Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File: DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier: J5DSYiE3vpVYyv5Cqqy0AWP7VOLSYOsOPTmcMiTaUsM=
Subject key identifier: 4E:74:47:9B:08:E7:B0:AE:40:82:51:C1:E2:27:68:EA:80:AF:4C:41
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer: /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial: 019CAB6B7F7445F2F6B2031CB6B5AFCEBE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number: 0627
Signing time: Sun 01 Mar 2026 22:01:14 +0000
Manifest this update: Sun 01 Mar 2026 22:01:14 +0000
Manifest next update: Mon 02 Mar 2026 22:01:14 +0000
Files and hashes: 1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: lxO50FA3yo+KzGWpycuWvd6D7iVbKmLStrOuPCg83XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:7f:74:45:f2:f6:b2:03:1c:b6:b5:af:ce:be:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Validity
Not Before: Mar 1 22:01:14 2026 GMT
Not After : Mar 2 22:01:14 2026 GMT
Subject: CN=4e74479b08e7b0ae408251c1e22768ea80af4c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:72:e3:a0:8b:c3:03:3f:61:d1:3c:8a:19:bc:
f6:21:a7:57:8e:61:b3:18:8d:42:48:9a:c5:5e:f3:
e3:87:d3:10:e1:01:3a:b2:69:2c:1a:d2:60:c4:88:
a1:79:bf:65:07:bc:6a:4b:99:28:f5:87:d1:2e:0a:
14:39:7a:56:c3:84:dd:26:b3:b6:d8:45:4d:68:32:
38:e4:b6:52:60:79:66:b6:15:91:12:d4:e9:bc:5f:
4b:fc:4e:4f:e2:fb:2d:45:6d:fd:02:b1:c1:67:1f:
0d:3b:7e:f4:30:aa:43:3c:20:be:29:34:71:08:d3:
d5:25:0f:f5:fa:5b:2e:7f:e8:bd:40:b9:6d:14:b8:
b4:c6:10:87:a7:52:64:c9:25:63:df:72:a4:23:e8:
04:ea:c1:cf:da:f3:99:9e:cd:38:a6:f7:be:73:40:
00:f1:a2:96:65:5f:a9:69:08:f2:c7:c2:3e:77:a2:
fa:1c:d6:89:06:9d:d0:c1:a8:f4:aa:9e:44:cf:f6:
72:cd:5d:e0:b5:6d:84:c2:0a:c3:c9:b8:72:f9:61:
d6:a0:72:13:ed:fc:be:be:89:7d:52:3e:a5:6f:f2:
30:fc:49:5a:fa:57:2c:8d:2b:b1:2a:60:5f:0b:a6:
cc:b1:d4:a8:29:76:14:ed:1e:a9:24:37:30:02:ea:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:74:47:9B:08:E7:B0:AE:40:82:51:C1:E2:27:68:EA:80:AF:4C:41
X509v3 Authority Key Identifier:
keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2c:bc:92:1f:9f:b2:99:e6:6a:94:68:e3:dc:f8:08:ca:f6:
01:4e:d6:da:2e:e3:00:d1:1e:ae:50:06:00:6f:6e:7f:5a:d1:
13:cb:fa:0f:f8:90:be:dd:cc:a5:4d:02:7e:9b:3c:a4:82:32:
c9:4f:7b:92:e5:14:ef:cb:bf:45:1f:de:98:69:1c:d7:17:16:
c3:a9:e4:92:53:57:29:2f:6e:69:7c:00:b0:31:09:8a:5c:59:
a3:34:a2:0b:d9:e6:7b:c5:44:1a:64:4e:a0:12:e0:42:a1:e2:
eb:7c:7c:32:c7:2f:1b:16:e8:0d:d5:98:49:8c:77:5c:4a:ed:
15:43:c9:3d:32:dc:bc:c2:14:7b:a4:38:85:cd:f2:eb:04:f7:
c9:49:9d:51:08:e6:79:c1:34:0f:c4:fe:ff:ad:80:04:3d:58:
07:b9:b7:14:cc:55:d0:ed:5b:f9:a8:ef:bd:9f:dc:c3:08:27:
52:ea:34:de:02:d9:58:ae:0d:c2:bc:19:65:b1:21:df:44:3f:
60:ff:82:27:07:95:2e:17:d6:cb:6b:cc:ae:10:32:2a:7d:30:
13:a5:77:c8:08:cf:01:33:b7:bd:e5:af:7a:24:84:41:4e:41:
31:4e:15:7c:85:e2:9a:25:cb:fb:32:13:d0:70:78:4f:0a:9b:
c3:4c:9f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:19 2026 by rpki-client