Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
File: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft (raw, json)
Hash identifier: 0JKlCN4jk5dgy7nG6/IAipPcV8EPeXAi2qyI/JI5qn0=
Subject key identifier: 2A:61:C5:89:0B:EB:70:24:32:F3:2B:A8:D1:91:B6:79:1F:E9:99:97
Authority key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
Certificate issuer: /CN=74b083650295189f009aa74c12cbc61ee23fa753
Certificate serial: 019CAD59922BDAC3C6CF418BB443662683AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 07:00:54 +0000
Manifest this update: Mon 02 Mar 2026 07:00:54 +0000
Manifest next update: Tue 03 Mar 2026 07:00:54 +0000
Files and hashes: 1: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl (hash: tXCh9Lc3RI9HJXrH5SRfjdi1BqN6muLNMIbXKDi5ToA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:92:2b:da:c3:c6:cf:41:8b:b4:43:66:26:83:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b083650295189f009aa74c12cbc61ee23fa753
Validity
Not Before: Mar 2 07:00:54 2026 GMT
Not After : Mar 3 07:00:54 2026 GMT
Subject: CN=2a61c5890beb702432f32ba8d191b6791fe99997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:fc:0c:27:1f:a9:5b:d1:15:26:cf:c6:04:
87:b9:bf:01:55:f7:72:ee:4c:86:8c:2d:ec:35:2b:
51:bd:ff:cf:ff:53:a0:00:0d:56:e0:d5:4f:05:3f:
74:34:ab:b4:58:26:94:e8:31:f0:dc:ea:3d:c5:c9:
de:fe:ab:25:24:ba:83:ed:0e:a3:2b:b0:a4:48:1e:
7e:34:64:57:ca:95:68:b4:60:50:b6:be:45:5f:43:
00:a1:29:79:d0:82:74:52:a7:8a:dc:fd:b8:8a:13:
cb:90:0f:9e:47:92:c7:aa:d2:31:bb:a4:5e:7f:07:
ca:6c:f8:e2:52:9b:87:58:e8:13:87:5d:8e:db:21:
15:0c:f5:07:7f:a9:9b:33:6d:be:aa:4f:b5:e7:45:
42:bc:47:9f:18:03:f5:82:67:a2:44:e8:da:b0:1c:
f5:9b:d5:69:29:a3:af:15:24:67:3a:41:78:f6:79:
75:3d:cc:f6:d7:da:05:09:fd:39:e8:f7:62:19:7f:
48:9c:f4:b6:ee:d8:3b:e0:f4:86:85:a4:4d:7b:e9:
bb:31:a0:48:b3:dc:3a:82:f1:fd:ec:7a:9e:82:fc:
db:bc:68:3e:89:2e:52:f7:bd:97:d4:50:a4:f5:b5:
b1:93:d1:e7:74:1e:cd:c6:a6:bd:6d:ba:3a:2b:6b:
95:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:61:C5:89:0B:EB:70:24:32:F3:2B:A8:D1:91:B6:79:1F:E9:99:97
X509v3 Authority Key Identifier:
keyid:74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:36:1e:cf:24:d3:be:72:99:0c:c5:b6:08:66:67:3d:6c:5b:
32:ce:e2:5a:90:a1:ad:1a:5e:51:ea:71:0c:36:9e:e1:69:cb:
05:2a:51:49:37:95:2c:9a:3d:af:a0:51:63:3c:5c:c8:f5:1d:
be:57:c3:8c:49:38:9d:0a:c3:cd:d5:dc:93:b8:dd:81:5c:10:
7b:fd:0e:fb:5f:6c:f1:67:53:34:de:c1:11:db:24:68:c6:e9:
e4:e2:58:cb:a8:85:33:d3:32:14:d6:41:9a:75:a0:9c:3c:d0:
c8:1a:88:2b:47:3c:aa:41:f2:ce:ad:ae:46:7c:01:55:a9:5d:
5d:38:a8:bd:16:fd:dd:46:18:fc:0a:2e:25:f0:21:ba:0a:2f:
97:c4:c2:b8:3f:ea:4a:94:0b:83:4c:1b:8e:54:0b:45:03:7b:
f1:46:34:ed:6c:37:53:03:1e:ee:c7:6e:2a:25:de:31:77:9d:
2b:ae:6b:8c:fe:88:24:98:e2:cf:9c:fb:29:d9:46:77:c5:36:
2c:6b:e5:d7:5e:b0:03:50:fe:3f:15:42:75:f0:35:8c:a5:68:
34:cf:55:44:e7:07:31:3b:f2:eb:53:c8:60:6a:e7:58:0d:ca:
d9:e8:75:0b:b6:2a:54:02:5e:57:b9:25:bf:9e:3e:73:37:ea:
5f:0c:0e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:30 2026 by rpki-client