2:02:5d:75:5f:2f:69:b1:4e:23:
80:ac:d5:dd:41:2c:73:4f:e8:16:1d:ed:23:a5:c4:
52:18:cb:b2:c2:96:4f:53:74:e4:a6:37:1b:95:be:
a4:5b:fd:a7:3a:75:5c:8c:d7:27:80:a4:df:db:2e:
8f:7a:c8:1f:fb:52:e6:d7:7d:ef:cb:59:52:70:bc:
66:59:f6:bc:fb:13:49:f8:75:59:4a:19:b3:37:4e:
d0:aa:cc:78:ba:e6:5a:25:56:c2:ee:81:d0:ea:75:
19:5c:1e:a5:21:60:7a:17:a9:9b:e1:d4:b8:dc:a7:
a3:1c:7f:01:56:eb:77:24:3a:c8:60:29:58:f9:a5:
ac:57:07:77:8f:e0:e3:fb:ff:6a:ba:e8:8a:ad:1c:
c4:ad:81:bd:30:9e:21:fd:dc:2c:4d:b9:2d:05:1d:
da:fe:ef:90:52:ab:c3:65:2e:b2:d6:1a:3e:58:16:
ed:f6:35:76:ae:d2:c5:6a:9e:fc:f5:40:3f:68:dc:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:68:B7:D7:20:5A:9B:C3:C3:23:E6:72:E7:4E:E7:F6:D3:53:5B:60
X509v3 Authority Key Identifier:
keyid:D3:F5:0B:4F:C0:95:89:0B:83:1C:03:D9:96:25:C0:EE:54:19:D3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_ULT8CViQuDHAPZliXA7lQZ01o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b3037-62bd-4b4d-af4d-77e3217cd39f/1/0_ULT8CViQuDHAPZliXA7lQZ01o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b7:a2:75:43:5f:47:1b:6b:5b:82:07:02:61:04:5a:53:0b:
67:b1:36:5c:08:99:26:35:33:27:db:a7:a7:7d:7a:68:7d:91:
d7:17:89:da:4b:1e:a5:01:06:27:58:02:08:ce:4a:5c:e8:f7:
ad:f8:6b:f6:17:06:d2:1d:8b:7c:6d:3d:15:6a:87:5b:67:3f:
b2:b7:31:dd:4f:06:09:be:fe:f6:76:83:65:6b:ba:a7:26:c1:
5d:9f:f6:7f:3a:e8:57:6a:15:02:db:57:49:14:70:42:6c:4e:
6d:88:94:8a:17:20:52:0b:eb:a6:3e:75:36:89:71:1e:56:79:
27:49:71:7f:f8:13:cc:af:92:ee:f9:61:38:02:7e:dc:b5:46:
d9:bf:db:e1:2b:cf:39:8f:5e:b0:13:8b:b1:09:03:39:41:92:
31:99:90:52:be:94:d2:2e:b3:ac:ec:99:9c:19:bb:af:e9:43:
1b:eb:a1:7f:fb:55:b1:bf:19:5f:37:fa:c4:fd:32:e7:b0:1d:
e2:d4:27:5c:aa:12:16:8b:65:43:6e:06:78:85:d9:63:8d:71:
53:3d:78:ce:b4:c1:20:13:91:77:50:26:51:6c:b9:30:dd:92:
98:b8:79:73:27:d9:e2:12:ab:29:80:fb:c6:60:c8:c8:f7:0f:
02:fe:df:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:47:39 2026 by rpki-client