Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier: CtWrteuHmh/vy87rvO2P9qp1Q/NEQ/BP6qyKh7ZbDho=
Subject key identifier: AC:29:89:16:97:9C:0C:69:1B:83:7B:7B:BA:1A:10:07:56:41:38:AF
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial: 019CAB6B5C5B883304E7411CD78AAEC74A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 22:01:05 +0000
Manifest this update: Sun 01 Mar 2026 22:01:05 +0000
Manifest next update: Mon 02 Mar 2026 22:01:05 +0000
Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: xK3pbzRTyGYA8kqHVSzwEf1MOwLfQdp/RN12zC983bg=)
2: xRmmdqH1-j--sEXPtnNY3Z-R5Zo.roa (hash: 3OUa7VjiPRdUyQdSMo547+vkOocCdI86key02w1U7/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:5c:5b:88:33:04:e7:41:1c:d7:8a:ae:c7:4a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Validity
Not Before: Mar 1 22:01:05 2026 GMT
Not After : Mar 2 22:01:05 2026 GMT
Subject: CN=ac298916979c0c691b837b7bba1a1007564138af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:9c:e2:d7:78:d4:a6:60:1c:52:07:d4:75:
0d:6d:80:4c:21:55:9a:17:45:4a:75:ba:33:0b:b2:
cb:8b:72:69:42:b6:14:51:e9:9a:ab:50:87:0a:6e:
ec:95:67:2d:6b:0e:04:c8:00:da:35:62:36:7b:fd:
9b:bf:36:bb:f1:e8:9d:28:ee:cf:6c:a8:28:d5:39:
a4:40:f4:ee:4a:f9:3a:f5:65:5c:a2:a6:32:53:a8:
33:b9:5f:e5:74:b7:5e:4c:2c:df:aa:2b:1e:67:f7:
97:92:5d:bc:cd:58:1e:a5:05:a5:e6:42:ec:c1:70:
03:ac:9f:0d:0f:78:43:65:77:75:c4:18:6c:50:11:
17:e7:1e:7e:54:1e:70:95:34:8f:03:24:53:cb:ff:
b5:1d:13:1b:74:95:a3:24:8b:17:4e:a8:9a:3f:de:
e0:11:37:a7:5d:34:7b:c0:a2:68:6f:5b:53:da:00:
bd:42:b7:69:81:66:8c:06:55:d2:69:c4:40:d6:d6:
6a:e0:4f:7b:fe:c1:c2:e7:44:f9:79:d4:cf:2c:13:
52:1b:2d:34:e5:6c:a9:60:37:23:3c:41:05:25:d2:
c7:5d:cd:aa:52:70:25:e8:95:ba:56:c1:51:a5:6a:
88:54:f0:c9:53:22:b2:83:e8:09:86:47:e1:05:ba:
75:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:29:89:16:97:9C:0C:69:1B:83:7B:7B:BA:1A:10:07:56:41:38:AF
X509v3 Authority Key Identifier:
keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:81:1d:fb:bc:19:91:ed:a5:64:ec:e8:9b:72:6e:d7:af:e8:
f1:51:2e:08:f7:a2:8c:6f:a5:e9:4f:6c:9b:ef:ef:b6:2f:64:
2f:0a:d7:2a:70:59:be:ad:8d:d0:8f:6a:f9:e4:e9:c3:87:5d:
47:fa:14:33:ee:58:7d:3d:3c:3e:a4:ab:46:bf:f9:2c:0e:88:
91:f5:c6:0a:eb:64:cb:6b:b3:74:ea:97:cf:da:ff:30:b2:d3:
50:a6:71:a8:19:a4:5e:78:c7:96:4d:09:dd:f0:76:16:cc:fc:
58:19:3e:43:e1:d9:9d:7a:fa:8e:45:28:88:6b:1d:2b:2b:b2:
ac:08:1a:42:95:ac:ed:60:0e:93:97:95:5d:63:cf:ac:8f:c0:
85:13:41:de:89:c5:f5:8c:2a:ac:ae:c6:be:e4:ec:a9:68:56:
0c:72:9c:e5:72:12:5e:5f:79:8a:ce:21:24:ad:6e:2f:eb:57:
df:b6:7b:09:99:d3:13:18:37:e9:19:be:56:f5:8a:b7:79:be:
e2:f8:72:a2:f5:f7:35:9a:5b:7b:3d:51:fa:6b:53:a1:b0:97:
d8:44:11:3b:12:e9:f0:bf:e3:07:f3:b0:1f:a7:a5:32:3d:b0:
39:75:89:1f:54:dc:a7:1e:69:02:36:5f:cb:4b:ec:fb:be:32:
e7:22:28:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:03 2026 by rpki-client