Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
File: DTr3NGYY2GMOAUanZREkQ-DCyP8.mft (raw, json)
Hash identifier: TtJvgqqZvQp0zhKRV+WoqnUAsrb0B8KINjA1stAqYAg=
Subject key identifier: D4:E0:AD:47:FA:AC:9D:77:12:24:C6:76:A0:7E:5B:95:18:30:C5:36
Authority key identifier: 0D:3A:F7:34:66:18:D8:63:0E:01:46:A7:65:11:24:43:E0:C2:C8:FF
Certificate issuer: /CN=0d3af7346618d8630e0146a765112443e0c2c8ff
Certificate serial: 019CAB6BF73F6F1B3F6B1A34896C72259FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
Manifest number: 08D9
Signing time: Sun 01 Mar 2026 22:01:45 +0000
Manifest this update: Sun 01 Mar 2026 22:01:45 +0000
Manifest next update: Mon 02 Mar 2026 22:01:45 +0000
Files and hashes: 1: DTr3NGYY2GMOAUanZREkQ-DCyP8.crl (hash: 7tOTd5HaRW2NSP9dVdXxKVYQh93HA0zWpqizSnfcP5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:f7:3f:6f:1b:3f:6b:1a:34:89:6c:72:25:9f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3af7346618d8630e0146a765112443e0c2c8ff
Validity
Not Before: Mar 1 22:01:45 2026 GMT
Not After : Mar 2 22:01:45 2026 GMT
Subject: CN=d4e0ad47faac9d771224c676a07e5b951830c536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:18:fb:ac:d0:82:02:41:8b:2b:5f:2d:85:
57:dd:ba:c3:8d:02:27:92:29:fd:ce:e3:58:8e:f6:
72:5f:ed:7b:3f:12:bf:98:32:23:0d:2e:3f:5b:39:
35:16:68:49:d9:e1:db:8e:69:d3:e3:87:ea:ba:c6:
8d:6d:6c:7e:d7:09:e6:b7:ff:03:60:d7:4f:bc:fc:
73:0c:dd:4a:7a:0a:28:cf:cf:81:c9:a0:5c:73:7b:
09:29:27:36:13:1d:de:5f:53:b5:43:0e:5a:e9:a2:
b5:ab:d6:c9:34:9b:18:b7:cc:b2:1c:7d:7b:b8:0f:
8f:fc:76:e2:34:e5:8f:8a:72:e8:db:99:b6:ea:5b:
06:10:25:1a:fc:40:0c:ed:d1:6a:5e:b1:32:10:92:
1e:f6:6b:2b:23:d3:41:12:bb:ff:c4:98:bc:e2:d3:
4f:2a:41:69:b9:ca:6b:f7:b8:10:fd:0a:75:24:79:
dd:28:df:e0:ce:cd:b4:5e:9f:cd:dd:30:95:96:46:
67:f2:71:0a:f1:7b:fc:f7:09:45:6a:8d:40:18:90:
c0:44:d1:c5:d6:f9:ad:41:54:f0:5d:d2:34:fd:83:
9c:c6:d0:82:9a:fd:47:d4:c6:ad:76:af:24:81:94:
c7:08:c3:9a:f8:1a:64:7f:9b:5d:45:5a:11:23:6f:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E0:AD:47:FA:AC:9D:77:12:24:C6:76:A0:7E:5B:95:18:30:C5:36
X509v3 Authority Key Identifier:
keyid:0D:3A:F7:34:66:18:D8:63:0E:01:46:A7:65:11:24:43:E0:C2:C8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:92:9d:2c:14:48:b2:95:75:23:de:9a:26:1b:87:59:91:ed:
0e:2c:3c:1d:3d:c3:0f:23:3b:57:45:3d:2a:91:03:d2:c2:16:
14:f5:6b:34:9e:37:3b:59:60:3d:dc:5b:ba:36:96:68:e8:4f:
ef:a4:0a:60:25:2b:9b:6e:3e:f8:2d:e1:f6:f0:c1:ce:97:c4:
33:b4:2b:04:1b:4c:ff:e7:91:5c:99:37:7e:7e:1b:2b:5b:fc:
3b:6d:63:a0:bf:42:ec:36:28:a9:f0:42:ed:8b:8c:1c:ba:c3:
95:9d:1e:dc:98:07:b2:59:32:82:31:b0:28:05:00:93:73:ec:
09:ee:d2:91:c4:17:db:3a:87:0d:e8:ea:cf:7f:22:52:38:20:
9c:6d:8e:bd:05:22:05:fb:8d:15:b8:f1:ea:12:78:95:d2:12:
7f:7f:9b:92:d4:3c:0d:cf:64:53:70:ff:82:92:95:86:2b:15:
95:48:0b:e0:39:f5:6d:17:1a:2b:d1:ce:26:71:3a:89:73:72:
a3:44:40:b1:a0:43:e8:02:bf:af:05:99:a4:1b:96:c3:a2:f5:
ae:c4:c5:bd:db:fc:da:de:68:bb:b4:12:53:33:00:68:5c:4b:
d8:7e:6d:74:46:38:82:2e:dc:51:ab:93:b2:8b:fd:ca:68:38:
f6:a3:ab:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:47 2026 by rpki-client