Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
File: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json)
Hash identifier: bH5cH9csZm8amRy2q4UxLwAgiXCEn4HNoqKK82wA9VI=
Subject key identifier: 69:E3:56:C9:37:A9:DB:1D:6C:84:67:E1:B2:DC:B6:1F:35:F6:83:22
Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
Certificate issuer: /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Certificate serial: 01A0C88FB60029B34D2DB33046359E66633B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
Manifest number: 1567
Signing time: Tue 22 Sep 2026 10:00:56 +0000
Manifest this update: Tue 22 Sep 2026 10:00:56 +0000
Manifest next update: Wed 23 Sep 2026 10:00:56 +0000
Files and hashes: 1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: xX+nzuEytBPVtLmFJsD5FvzHmqR/hRCmbbQrhPLEbZ4=)
2: 1pCvkt2PpE0ZPUQ0xcRpclm4Vx4.asa (hash: DhYV1vMdkhq6+tjylyKNPB9YXFnru1L+V/7iVRsUG3M=)
3: 2xGqMqbFa646EMEXsukXriphVW8.roa (hash: odEL2M6BYLsF4njGikEkDGjtP1dJDgPaubWbiCHPAAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:b6:00:29:b3:4d:2d:b3:30:46:35:9e:66:63:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Validity
Not Before: Sep 22 10:00:56 2026 GMT
Not After : Sep 23 10:00:56 2026 GMT
Subject: CN=69e356c937a9db1d6c8467e1b2dcb61f35f68322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:66:13:93:d4:56:47:9d:2e:24:97:30:71:
d8:b5:2d:28:4e:3d:f3:91:40:41:9b:e7:1d:9c:9c:
c0:97:70:68:41:df:88:66:09:94:ca:4e:14:ed:66:
ab:6b:a0:c1:08:e6:f1:bf:5c:e8:b5:64:9a:bd:06:
91:ab:41:57:1a:8d:d6:f0:3a:66:6f:99:7f:c6:af:
34:f2:28:37:6a:e9:f8:41:ba:21:71:37:c5:ab:2e:
11:37:6a:42:12:d7:ba:53:b9:fd:f9:09:02:d3:f6:
4c:6a:42:7b:dc:a8:64:e0:d0:66:27:58:16:93:12:
e6:88:a0:aa:63:9e:11:15:01:d3:dc:f1:32:f4:2a:
3d:bf:91:cd:5c:10:85:05:9f:83:ae:cc:bc:5e:8e:
ba:72:b3:6d:c5:ee:51:7b:ad:5e:c7:c8:31:48:ad:
4b:96:6a:85:87:85:1f:1f:6c:51:60:f5:09:57:fb:
34:bf:c2:ce:93:45:ff:3e:68:d3:e1:d9:91:00:b0:
84:77:5e:cb:d9:56:0a:bc:67:ae:ab:32:01:f7:06:
09:8c:d9:43:25:ad:a8:19:ca:42:f3:45:f3:0b:33:
04:b3:3e:05:8d:fd:19:ff:9a:73:5e:36:5c:2e:71:
87:83:b7:4d:f2:c2:99:26:36:12:47:20:18:bc:2b:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E3:56:C9:37:A9:DB:1D:6C:84:67:E1:B2:DC:B6:1F:35:F6:83:22
X509v3 Authority Key Identifier:
keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:59:3d:a0:8b:d7:de:5b:ad:46:31:ba:cb:aa:86:76:05:3f:
97:d1:a5:12:64:dc:7c:bd:1f:26:b6:be:0d:a5:30:b0:28:09:
68:08:f9:a1:40:3d:52:54:ae:2d:99:e9:1a:5c:85:f4:f1:bf:
00:b2:2b:99:c6:1f:d4:f1:4f:f3:b9:6a:82:9b:7e:c3:a3:98:
3b:23:04:25:20:8f:95:bc:a2:bd:f3:ce:66:6c:fe:91:2f:04:
79:45:d3:33:f3:6b:69:f1:d1:47:90:37:e5:f9:ab:48:34:9a:
1c:39:b1:96:d0:9a:7b:d4:78:1e:9c:15:6d:df:ef:0d:f2:ad:
ca:77:6d:2b:da:d3:52:d0:68:ba:55:8f:27:ac:5d:77:7c:d8:
41:11:b9:b9:34:79:d0:d6:12:38:88:71:e8:ff:d5:50:af:e0:
8c:0b:96:05:03:55:37:b7:8e:47:4d:09:21:75:e8:04:c1:7d:
54:db:5b:a5:96:5f:22:52:aa:b2:af:51:30:59:84:ab:91:44:
08:fc:4a:fe:c6:56:45:fc:1e:03:1c:14:3f:fc:a0:ae:b9:03:
96:e6:62:97:64:2f:a3:ec:76:d0:36:11:d3:d6:e7:e8:20:be:
c2:32:58:c6:5a:f2:91:b1:eb:e4:0e:17:d9:1f:13:f8:c0:06:
4f:39:71:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:06:59 2026 by rpki-client