Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
File: dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft (raw, json)
Hash identifier: WKnUKxOuBm0wc0t9amTwkcQEi7RhAMQ7ulli7yFkn1s=
Subject key identifier: 8A:19:93:A3:78:80:BC:0D:03:CC:9C:C4:EC:82:20:B2:CE:4D:35:A0
Authority key identifier: 74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
Certificate issuer: /CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Certificate serial: 019CABA1F1BEB0B907971FFDDD1D94091112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
Manifest number: 113A
Signing time: Sun 01 Mar 2026 23:00:42 +0000
Manifest this update: Sun 01 Mar 2026 23:00:42 +0000
Manifest next update: Mon 02 Mar 2026 23:00:42 +0000
Files and hashes: 1: dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl (hash: /kWjG+l9/k6WH50OEvLfrdh4kSmvpgHjruyi+zVFRjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:f1:be:b0:b9:07:97:1f:fd:dd:1d:94:09:11:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Validity
Not Before: Mar 1 23:00:42 2026 GMT
Not After : Mar 2 23:00:42 2026 GMT
Subject: CN=8a1993a37880bc0d03cc9cc4ec8220b2ce4d35a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f5:1d:25:ec:b3:df:8b:d3:ac:78:20:66:90:
92:62:26:14:bd:52:69:83:ed:9f:82:48:0f:e2:4c:
02:4e:83:16:bd:d7:1a:b1:56:a7:fc:eb:d8:c1:28:
f6:11:43:02:3d:82:68:47:45:83:4d:93:ba:e8:b1:
ca:c7:d9:81:70:fc:44:54:99:a0:16:23:e7:e9:84:
dc:e8:f6:4b:1d:15:8e:83:4c:97:e2:25:82:5d:ab:
b8:54:9e:93:f5:84:13:3c:22:47:2d:96:93:92:1e:
4e:b9:46:b8:8f:11:8e:92:a4:7f:a9:fc:ed:37:2e:
dc:50:3a:d3:f0:f5:bd:27:ed:a9:ff:f9:be:08:16:
c3:52:7d:4a:ab:51:69:fa:b0:08:b5:9f:54:b4:fe:
9b:5e:8a:6d:da:4e:e3:ea:4b:52:e1:fb:2b:0f:3a:
cb:c8:a1:35:79:d9:77:02:61:e3:4b:ab:79:a4:ed:
23:97:70:96:bd:50:ce:e7:eb:93:3b:96:52:7e:e6:
e1:5c:a0:6b:ca:5e:37:96:b5:42:2d:22:57:41:23:
65:28:59:f1:4a:4c:a2:89:e1:73:18:6c:d6:da:02:
ac:28:fc:5c:60:d9:e3:90:11:c8:7c:00:a2:6c:3a:
7e:56:b7:4e:95:35:ac:a5:72:a8:47:5f:a4:fb:8a:
b5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:19:93:A3:78:80:BC:0D:03:CC:9C:C4:EC:82:20:B2:CE:4D:35:A0
X509v3 Authority Key Identifier:
keyid:74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b8:9f:77:2c:b6:13:6a:63:2e:f4:3a:09:a6:7e:d0:ea:f8:
fa:b6:f0:04:7b:ba:bc:05:c6:a1:18:ea:9f:87:71:b4:a2:58:
11:25:ee:1d:17:52:c1:73:82:c2:ff:48:4f:14:37:17:b1:ac:
4c:6b:c2:78:27:a8:98:5e:48:24:18:f6:4d:2b:e6:bc:02:8c:
ad:e5:1c:4f:5c:8d:6c:cd:16:50:cc:91:a4:eb:18:11:db:51:
6a:46:45:dd:d9:a6:2e:bc:47:6d:48:57:e2:ca:f8:20:c5:f4:
bd:db:fe:07:46:a6:a3:02:9a:db:6c:13:1d:9e:6f:7e:1b:0c:
fc:05:43:9c:bb:9c:5e:75:ac:0e:80:be:26:02:41:e7:47:8e:
e5:0f:7d:c6:b2:07:52:61:7a:04:b1:0f:ec:8a:13:97:67:12:
c9:a1:09:48:ad:62:7b:17:2f:6d:2c:a6:80:58:12:01:a2:6b:
32:6a:5d:5a:09:ec:ae:eb:c6:d6:95:37:d6:35:c0:06:e5:7d:
55:35:87:6a:01:4e:21:73:59:c1:6b:1a:ad:ea:84:52:f0:97:
b6:50:ce:ef:f8:f2:98:9d:fa:df:5c:69:4a:b9:ec:c8:65:9c:
ef:1c:b0:97:f1:fd:21:8d:50:ef:ec:2a:5a:9d:57:2f:42:d2:
83:4b:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:29 2026 by rpki-client