Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier: us/kVmFZhZ6x7/J8bWRtxFYwwXNL5aQtgFSEyBGtST0=
Subject key identifier: 53:DE:47:A6:99:AF:AD:A9:F9:4D:89:57:21:B0:35:56:8B:3F:78:70
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer: /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial: 01A0EAAE77D052C8B4EBE388E20AC3318B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number: 094F
Signing time: Tue 29 Sep 2026 01:01:37 +0000
Manifest this update: Tue 29 Sep 2026 01:01:37 +0000
Manifest next update: Wed 30 Sep 2026 01:01:37 +0000
Files and hashes: 1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: iewxYLZFivtWz5bVDT4OHNlE8v3tPQK3tQKERcAcx0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:77:d0:52:c8:b4:eb:e3:88:e2:0a:c3:31:8b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Validity
Not Before: Sep 29 01:01:37 2026 GMT
Not After : Sep 30 01:01:37 2026 GMT
Subject: CN=53de47a699afada9f94d895721b035568b3f7870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:b1:62:a1:53:3b:33:3e:c2:b0:69:f8:47:
ea:49:62:b5:85:52:97:4c:7f:4a:77:7a:0b:1c:b1:
ea:69:90:c0:3a:56:6e:aa:e3:ed:d5:9a:c0:ec:11:
4c:99:db:70:12:c3:01:58:63:20:27:ed:d6:70:9e:
52:d7:37:a4:32:ca:6d:50:51:cc:f0:7a:27:97:d5:
fa:c3:c0:a1:97:86:69:2f:1d:35:79:45:95:bb:9c:
3c:24:01:23:ae:ec:d1:b6:d1:80:01:c8:f4:49:03:
4a:16:02:f2:44:ce:28:ed:56:8f:d9:fc:55:90:fc:
61:f2:79:fa:14:27:93:24:55:35:39:15:21:0b:c7:
14:57:28:02:b0:e9:57:5b:ec:0d:73:17:fd:ff:90:
79:77:87:25:63:a8:10:e6:5e:9c:02:f9:ef:8c:e7:
6a:f0:2a:02:87:eb:87:50:3b:97:09:23:e3:89:ed:
3a:2f:b8:9e:4b:23:7d:34:17:6f:12:7e:3d:6b:28:
aa:b2:ea:0e:95:92:94:56:80:bb:3c:1a:bf:0d:bb:
5a:ff:6f:86:01:7d:10:f7:c9:ac:b1:2d:9b:99:96:
c7:1d:20:e3:d8:76:6b:47:86:79:94:32:b7:ef:25:
2f:26:5c:3c:81:c5:5d:fc:e5:31:29:fd:1a:79:f1:
80:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DE:47:A6:99:AF:AD:A9:F9:4D:89:57:21:B0:35:56:8B:3F:78:70
X509v3 Authority Key Identifier:
keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f0:e7:f4:f6:2b:b0:f1:75:ec:fe:0c:99:ff:5e:bd:98:73:
8f:c4:f6:85:bf:cb:31:2d:1e:04:3f:76:5a:45:46:53:e8:5f:
2a:fc:c0:b7:e8:a9:9d:1f:88:be:c2:11:8a:71:d3:08:7d:38:
14:bb:07:e7:1c:77:bd:b8:e9:01:c0:bf:48:4b:dc:35:7e:f3:
5b:5b:7a:60:46:7f:87:60:e9:15:e2:d2:03:22:92:ee:6c:24:
01:de:6a:5e:b7:64:c8:22:88:7e:99:a1:0a:25:cc:2f:d8:29:
11:d6:a1:58:43:2b:41:d7:c1:6f:e6:b0:bb:97:1b:8e:74:22:
30:81:f0:5c:11:21:f8:ef:d9:13:1a:fd:18:80:b5:f3:3b:95:
06:0b:d0:87:91:ac:5c:d7:b2:36:9d:ab:17:16:23:a5:3a:0f:
72:26:15:ad:28:9a:ae:3c:1e:e4:cc:be:27:f2:b2:01:42:50:
47:65:27:4b:81:31:1e:71:d2:f7:dc:d5:e2:b2:1f:cd:22:b1:
9b:d6:2b:1a:de:fe:dc:ab:fe:e5:f7:40:82:2b:8a:73:ae:8b:
40:b5:28:1b:76:8f:af:7e:0c:c2:b0:b9:63:c0:2a:12:0c:be:
ab:84:f0:05:f6:89:81:ea:da:8b:48:9d:f8:5d:a1:9f:f3:32:
3e:32:ff:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:49:39 2026 by rpki-client