Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File: DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier: Yux1B+9sLIgw+fnC7nIMlgUGsaOF/q5mvX8hk7f0bHI=
Subject key identifier: 0C:E7:A7:20:4B:DB:95:AD:4C:A3:D0:92:ED:CE:DF:06:B7:34:3C:49
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer: /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial: 019D9AE32DC52D4726E821251F893BF9849B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number: 06A3
Signing time: Fri 17 Apr 2026 10:01:12 +0000
Manifest this update: Fri 17 Apr 2026 10:01:12 +0000
Manifest next update: Sat 18 Apr 2026 10:01:12 +0000
Files and hashes: 1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: nwi8ZCzew4k26TR773KLRsumkK4xw2/4Sok35LL1Ekk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:2d:c5:2d:47:26:e8:21:25:1f:89:3b:f9:84:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Validity
Not Before: Apr 17 10:01:12 2026 GMT
Not After : Apr 18 10:01:12 2026 GMT
Subject: CN=0ce7a7204bdb95ad4ca3d092edcedf06b7343c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:43:0e:0b:28:3a:6f:9f:d3:bc:e1:78:f8:
20:e4:c1:6f:69:41:98:63:e4:0a:42:c0:e8:b0:cd:
f3:03:57:69:3c:88:0b:c2:9d:3d:a6:84:c4:bb:e3:
07:8d:cc:d7:0c:b6:4a:4d:16:88:a4:3c:0e:29:5e:
7b:bb:6b:95:83:8e:79:5c:f2:8c:12:8b:6b:3a:e1:
03:56:9c:2c:c3:9f:c1:a9:ae:17:df:1a:58:23:b1:
2f:eb:02:47:62:6c:65:f5:d0:07:78:c5:08:28:39:
f3:a2:5d:ff:70:12:41:15:ee:73:cd:3e:da:12:3d:
f8:92:09:a4:90:c8:28:66:fe:ef:f5:f2:1e:c9:ad:
57:60:81:3f:5b:a4:78:44:d2:c0:29:c2:dc:17:51:
e6:54:18:9e:12:e0:d6:64:8f:41:a8:5d:25:2a:d9:
9e:b5:0d:7e:be:3f:e4:9e:27:44:67:cb:ab:57:89:
68:a2:bf:a5:91:b8:b8:dd:3e:b0:2e:20:36:c9:a8:
45:75:2c:86:38:54:79:6d:2e:5f:a8:fe:73:3c:ae:
4d:1c:72:56:9b:27:6a:1d:a7:8f:0f:67:c0:c0:9d:
e5:64:64:f0:df:33:9c:ac:38:ae:22:47:41:fa:57:
02:1b:19:a0:20:c6:50:d9:d0:54:c1:7a:b3:f3:70:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E7:A7:20:4B:DB:95:AD:4C:A3:D0:92:ED:CE:DF:06:B7:34:3C:49
X509v3 Authority Key Identifier:
keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:25:d3:59:0a:57:da:b5:b0:ed:a7:a3:ad:2a:43:ff:0b:9e:
be:08:0d:7d:7d:2a:50:90:4d:ea:a8:a3:d1:bc:aa:43:0b:2d:
61:ac:58:32:a6:66:ad:08:2b:21:e1:aa:96:a5:0a:f7:16:cc:
92:d6:a8:05:dd:34:48:ea:e5:38:41:0f:b5:78:cc:0c:3e:ca:
53:15:4f:dd:b4:df:09:fa:b8:61:53:2a:b1:06:02:cb:2f:95:
af:b6:87:08:15:9d:b2:cd:04:59:4d:2a:c2:23:3c:8a:b9:d9:
2f:87:78:c5:44:2b:2f:be:95:ff:f5:c4:ad:7d:a4:6f:3b:23:
97:0d:73:d8:c0:f9:64:e9:f1:16:61:5a:73:7c:5c:38:81:4c:
e5:37:63:75:69:27:d5:b7:0a:9b:af:c5:2f:f4:d8:f3:6d:d8:
80:09:a5:3b:15:44:ee:c8:62:cb:74:e8:22:d8:ab:eb:f0:c6:
95:38:10:b5:f0:f2:b3:69:a7:b0:69:29:09:f7:16:a2:5a:9e:
be:cb:d4:26:bd:bc:a2:20:1c:c4:2d:bb:35:18:dc:76:a2:d9:
ef:fb:57:89:cf:34:67:3f:96:6b:75:ec:c0:d6:ef:ec:03:1e:
7f:97:77:95:5e:d6:0f:33:c3:99:97:dd:9e:00:b7:c5:43:bc:
c7:c6:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:46 2026 by rpki-client