Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
File: DTr3NGYY2GMOAUanZREkQ-DCyP8.mft (raw, json)
Hash identifier: DQZQt3n0SKpP5lad/HiLzpq2PEqYEQW66a0WEXg6+yI=
Subject key identifier: C4:59:48:5F:F2:52:C2:D9:82:42:36:66:25:9E:C7:A1:A3:0B:6F:16
Authority key identifier: 0D:3A:F7:34:66:18:D8:63:0E:01:46:A7:65:11:24:43:E0:C2:C8:FF
Certificate issuer: /CN=0d3af7346618d8630e0146a765112443e0c2c8ff
Certificate serial: 019EC06D41977DA8893D8B4AC4488AA1F7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
Manifest number: 09ED
Signing time: Sat 13 Jun 2026 10:00:46 +0000
Manifest this update: Sat 13 Jun 2026 10:00:46 +0000
Manifest next update: Sun 14 Jun 2026 10:00:46 +0000
Files and hashes: 1: DTr3NGYY2GMOAUanZREkQ-DCyP8.crl (hash: jv/qA9L7kcW8GtaGo0+uSXGI4+Gp7Lq6BIkuE3WxF1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:41:97:7d:a8:89:3d:8b:4a:c4:48:8a:a1:f7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3af7346618d8630e0146a765112443e0c2c8ff
Validity
Not Before: Jun 13 10:00:46 2026 GMT
Not After : Jun 14 10:00:46 2026 GMT
Subject: CN=c459485ff252c2d982423666259ec7a1a30b6f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:24:21:bb:a3:1c:2c:e4:42:de:0a:97:d1:
d6:b4:17:2f:c2:b5:d0:98:83:aa:76:ed:eb:50:2d:
39:4c:dd:ee:eb:4d:bc:15:d4:b7:31:8e:d1:e9:50:
19:bb:b1:75:96:8a:b8:a4:66:c8:eb:2f:9a:43:e8:
7d:06:6c:cd:d8:64:fa:aa:8d:0e:20:65:68:13:e1:
b6:ec:15:45:98:70:c2:69:47:71:cd:36:b2:2b:c8:
51:34:da:bc:4e:52:c7:6c:80:ba:61:7e:58:02:bb:
2a:fe:20:b5:68:30:45:ac:3c:07:0d:9b:a9:d0:69:
d6:ae:61:e5:41:f4:37:0b:d7:62:c2:c5:95:21:f6:
e4:23:d1:e1:0b:23:f3:13:64:90:7f:e7:53:48:07:
a9:dc:a2:22:0b:69:f9:c0:a9:9d:48:3a:3f:b4:3d:
e6:2c:19:87:07:21:1b:1e:88:f8:c7:56:7d:4d:4f:
1f:e2:13:f0:b3:3e:e2:43:d7:1e:96:02:ae:14:9c:
3b:26:82:d3:a8:6b:46:66:0b:28:6b:e2:a0:5a:03:
83:45:14:3d:97:f9:d3:89:ac:4b:c8:f1:4e:4c:b7:
d2:27:b8:5e:68:80:a8:73:80:37:97:f3:6e:8f:2f:
a6:e8:5d:67:cc:0c:27:09:fe:6f:cc:54:76:e5:6a:
59:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:59:48:5F:F2:52:C2:D9:82:42:36:66:25:9E:C7:A1:A3:0B:6F:16
X509v3 Authority Key Identifier:
keyid:0D:3A:F7:34:66:18:D8:63:0E:01:46:A7:65:11:24:43:E0:C2:C8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a9:fe:03:c8:cb:b7:78:3d:81:35:a8:72:fd:0f:de:e8:0e:
aa:a7:bb:b1:11:0a:52:67:ec:53:90:3c:0b:cf:c0:3d:ab:49:
98:5f:69:1f:e5:d1:ee:9d:f5:80:e0:9b:48:2f:db:f6:9a:91:
05:db:31:b2:43:11:99:0a:30:be:32:1d:d6:94:65:75:7e:12:
6c:d7:3a:55:2f:b0:4b:e1:aa:d4:45:70:42:83:3d:6a:e7:a3:
32:41:9d:ef:f3:03:49:df:63:12:59:0b:ab:db:c1:69:ad:57:
cc:fb:cf:26:83:47:c9:eb:25:7b:42:63:2b:4a:bd:24:55:bf:
b0:ab:a4:1e:7b:29:42:a6:50:1b:58:ea:2f:a3:cb:8e:d8:cb:
c0:06:4d:23:6b:3c:b1:f7:09:29:f1:88:f0:39:5a:1a:76:5d:
86:48:12:3e:57:46:e0:7a:be:ac:1a:2f:b2:e2:f3:5a:41:a0:
3f:01:d2:c5:81:99:4e:94:41:d4:bd:e6:a7:58:74:f9:11:50:
a6:60:52:16:44:e4:15:9e:cf:64:f2:2a:71:3d:0f:5d:54:39:
73:eb:c2:a8:1d:58:f1:61:6a:39:89:fd:6f:6c:85:dd:74:6a:
e4:56:fe:13:f7:22:60:70:a3:cc:36:76:13:18:1c:05:f2:87:
af:5d:d8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:51 2026 by rpki-client