Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier: Y4N1PcAvIoKxGCjFnT384X3gTwrpHi1C43QDFquWaeM=
Subject key identifier: A7:BD:A4:44:65:75:7B:A3:B4:EA:1A:D0:EB:0E:93:30:C8:7C:EE:FB
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer: /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial: 019CAAC67EACF6E5956D4877576325107B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number: 1841
Signing time: Sun 01 Mar 2026 19:01:00 +0000
Manifest this update: Sun 01 Mar 2026 19:01:00 +0000
Manifest next update: Mon 02 Mar 2026 19:01:00 +0000
Files and hashes: 1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: GCX5E51SG8qyYSDStIzYH/rQFBZq3cePOVXznLND+bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:7e:ac:f6:e5:95:6d:48:77:57:63:25:10:7b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Validity
Not Before: Mar 1 19:01:00 2026 GMT
Not After : Mar 2 19:01:00 2026 GMT
Subject: CN=a7bda44465757ba3b4ea1ad0eb0e9330c87ceefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:e5:dc:e6:56:b0:22:ff:14:a9:67:ee:ac:
a1:3e:c3:0c:49:7a:09:85:cf:f1:c5:b9:cf:a9:9c:
a6:eb:a6:7e:6a:40:f9:f6:96:b2:66:da:3b:63:b3:
0f:eb:47:49:24:b1:ad:4b:39:66:85:4a:a5:c7:4a:
13:a6:02:fc:58:dd:ed:46:56:03:76:23:18:e5:df:
70:e7:fb:6c:72:42:e1:da:62:aa:fb:0c:5f:c2:a6:
b7:64:9b:63:61:f1:e4:af:52:99:02:e1:e4:0f:70:
51:4e:80:e2:37:85:3d:44:b3:c4:77:12:ea:50:9d:
80:9e:56:4b:41:42:ff:9f:60:49:02:bf:10:29:69:
f0:88:cb:0d:9c:6d:91:8c:b1:84:8b:f3:8c:f8:b3:
b1:47:78:db:61:df:6f:48:ff:b0:e6:15:c0:2a:c3:
0a:72:6e:87:3d:a2:1e:a6:a7:7b:84:df:85:ec:b5:
d1:f5:35:73:9d:bc:7d:86:6b:ad:aa:a6:0d:99:a4:
9f:45:70:32:66:82:92:57:e0:2d:3f:c8:3b:84:a9:
25:d4:44:ff:74:e0:fd:ff:ed:57:f8:86:b6:78:d8:
66:5e:88:61:0a:da:29:b6:1f:a6:5c:ee:65:14:ef:
fb:05:28:00:f9:f4:68:3e:1b:6b:80:3f:3e:0b:77:
a4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BD:A4:44:65:75:7B:A3:B4:EA:1A:D0:EB:0E:93:30:C8:7C:EE:FB
X509v3 Authority Key Identifier:
keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fc:16:70:8a:13:19:f3:d3:1b:b8:cf:16:55:0a:56:6e:14:
3e:f6:00:bf:61:8a:f5:e7:de:cb:69:33:45:84:46:92:0a:7c:
6d:6b:be:20:10:31:8b:83:47:48:4b:24:97:0f:72:4c:8e:32:
ee:4d:1d:ab:a5:7e:4a:13:a2:a4:66:e7:d2:d6:f9:31:8f:b5:
5c:79:f7:de:e7:fb:e1:b0:85:17:5f:a3:e9:a5:02:34:e1:92:
2a:f3:cf:c2:b7:a1:55:21:e4:6d:93:84:8c:fd:05:ab:5e:b8:
d1:3e:91:36:68:ae:42:05:42:65:77:10:62:c9:ad:b4:09:e2:
f1:52:81:63:56:3f:28:b7:f0:ba:78:ad:16:5c:1a:2a:4c:a7:
74:0a:b4:ac:9b:99:fa:82:06:2a:68:4b:bb:89:88:8b:71:cd:
2e:bc:de:a8:66:99:1f:bb:81:94:1e:fe:b8:a6:5d:d7:e5:af:
67:ea:89:ee:4c:10:8c:93:23:39:c0:7b:00:91:ef:65:8c:a3:
5d:74:ea:3a:af:30:35:b3:aa:29:c7:eb:f0:af:c3:93:8d:78:
ef:d3:c8:73:61:bb:3a:3b:bc:aa:0f:f8:ef:aa:84:cc:14:b5:
9f:f3:89:0d:dc:43:a6:9a:e1:b2:25:94:4a:e7:93:89:ed:cd:
fd:d1:af:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:35:53 2026 by rpki-client