Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
File: DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json)
Hash identifier: ZchDO2wAKmj/b3Mg/5bc9xP0iBb7o20DuaKGnI+LCkM=
Subject key identifier: B4:D9:0B:A6:C2:7D:81:92:7D:50:A3:C9:C9:F9:4E:82:4A:A2:DF:12
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Certificate issuer: /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial: 019CAB6AED65E71B8B034634B3D460359C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
Manifest number: 0DD1
Signing time: Sun 01 Mar 2026 22:00:37 +0000
Manifest this update: Sun 01 Mar 2026 22:00:37 +0000
Manifest next update: Mon 02 Mar 2026 22:00:37 +0000
Files and hashes: 1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: s5iSaOUOcMi4yzEEdG6SSjQO61dgx01TseZUMj9A1qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:ed:65:e7:1b:8b:03:46:34:b3:d4:60:35:9c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
Validity
Not Before: Mar 1 22:00:37 2026 GMT
Not After : Mar 2 22:00:37 2026 GMT
Subject: CN=b4d90ba6c27d81927d50a3c9c9f94e824aa2df12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:82:94:cc:e8:b3:d2:9e:23:18:b0:e5:5f:
14:f1:21:67:73:e8:04:16:79:ec:2c:5f:ef:b1:85:
01:28:b6:90:4e:07:2e:65:16:77:5f:ae:d5:d0:a4:
2d:7d:f3:54:54:74:4c:55:75:55:83:fe:ff:c1:f2:
3f:36:aa:95:fe:a1:dd:9e:57:f1:4a:eb:9c:d0:7b:
77:62:a6:89:6d:58:fa:2d:1a:a4:29:5a:32:65:9a:
eb:da:1e:cc:1e:7e:3f:36:45:cb:55:cc:6e:bb:1d:
bf:25:c7:a5:ca:24:b4:62:d3:63:8e:bd:25:79:1c:
f1:ac:11:ef:49:0b:5b:62:8b:97:4d:b1:16:48:93:
4b:b4:af:fe:d0:34:37:cd:38:c3:46:28:9d:7e:23:
04:f9:22:9b:39:cb:a1:58:b7:52:1e:d8:f7:84:d8:
62:bb:97:f6:be:83:97:ae:56:7c:17:e2:92:24:dd:
cc:87:a6:cf:26:4a:41:d0:9a:d4:80:cb:fe:59:1a:
0f:90:fd:14:c3:30:3e:f0:68:ca:70:9b:0e:89:8e:
6d:83:15:d1:b0:e7:58:0f:72:78:6d:36:58:88:3c:
e2:52:64:b9:b5:ae:17:1b:fd:c2:2b:d8:18:06:52:
50:33:eb:4e:17:47:3b:fe:67:53:3a:cd:36:67:07:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D9:0B:A6:C2:7D:81:92:7D:50:A3:C9:C9:F9:4E:82:4A:A2:DF:12
X509v3 Authority Key Identifier:
keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:10:12:9b:1f:d8:e3:4a:98:99:ef:a8:15:60:45:7d:b3:4b:
3e:a8:73:f0:23:90:f7:fc:f9:f4:0a:89:22:b4:e8:d2:76:36:
69:04:c7:dc:88:8b:d1:40:1a:8b:e1:8c:76:ad:e5:a9:05:c5:
54:f3:8e:57:ae:54:ae:23:78:15:11:44:0f:be:c7:32:87:4a:
91:66:07:32:65:b5:c2:77:c4:18:3e:e3:15:96:bf:c2:d1:2a:
65:b4:f9:b9:a1:07:e3:ca:28:33:e7:41:03:ea:13:ec:5d:d9:
08:9b:27:cc:19:b8:38:85:f7:ed:41:9b:28:2e:bf:1e:ab:0b:
e6:d2:40:0c:be:e8:a3:3e:12:a1:41:27:b0:a3:b0:20:69:f2:
bf:0c:48:f1:39:50:64:db:83:de:1d:2c:aa:4f:2f:12:6c:73:
de:d0:0a:fa:8e:57:dc:9a:db:3c:26:ac:b9:4f:7a:02:8a:3d:
64:63:21:42:ce:55:e6:0b:73:fa:cc:76:86:18:06:c7:fe:1a:
a3:5d:e4:a2:99:c5:72:ae:93:a5:4d:12:32:d4:a9:75:95:75:
68:f7:92:e0:ea:bb:f8:9b:97:d3:4e:a8:3e:da:35:86:c1:0f:
9d:da:9b:d1:e6:cb:2b:d7:c0:a3:98:01:b4:b1:b5:d7:d2:90:
ff:c6:c9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:12:08 2026 by rpki-client