Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
File: DcHMqlhPs5FOeS_VOQ47otMDM4w.mft (raw, json)
Hash identifier: JVufk10KUSDTvSyPhIsK3GOOlrqxcGPypAsXCL0u1sw=
Subject key identifier: A6:50:3F:F3:17:5C:07:B4:FB:2B:4E:1E:5C:40:1D:36:24:E5:F2:B2
Authority key identifier: 0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
Certificate issuer: /CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Certificate serial: 019FA97551720819B61B656A6FB70B249873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
Manifest number: 1398
Signing time: Tue 28 Jul 2026 16:01:05 +0000
Manifest this update: Tue 28 Jul 2026 16:01:05 +0000
Manifest next update: Wed 29 Jul 2026 16:01:05 +0000
Files and hashes: 1: DcHMqlhPs5FOeS_VOQ47otMDM4w.crl (hash: sZTtWBca2wNALLIBoWz5TiuYYG2829dYPctlMhvaZh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:51:72:08:19:b6:1b:65:6a:6f:b7:0b:24:98:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Validity
Not Before: Jul 28 16:01:05 2026 GMT
Not After : Jul 29 16:01:05 2026 GMT
Subject: CN=a6503ff3175c07b4fb2b4e1e5c401d3624e5f2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:b6:8e:87:ba:14:ff:22:53:31:77:a9:d8:
bf:45:72:a0:a1:0d:0c:f8:48:cb:6e:8a:f8:c5:74:
ab:ad:19:7d:b1:12:e8:fe:c1:7f:68:29:8c:79:7f:
79:d8:52:d5:4d:06:77:be:94:1e:72:e9:3f:e2:6a:
0f:47:e2:50:c3:40:d2:f9:6c:c9:1c:e9:34:84:24:
bd:47:54:81:47:80:c9:fb:c7:44:68:b9:f1:b4:8e:
05:0f:db:45:8f:d9:94:8e:1f:bc:7e:92:57:6e:22:
56:c7:82:4e:1b:ac:70:9a:5f:74:e5:ed:dd:e0:14:
20:4f:18:ce:11:d9:68:e0:02:7c:ad:2d:60:23:5f:
1d:9a:99:9b:e7:49:2c:89:88:1a:c6:4a:24:3c:e6:
49:cb:fc:93:be:1a:ff:56:46:0e:fd:61:2c:b6:4b:
c8:ff:56:d9:1c:d6:ad:ac:fc:72:bd:b2:54:48:bc:
9f:66:5c:82:2d:2f:b2:8f:3b:05:db:7f:96:d1:0e:
28:79:d3:7f:53:23:f5:7e:92:04:53:94:a5:0b:27:
13:47:52:42:b4:e4:51:57:37:d0:b9:9e:0f:50:18:
03:38:fb:8a:c5:c8:13:c7:8e:57:d0:a5:3e:0d:4b:
41:91:6b:91:77:a9:da:49:5c:7e:db:cf:7f:39:67:
b9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:50:3F:F3:17:5C:07:B4:FB:2B:4E:1E:5C:40:1D:36:24:E5:F2:B2
X509v3 Authority Key Identifier:
keyid:0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3f:2f:4c:86:1a:56:3c:d8:38:df:ed:4d:d1:f7:bb:27:fe:
37:19:8d:85:4a:eb:88:99:7e:85:61:b8:2a:f5:a7:f8:37:80:
f6:be:e7:96:e9:59:20:57:51:3e:96:b5:ea:98:77:51:d2:0b:
32:ac:6b:e0:fb:38:05:19:97:78:57:c3:14:97:57:da:d7:e9:
07:20:f8:35:b5:c2:0d:fc:9e:98:89:47:74:59:f6:a1:6a:ec:
fa:27:4a:f5:6a:a4:f8:fc:5e:78:a9:0e:25:14:16:1a:23:0b:
b4:8f:e2:1d:4a:5b:b7:68:9d:4e:69:7c:e9:09:d0:12:a2:a3:
0d:93:f5:a1:3c:8f:e9:14:7d:cf:d9:cd:44:97:68:11:4e:8b:
49:1e:b2:38:fd:04:43:a0:36:44:a5:a7:7d:0a:3f:ab:52:05:
f5:79:f6:d9:8e:f9:25:d7:fa:10:55:c3:25:de:c3:0e:2b:2f:
f6:cf:56:63:3a:fc:dc:82:75:f7:b5:0a:e9:08:33:e2:9e:1a:
29:f8:be:12:d9:81:44:41:ab:75:21:de:a1:81:01:59:d3:ce:
91:6a:23:9c:df:fa:c1:ca:fd:6c:11:7a:e9:1a:88:4a:86:d7:
71:43:4c:de:13:ee:53:b4:50:a8:42:01:d2:49:9a:89:6f:26:
80:97:97:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:37 2026 by rpki-client