Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
File: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json)
Hash identifier: ukKmj8eC6Zm0/eNFacVommJtZWW+lq+GP5jF2DkxHh4=
Subject key identifier: DC:93:72:AB:BD:EB:16:61:C4:38:27:A2:82:5F:F0:C4:93:3A:6B:D8
Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
Certificate issuer: /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Certificate serial: 019D9999888856A6B3AB2F725EB5CD23CD06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
Manifest number: 13C1
Signing time: Fri 17 Apr 2026 04:01:09 +0000
Manifest this update: Fri 17 Apr 2026 04:01:09 +0000
Manifest next update: Sat 18 Apr 2026 04:01:09 +0000
Files and hashes: 1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: wQcJXkFtbDv7jAK+/D4onOpw4a3k4hghG/ODq1vb/cA=)
2: 1pCvkt2PpE0ZPUQ0xcRpclm4Vx4.asa (hash: DhYV1vMdkhq6+tjylyKNPB9YXFnru1L+V/7iVRsUG3M=)
3: 2xGqMqbFa646EMEXsukXriphVW8.roa (hash: odEL2M6BYLsF4njGikEkDGjtP1dJDgPaubWbiCHPAAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:88:88:56:a6:b3:ab:2f:72:5e:b5:cd:23:cd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Validity
Not Before: Apr 17 04:01:09 2026 GMT
Not After : Apr 18 04:01:09 2026 GMT
Subject: CN=dc9372abbdeb1661c43827a2825ff0c4933a6bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:15:f5:2b:fc:3c:0d:ea:37:7e:1c:ef:73:
b8:68:ab:5e:33:93:85:9f:94:b6:41:b6:12:3f:0d:
28:18:24:5e:19:f5:1e:e4:c3:2a:b6:83:7a:91:cf:
d3:a1:8b:08:aa:5a:11:ff:4b:fd:05:3e:09:85:a3:
a4:b2:d0:2f:b5:7e:57:ce:74:5b:f3:bc:52:76:76:
04:a0:de:04:5a:c2:50:e9:9c:61:81:05:6f:6b:bc:
a7:69:8c:2a:11:96:0a:67:ae:aa:0a:03:da:6d:53:
cd:f5:89:a1:02:ae:2b:a6:8a:f0:8f:38:a9:a5:bd:
7f:d0:64:45:bb:ea:cb:c7:1e:e9:a7:e0:07:d8:73:
d9:cf:9a:78:31:a6:07:8e:1b:49:80:ec:4f:84:a6:
52:5f:f0:58:c6:4f:7d:f1:96:92:41:89:d9:8f:b1:
e2:b6:f2:90:2c:0d:6d:b7:f2:b4:bc:85:4e:68:cb:
47:19:22:9b:09:39:0b:c3:4a:2b:23:c3:57:77:4d:
2f:6c:70:12:a8:44:77:77:6e:69:f3:39:58:d9:39:
5d:c0:03:e4:0c:28:c5:2c:f7:93:8a:eb:f9:c3:4d:
36:54:5a:0f:a4:0f:54:d4:91:0d:6f:14:18:fb:d8:
c4:dd:2e:28:5d:56:3b:87:58:c5:52:96:ad:98:4c:
6a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:93:72:AB:BD:EB:16:61:C4:38:27:A2:82:5F:F0:C4:93:3A:6B:D8
X509v3 Authority Key Identifier:
keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:91:b9:32:04:30:1a:60:52:72:d8:84:02:b7:48:cc:bb:be:
49:80:10:4c:4a:fa:d2:0c:a5:81:5c:f6:5a:ea:8b:48:c6:21:
ee:63:2f:0c:40:22:c1:55:18:0b:4b:29:a1:d8:b8:61:9e:8b:
39:32:ce:e2:a2:f2:c8:f7:39:7a:bb:fb:a8:c6:94:50:ba:fe:
33:de:01:fd:74:e5:c2:70:49:61:34:87:b5:f9:0f:ce:e1:9d:
a4:d1:77:3e:78:ea:c2:e5:4a:d3:7f:74:02:f1:fa:04:42:cf:
84:d5:72:b0:97:be:09:6a:ab:89:52:cf:67:dd:9c:16:3b:a7:
aa:e4:f8:c2:ad:d3:34:b2:3b:18:1b:b1:62:3a:b5:ff:82:a1:
06:83:75:ca:9f:bf:74:44:c2:d5:f9:b2:41:d3:e0:90:96:f1:
79:31:b5:7c:c7:e8:8b:ae:6f:e9:0b:57:ae:18:99:0d:48:b1:
3a:f0:27:20:da:81:e3:32:03:1e:27:52:a0:c1:5d:87:25:37:
b3:97:7d:d5:e0:af:bb:c3:14:cf:99:0d:06:13:dd:8d:d3:15:
23:d3:45:de:70:3d:78:bf:66:dc:cc:d5:74:a4:93:3a:77:59:
81:15:35:9f:b4:08:46:b4:3b:e6:cd:b7:ba:9d:7f:45:40:79:
51:36:32:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:10 2026 by rpki-client