Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
File: DAHrsNsEzE1pGCs47A30sIkiJ40.mft (raw, json)
Hash identifier: OdFYBHfckbplQEoGXlsh4Y+dktmZtA4DblHVDkigT0M=
Subject key identifier: 38:32:62:D8:05:FA:4F:F6:AF:7C:56:34:48:64:36:42:51:0D:16:38
Authority key identifier: 0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D
Certificate issuer: /CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d
Certificate serial: 019FAA19EA835C45D5C57C24C0C3FD9AB061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
Manifest number: 19CE
Signing time: Tue 28 Jul 2026 19:00:52 +0000
Manifest this update: Tue 28 Jul 2026 19:00:52 +0000
Manifest next update: Wed 29 Jul 2026 19:00:52 +0000
Files and hashes: 1: DAHrsNsEzE1pGCs47A30sIkiJ40.crl (hash: IQw30JU2NTA3dwGrQT+eG1060iBXIadDKeVa76u3Ap4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:ea:83:5c:45:d5:c5:7c:24:c0:c3:fd:9a:b0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d
Validity
Not Before: Jul 28 19:00:52 2026 GMT
Not After : Jul 29 19:00:52 2026 GMT
Subject: CN=383262d805fa4ff6af7c563448643642510d1638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:84:13:20:bb:9b:3b:5c:a1:44:cf:1b:c8:
cf:ba:61:9e:55:47:4d:d9:b6:52:d5:f1:4d:c1:3b:
83:3f:a2:4f:3e:b3:5b:d3:c5:ac:a2:0d:93:8d:13:
9f:0e:be:49:35:ef:2e:5b:51:67:38:cb:e2:4e:95:
40:c3:17:1f:42:c3:6c:d0:20:ce:c2:39:43:d5:69:
74:02:48:3f:be:1d:6c:6c:c1:1c:fa:ed:28:92:b0:
1e:cf:a9:1d:81:31:54:a0:27:ca:b3:8a:41:40:95:
cc:5b:b1:7d:02:f1:9d:9e:78:04:f3:c0:b4:da:cf:
96:56:35:0e:d2:42:8c:28:d7:23:97:14:bf:53:7b:
7e:27:d0:9b:cf:4c:a2:be:05:ac:77:4a:e7:3b:b1:
79:21:3e:d3:c8:7f:5f:20:4e:21:48:9d:3a:0a:c9:
74:3b:51:24:65:f7:ff:9b:fe:3c:4c:66:ff:40:75:
c0:0f:c2:98:74:c5:76:3b:8e:5b:cc:b6:95:89:ef:
4e:32:2f:92:67:6c:24:93:e7:d1:b3:74:51:5a:87:
e7:c5:83:8b:c3:60:7c:a5:ee:d2:50:d2:44:2a:1e:
92:5e:cd:51:7a:25:b3:a0:8b:54:f6:5c:60:49:df:
97:ad:e9:30:41:c9:9e:f2:2a:68:c7:3f:c9:e0:fb:
e3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:32:62:D8:05:FA:4F:F6:AF:7C:56:34:48:64:36:42:51:0D:16:38
X509v3 Authority Key Identifier:
keyid:0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5b:de:c6:36:9e:04:fe:3c:1e:aa:8e:02:72:71:fe:b1:50:
ef:4f:e5:f1:60:21:6e:3f:d2:ac:4b:88:1f:3d:ad:b6:2c:36:
47:22:27:c8:e6:66:21:4c:6f:fa:1c:93:b7:4d:5a:70:37:88:
87:9a:50:af:d7:b0:5b:51:3a:2c:06:35:fc:df:97:8d:ee:78:
24:48:3e:e5:89:54:1c:31:ea:1c:52:15:95:0c:3f:8c:66:54:
84:82:5d:f7:0b:68:fb:ee:5c:a5:d6:c6:6f:6c:79:a2:f2:08:
4e:f7:f4:9a:43:40:ec:3e:6c:43:39:48:78:f4:cc:e8:c7:e8:
5b:4a:ef:dd:c2:70:47:5b:28:97:29:80:dd:91:d8:b1:be:7c:
b6:ca:dc:e3:2d:db:67:9f:82:16:64:eb:b4:be:f9:1f:26:06:
b4:c7:38:d3:1e:78:43:ee:a3:9e:06:1a:ed:a3:dd:5e:f8:7e:
7f:a3:0b:06:a1:33:d4:7d:46:87:99:03:31:a6:6c:25:d8:0d:
6b:e2:13:9c:58:51:24:4b:f5:3a:08:bb:8e:96:f9:b1:13:c1:
37:aa:34:cd:28:94:4a:05:29:81:f6:d3:59:af:eb:b5:7b:44:
81:30:91:ec:65:ad:a1:a4:d2:d2:77:0e:35:f9:b0:20:fa:7b:
bb:a7:50:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:18 2026 by rpki-client