Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier: Go7HOCqE21FQM8T04CQVmHukPXVythBPGAtcpeFgxHg=
Subject key identifier: FB:77:78:09:D8:1E:2A:54:19:23:D5:3D:1F:DD:55:B8:E2:51:CE:2C
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer: /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial: 019D9A3F11A05DFEAB5AC691EDFA272B8DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 07:01:57 +0000
Manifest this update: Fri 17 Apr 2026 07:01:57 +0000
Manifest next update: Sat 18 Apr 2026 07:01:57 +0000
Files and hashes: 1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: Z52R2+X4qfS/01Fpj9Kc2+MIdLemQCHrdC/mF0Ab6EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:11:a0:5d:fe:ab:5a:c6:91:ed:fa:27:2b:8d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Validity
Not Before: Apr 17 07:01:57 2026 GMT
Not After : Apr 18 07:01:57 2026 GMT
Subject: CN=fb777809d81e2a541923d53d1fdd55b8e251ce2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:2e:1f:b5:a5:4b:94:fd:6a:2c:2f:14:96:
3e:d0:54:39:03:ff:61:d3:b0:73:9f:fb:c8:05:87:
97:f5:bc:26:91:db:75:b2:d4:cd:a4:79:a6:e3:b6:
ac:e7:f9:49:cf:e2:30:f9:a7:fa:65:54:6d:d3:2b:
c0:09:c5:bd:ce:ba:e4:f9:a3:62:dd:20:b7:40:40:
f8:cb:f9:93:d7:c2:58:31:1e:58:38:6e:48:48:8c:
eb:62:c2:6f:d8:fd:d7:f1:8a:21:17:2a:39:84:5b:
1c:4e:8c:f2:99:30:3f:c8:7e:2e:b7:a1:dd:72:e6:
b0:79:79:05:68:0c:3b:54:56:2b:00:31:ee:94:06:
68:58:e8:d3:92:b7:e0:96:bd:c7:61:3e:90:ac:37:
e6:03:32:a5:3d:d0:48:f6:0a:b9:56:01:c6:c3:61:
55:d2:84:0e:b6:f4:75:e0:18:b4:65:b4:d7:be:0b:
fa:88:f6:e8:58:a9:44:38:d0:17:4d:15:9f:e8:2f:
5c:54:71:82:a3:2c:6e:21:d0:da:2b:fa:5d:ba:5b:
bd:17:1b:93:f6:03:24:de:8c:6c:8d:a7:ee:57:b2:
65:b2:8f:ce:f9:57:1f:81:cf:8f:84:08:f9:fb:e9:
bf:98:fb:59:91:91:13:d7:fa:a0:62:4d:87:c3:f0:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:77:78:09:D8:1E:2A:54:19:23:D5:3D:1F:DD:55:B8:E2:51:CE:2C
X509v3 Authority Key Identifier:
keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d5:6f:85:05:66:8f:29:f1:c0:bf:34:3c:b8:2e:c0:ed:dd:
29:6f:17:96:49:34:66:45:23:30:85:69:f1:02:8c:c8:43:ac:
f4:8e:41:b3:43:c7:5e:f7:a5:41:8e:00:c8:ce:ae:60:8a:5d:
88:f2:fd:29:38:dc:fb:da:26:00:46:b5:62:4c:45:ae:4a:b3:
1e:8c:a0:50:c5:84:bf:39:3f:b7:4a:37:ae:0b:44:12:b8:e6:
b7:cd:ed:18:b9:63:8a:a7:3e:e8:8a:4f:b3:e8:16:bd:9e:6b:
e9:7e:08:15:06:e6:ac:46:2c:cd:8a:9e:81:a0:7e:0f:2e:56:
f9:67:8d:8e:9d:17:07:0f:4e:b7:99:0d:da:c4:c6:81:34:36:
7e:f3:50:10:10:95:23:93:60:76:d1:90:07:e8:b1:a9:f5:e6:
b9:92:a3:40:60:ee:92:7b:12:b7:14:5e:5a:f1:0b:d8:b0:06:
6c:d9:50:7d:99:2b:51:89:82:1b:2a:47:d4:26:f3:db:18:73:
83:2d:29:e6:ca:b4:8b:0b:23:dc:4c:13:e9:64:2d:5c:f0:03:
bc:fa:82:1e:20:d5:7a:2e:cf:dc:f7:9c:f8:cd:bc:5d:09:7d:
aa:27:bc:6f:2b:99:26:03:dc:a3:3f:c2:22:94:2a:a7:9e:56:
82:1c:d8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:18 2026 by rpki-client