Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
File: dgynIUsW9YyV1i3vAFkVhtvSPKo.mft (raw, json)
Hash identifier: owC628kiJsFVrH4rXsm6s9s9eW2tLq5B2hchjym/rDs=
Subject key identifier: 61:4A:90:13:96:40:34:EB:E9:29:DD:B9:AC:85:86:83:E7:57:B4:F6
Authority key identifier: 76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
Certificate issuer: /CN=760ca7214b16f58c95d62def00591586dbd23caa
Certificate serial: 019CAB6B9E3FBFD7653C14FE0B9F9596A168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
Manifest number: 0AB8
Signing time: Sun 01 Mar 2026 22:01:22 +0000
Manifest this update: Sun 01 Mar 2026 22:01:22 +0000
Manifest next update: Mon 02 Mar 2026 22:01:22 +0000
Files and hashes: 1: dgynIUsW9YyV1i3vAFkVhtvSPKo.crl (hash: Hlvdo59klJAdzClqd+ueXE85ezS4YfRXyvJEygtAHv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:9e:3f:bf:d7:65:3c:14:fe:0b:9f:95:96:a1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760ca7214b16f58c95d62def00591586dbd23caa
Validity
Not Before: Mar 1 22:01:22 2026 GMT
Not After : Mar 2 22:01:22 2026 GMT
Subject: CN=614a9013964034ebe929ddb9ac858683e757b4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fb:24:41:50:d8:4e:f4:54:92:17:b1:a5:7a:
5c:4b:00:32:92:ef:eb:b5:56:1b:2d:8c:4e:b2:05:
07:f7:be:e4:1c:35:cf:42:2c:03:61:e2:f5:1f:1f:
7b:89:9c:02:49:16:12:ab:7d:eb:c3:6d:b8:b5:d2:
0b:28:49:af:46:58:3d:39:32:44:83:28:6f:99:74:
95:8f:db:6d:37:b9:6d:8e:27:c1:df:35:a2:c9:1f:
6a:d4:2c:ad:71:33:74:7d:5a:09:a7:dd:10:ad:17:
a2:c6:97:6b:e0:92:76:bf:8c:ee:af:40:d8:5e:d6:
a1:18:ce:17:28:fe:7c:01:e6:e7:1f:66:84:ae:35:
75:49:0e:3b:b1:6c:8f:83:f5:e8:92:ae:c6:ec:21:
03:c1:c6:c6:3f:d2:f2:c6:c5:aa:c9:4c:8e:cc:4a:
54:28:7c:51:d0:8c:05:97:7e:61:7a:ab:6a:b3:27:
b1:19:11:7d:64:de:7f:bf:9b:24:35:cd:6c:96:70:
20:1b:ed:c6:fd:3a:85:1a:c3:eb:2e:b1:d8:98:c6:
54:36:88:eb:65:5c:bf:3c:ca:50:a8:12:83:20:58:
6b:a9:17:ce:b3:cb:5c:ad:2f:f8:4b:a2:ac:09:d6:
12:32:e0:f9:1d:b5:ab:12:6b:5b:4d:df:a2:93:f0:
ef:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4A:90:13:96:40:34:EB:E9:29:DD:B9:AC:85:86:83:E7:57:B4:F6
X509v3 Authority Key Identifier:
keyid:76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4d:e0:9c:32:07:64:50:ef:9b:b8:6f:1e:91:80:d4:81:90:
1b:1b:d9:a8:36:1a:b7:46:18:fb:62:a8:87:65:53:ec:73:4e:
41:a0:6b:c5:07:c5:b2:e0:e6:8f:6c:41:3e:fc:c6:98:79:b2:
e1:7d:f3:d2:a7:2e:15:45:7f:4a:f2:c0:bb:15:96:66:24:ff:
84:a0:43:a2:49:e9:ce:49:0d:e6:d4:8f:af:07:ca:10:0d:6a:
c3:1d:af:c9:2e:f0:86:20:9d:26:40:b9:8b:18:4e:42:13:2e:
de:5d:ce:12:58:69:85:95:c4:a1:56:88:26:ee:b9:a2:f7:a6:
35:ab:62:3b:d9:13:d1:74:bd:fb:57:80:17:23:57:29:1b:75:
f2:71:4d:83:1b:b2:b3:a6:12:a2:39:39:c1:c5:8d:be:56:44:
9f:8b:96:41:6e:d4:18:cf:7b:7e:96:47:7d:35:dc:db:a7:57:
78:e4:50:26:1b:87:ba:b9:4b:32:22:2f:8a:b0:06:7b:d0:32:
aa:f6:89:98:9c:31:f1:09:bf:db:4a:4b:0d:52:e6:c3:4c:15:
86:2b:98:c9:fa:af:b2:8a:0b:a5:f9:4b:a3:2c:82:91:d8:48:
04:af:d3:91:3e:e6:90:12:56:7b:af:19:c2:7b:17:c8:b9:5f:
ac:06:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:10 2026 by rpki-client