Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File: DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier: wc/+HMU22tjpp+oNV1qSIAZTHlnsv3GMRVYS6Q4j5VQ=
Subject key identifier: AD:00:42:BC:F7:38:F7:49:72:B8:EE:C4:70:34:0D:00:F6:27:41:B3
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer: /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial: 01A0D94D33079B78F19DCF4B02EE26E9D308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number: 0851
Signing time: Fri 25 Sep 2026 16:01:50 +0000
Manifest this update: Fri 25 Sep 2026 16:01:50 +0000
Manifest next update: Sat 26 Sep 2026 16:01:50 +0000
Files and hashes: 1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: TqZpD9PbOUyu4XV+HY9t8PvwsBOY75cvd3QGSlppj20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:33:07:9b:78:f1:9d:cf:4b:02:ee:26:e9:d3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Validity
Not Before: Sep 25 16:01:50 2026 GMT
Not After : Sep 26 16:01:50 2026 GMT
Subject: CN=ad0042bcf738f74972b8eec470340d00f62741b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:86:df:86:af:9f:0a:78:70:47:82:a1:0a:
27:09:96:91:f7:9b:58:4d:fb:39:bf:52:e2:2d:6a:
c9:92:e5:cc:63:af:0c:4e:c6:47:a7:cf:40:52:f1:
dc:e3:3d:b8:45:c5:5e:c2:76:2c:4f:2d:1a:b2:14:
49:dd:7c:b3:9f:d2:30:55:07:88:a4:7e:f1:c2:8b:
13:ea:cf:01:40:e1:c9:46:80:28:38:3c:e0:9e:ed:
10:ee:4f:a3:0e:37:db:88:0a:3b:c5:70:4f:54:fc:
b6:05:a2:4a:19:5c:c3:d9:2f:4f:cc:ab:6a:8c:6e:
8d:54:2c:4e:49:3e:01:90:5d:46:4e:c6:3c:7b:1c:
2a:f6:4b:b5:37:6c:cc:85:c1:79:7e:cc:52:d6:ab:
d1:47:2e:ed:2d:be:8d:01:ac:91:ac:be:d0:f9:c5:
6b:ea:95:f1:e1:0f:a5:0f:7f:ed:5d:59:d9:ee:43:
8b:95:fd:4f:62:51:59:4e:0c:26:b9:20:80:eb:fb:
8d:5d:f7:9e:b2:af:76:b8:3b:0d:fc:38:02:05:a2:
11:c4:98:ed:ce:09:1d:fc:99:6e:91:91:5f:c1:b0:
5a:f3:64:cb:37:69:4c:ad:83:eb:6f:85:1b:dc:7f:
49:29:31:44:e2:75:55:45:db:d1:66:54:64:5a:00:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:00:42:BC:F7:38:F7:49:72:B8:EE:C4:70:34:0D:00:F6:27:41:B3
X509v3 Authority Key Identifier:
keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4e:2b:a1:83:c1:3d:48:0e:ae:20:17:d9:b9:32:e3:f5:bf:
aa:80:26:b4:c7:e5:f1:20:c6:b6:55:74:01:29:8e:a1:77:72:
29:24:08:ef:39:3e:5b:a6:6f:21:77:7b:92:19:74:54:24:d8:
81:ff:71:53:bd:30:99:00:79:2f:25:b2:12:75:24:ff:83:8b:
53:d0:d4:03:24:b1:18:d8:e6:28:e2:92:79:2c:77:06:53:26:
fc:05:bd:04:df:bd:87:c2:24:52:db:15:ab:45:7e:c9:d0:05:
60:c2:ec:88:77:52:f2:60:d8:a4:5a:29:03:99:f0:5b:6f:e2:
1f:f5:0d:1d:1e:44:c3:89:fa:84:9e:82:5e:79:02:5f:5f:98:
59:c9:5e:d2:3b:31:24:25:a8:ad:c9:b2:4b:35:b8:8e:6a:27:
82:c6:c7:f0:15:68:b1:61:7c:c6:3a:18:64:76:69:cc:3d:a6:
c1:ae:43:df:9c:56:c0:94:34:95:38:c9:d5:0a:c1:4e:09:e8:
c4:c1:db:d8:ce:bd:4c:e0:14:49:57:b6:82:26:90:5a:f5:bb:
57:a9:a1:db:9e:20:c8:c7:40:0e:57:fd:54:3e:e1:24:b9:01:
0c:86:11:57:0a:ac:f8:09:16:b1:11:ec:6e:5d:7a:0e:2e:54:
8c:9d:51:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:33:54 2026 by rpki-client