Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
File: dgynIUsW9YyV1i3vAFkVhtvSPKo.mft (raw, json)
Hash identifier: A0ZHwfiLw69gcECTKqkuz778TXQothM1LaovrszJuuw=
Subject key identifier: 48:8A:5C:59:BD:50:9C:CF:D2:E5:CF:69:9F:61:AA:4C:35:48:F5:FC
Authority key identifier: 76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
Certificate issuer: /CN=760ca7214b16f58c95d62def00591586dbd23caa
Certificate serial: 019D98F52EEC2D21EABAE2D3E7E091C86F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
Manifest number: 0B33
Signing time: Fri 17 Apr 2026 01:01:38 +0000
Manifest this update: Fri 17 Apr 2026 01:01:38 +0000
Manifest next update: Sat 18 Apr 2026 01:01:38 +0000
Files and hashes: 1: dgynIUsW9YyV1i3vAFkVhtvSPKo.crl (hash: WsT1NQWT4HX3VGonLqC3IxZue5NPzpaFfg2iLrTRkJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:2e:ec:2d:21:ea:ba:e2:d3:e7:e0:91:c8:6f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760ca7214b16f58c95d62def00591586dbd23caa
Validity
Not Before: Apr 17 01:01:38 2026 GMT
Not After : Apr 18 01:01:38 2026 GMT
Subject: CN=488a5c59bd509ccfd2e5cf699f61aa4c3548f5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8e:60:4b:45:5b:0e:b8:6b:81:97:c9:0c:df:
f2:15:6d:b4:d5:60:89:2d:df:5b:cd:38:1f:bb:da:
95:5c:3e:1e:ca:ca:c1:0c:bb:ce:43:21:5d:1e:a3:
fa:76:cc:64:2a:36:90:1a:26:a2:77:93:c2:8e:58:
3c:f1:49:3a:b0:7f:4a:40:2f:7a:16:6a:f2:df:c2:
01:d5:05:c2:1b:51:a2:33:e2:16:39:5e:67:57:15:
fd:5d:c1:19:a9:cf:84:62:00:36:ad:f4:51:9b:14:
e1:0c:61:41:09:f1:e9:2a:e8:0a:2e:ee:60:46:4a:
ce:1e:4e:3f:ee:52:f6:58:43:c8:b0:e5:64:90:e1:
d0:6d:85:4f:84:41:79:60:f2:67:9d:b9:fe:c5:4c:
e9:28:d9:1b:a3:d6:56:79:ad:fd:7e:27:4a:86:4c:
8c:b0:35:0d:d3:f1:e5:1f:1c:04:9b:b9:d8:95:c5:
8b:72:67:6a:67:86:c9:d1:b2:07:79:c4:67:8e:52:
47:ee:ca:1c:c9:03:e4:e1:f9:c6:ed:0e:2a:17:d0:
d9:bb:54:7c:0c:52:bb:0c:2c:16:af:56:87:87:b0:
48:c7:2b:05:02:bb:de:86:8d:a5:a7:a3:3d:28:c1:
ea:84:02:5b:f9:3f:01:36:6a:46:78:8e:54:16:c9:
c8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8A:5C:59:BD:50:9C:CF:D2:E5:CF:69:9F:61:AA:4C:35:48:F5:FC
X509v3 Authority Key Identifier:
keyid:76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:da:90:b2:bb:0d:3b:39:65:4d:a7:58:9b:af:f5:73:a2:3a:
bc:01:d2:68:10:d5:bc:da:8f:05:e9:e7:10:83:9f:d7:1d:04:
0c:1c:82:52:ef:3a:71:c5:8d:03:0a:63:13:69:53:32:75:06:
cc:84:e5:8b:4b:eb:70:ce:4b:37:8f:30:27:ab:9b:ae:47:58:
4c:43:d6:49:dc:2e:c9:b6:c2:ff:16:83:d9:59:d3:4b:02:0c:
24:f6:ae:7b:e2:86:cc:24:20:c5:27:95:f9:23:7b:92:85:03:
e8:ca:d2:8c:bb:cc:b3:6a:69:46:d0:1d:2b:e5:a0:aa:52:5c:
ec:b0:cd:87:b0:19:10:97:20:0e:0d:55:f6:37:69:c9:7a:e5:
95:62:64:a2:28:39:54:de:bf:92:01:31:53:79:7b:70:19:dd:
50:d1:f5:05:ff:0e:12:8f:84:ff:30:1d:6d:10:f2:a8:9a:81:
42:53:e1:b6:c3:72:c7:79:3a:03:18:72:06:8f:d0:35:29:82:
f2:27:39:ae:f7:b5:05:30:0d:ac:62:10:36:d0:dc:cc:a9:a7:
53:c7:f8:d1:52:50:33:ba:52:8f:2f:eb:30:f9:b1:73:33:bb:
4a:d4:7b:e5:cc:5a:87:6f:d4:0e:62:fd:6f:a8:0c:ca:ca:73:
55:85:7c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:25 2026 by rpki-client