Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
File: dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft (raw, json)
Hash identifier: GIXHjF8m862gfNlQVbGtWwaF8E3gr2v99HozTJnk1tU=
Subject key identifier: 97:01:B2:F3:1D:F0:60:9F:DA:6A:56:31:4A:D5:11:D8:44:B8:1F:8E
Authority key identifier: 74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6
Certificate issuer: /CN=74230d142eec7f6a99b0db4096f93a0420483fe6
Certificate serial: 019D98F4A046969122EB74EE96C4D9F40B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
Manifest number: 0AB6
Signing time: Fri 17 Apr 2026 01:01:01 +0000
Manifest this update: Fri 17 Apr 2026 01:01:01 +0000
Manifest next update: Sat 18 Apr 2026 01:01:01 +0000
Files and hashes: 1: dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl (hash: 6tC5oqD25m+1lcroUj6tADfamXoKLH5kffN3ZyjgNNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:a0:46:96:91:22:eb:74:ee:96:c4:d9:f4:0b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74230d142eec7f6a99b0db4096f93a0420483fe6
Validity
Not Before: Apr 17 01:01:01 2026 GMT
Not After : Apr 18 01:01:01 2026 GMT
Subject: CN=9701b2f31df0609fda6a56314ad511d844b81f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:25:a3:56:e3:c3:c8:a2:9c:a4:93:36:6a:
29:60:fb:e5:32:54:4e:07:ed:1d:64:79:bd:2d:73:
0f:3d:55:6f:52:87:6b:26:f9:9d:c9:b5:5a:64:03:
53:a2:d4:11:12:10:78:87:d5:5f:c5:3f:fc:57:fa:
b3:e7:40:ff:19:76:75:aa:f9:66:fd:02:79:1c:1e:
23:ef:55:a0:d6:87:2d:bf:f8:a5:e4:3b:27:ba:cd:
17:5e:57:b2:86:91:84:fc:49:88:67:b5:de:2e:63:
20:22:4a:67:9b:23:70:35:0e:a5:ab:9e:2f:99:a1:
cc:79:48:a6:aa:03:cb:7f:7a:3a:2b:59:07:0f:f1:
7a:78:db:41:96:c2:44:13:07:c4:e2:2c:2e:a1:22:
f7:b6:72:79:07:e0:af:d5:fa:ed:35:a0:e5:5d:f8:
0b:53:d4:83:8d:3f:7d:be:0a:f6:5f:fe:43:a1:ca:
ef:3b:bc:46:5c:0e:86:e1:b4:0f:b1:56:37:3f:e4:
be:c5:83:83:fb:c2:4a:dc:7b:fc:58:a7:19:46:dd:
29:31:7c:6c:69:a8:50:0a:32:06:79:c5:8e:0a:57:
cf:3c:ae:5e:da:1a:1a:3d:9c:38:63:45:ab:fb:89:
13:b7:1a:40:e9:ea:1d:2c:bf:39:f3:65:0e:f2:2b:
0d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:01:B2:F3:1D:F0:60:9F:DA:6A:56:31:4A:D5:11:D8:44:B8:1F:8E
X509v3 Authority Key Identifier:
keyid:74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6a:a8:c9:5a:9f:64:00:32:28:c6:ca:77:88:88:6c:40:fc:
74:19:87:95:fe:c8:a8:f4:43:a2:38:8f:96:a9:b0:cd:c0:ae:
3e:01:1a:98:eb:ef:75:63:ab:94:6e:00:15:53:30:98:02:ea:
3f:33:34:e7:db:36:b0:aa:54:58:55:9c:a4:8a:26:6b:f3:b5:
dd:bf:b9:fd:e8:a4:b1:35:19:57:44:b6:e2:6d:de:00:b2:76:
8f:b8:46:15:88:fa:fa:eb:00:49:a2:7b:70:65:46:56:e1:7e:
2a:12:18:8b:f2:b6:be:17:17:20:35:4c:8b:64:34:7c:ea:45:
8f:a1:e4:5e:13:99:2c:c0:d2:e2:13:81:ef:d4:28:d3:42:98:
7b:d8:64:3a:b2:3f:8d:16:a0:c4:3e:46:6e:2b:02:0c:31:1d:
9f:b2:4c:38:7b:e6:4d:e0:27:da:87:bf:ce:1f:db:7a:36:98:
ed:3e:f5:d0:9e:5d:c8:b8:34:bd:09:53:21:7b:8c:98:a5:a9:
3d:eb:85:e5:99:d2:c6:46:87:2f:b7:90:64:18:b4:9a:de:1d:
fb:b0:46:b0:84:4f:11:f8:4d:ed:c9:c4:9d:f3:c4:93:41:64:
15:da:98:df:3d:3b:5b:10:6e:39:8d:16:32:f8:f1:06:cf:d8:
c7:45:94:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:24:43 2026 by rpki-client