Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
File: danDqBE5lKqnp7EhGTd3kbIB8Gw.mft (raw, json)
Hash identifier: ySHBr8rMvkGphikyn4AJnkHBaHetaVt8YWn8jwhdNCw=
Subject key identifier: 67:D7:6E:60:41:97:4A:6B:08:D4:56:9A:0E:88:0D:54:BB:48:55:61
Authority key identifier: 75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C
Certificate issuer: /CN=75a9c3a8113994aaa7a7b12119377791b201f06c
Certificate serial: 019D98F54B71A4D74C65A360473FCB58CEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
Manifest number: 0592
Signing time: Fri 17 Apr 2026 01:01:45 +0000
Manifest this update: Fri 17 Apr 2026 01:01:45 +0000
Manifest next update: Sat 18 Apr 2026 01:01:45 +0000
Files and hashes: 1: danDqBE5lKqnp7EhGTd3kbIB8Gw.crl (hash: FuYeMdBPRmEGTUWPmbDcpwavVr2h9UF+j/dBy0hPRNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:4b:71:a4:d7:4c:65:a3:60:47:3f:cb:58:ce:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a9c3a8113994aaa7a7b12119377791b201f06c
Validity
Not Before: Apr 17 01:01:45 2026 GMT
Not After : Apr 18 01:01:45 2026 GMT
Subject: CN=67d76e6041974a6b08d4569a0e880d54bb485561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f1:0f:9f:06:50:31:09:d5:70:d1:ca:a9:b7:
34:5e:51:b6:0f:e2:12:c8:54:52:f2:a6:d3:7c:40:
de:c3:10:4b:44:98:84:1f:20:5d:c4:21:a6:af:6a:
d7:e8:a7:de:6a:52:57:c2:ba:61:12:86:97:c5:28:
97:2e:53:3b:d1:c6:d5:07:b4:84:e3:66:94:b5:6e:
3c:86:4d:37:ad:ce:6e:1b:13:d2:f1:3e:1b:90:04:
88:99:06:dc:af:be:3b:c8:f1:5a:9b:0a:64:20:b7:
61:b9:a7:92:37:a0:51:6f:ce:be:76:45:2b:c8:a3:
b8:3a:9a:ef:6e:21:f6:2b:5c:24:56:5b:f3:e3:59:
4c:ec:3d:59:52:f5:d6:ae:a3:cc:aa:bd:29:83:28:
73:f2:4d:f4:c7:cc:b2:41:da:58:16:b6:57:29:c8:
bc:72:d2:3c:57:b5:d9:7c:67:f0:0d:6f:ee:8e:a9:
37:da:d9:39:82:1e:ef:ac:28:9f:5f:cc:a9:76:5f:
2c:4e:87:4b:69:34:73:03:e7:af:50:93:1b:ce:c8:
38:c4:39:4f:af:61:6e:73:ac:bf:ba:7b:b3:0a:9b:
35:aa:9a:53:d7:c9:d4:b6:b9:c3:40:22:8c:e4:12:
09:9e:ff:ae:a5:80:1d:fe:95:e2:ae:8a:79:bb:54:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D7:6E:60:41:97:4A:6B:08:D4:56:9A:0E:88:0D:54:BB:48:55:61
X509v3 Authority Key Identifier:
keyid:75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:43:22:83:49:f7:94:c4:c2:2f:0e:e6:34:18:dd:ef:b0:a1:
2c:73:47:25:34:e5:5f:b6:68:ae:20:f3:2f:b3:fb:81:da:71:
10:1a:6c:f1:10:57:fb:57:63:21:65:79:d7:2a:ef:d8:e7:c7:
85:ad:fc:87:85:52:8a:8b:99:6e:24:84:5e:0c:d2:8c:23:cb:
b7:31:db:d8:17:62:b6:80:c6:94:15:ca:7f:e9:b9:5c:17:10:
10:a2:98:38:87:42:66:6c:cf:66:aa:9c:c0:67:ff:3e:0e:b3:
17:32:99:8a:f0:d3:11:e6:20:fb:12:dc:a4:ac:2a:8a:6b:e8:
28:54:b7:b8:5f:9d:9e:cd:db:8e:f2:9f:04:99:5f:ae:87:11:
8d:e1:f8:2b:6b:45:17:61:9d:2e:a2:72:bd:20:02:0a:5a:d7:
7b:c8:6b:8d:be:67:19:9f:11:0a:42:ce:fe:42:68:cc:79:e1:
fa:11:17:8a:15:1f:3e:c7:45:e3:97:b1:cd:90:63:e1:64:90:
e6:a1:40:86:2e:e9:ca:9a:8b:53:89:c9:84:98:cf:38:fa:6a:
94:bf:04:8d:a7:cb:51:cd:b6:30:b4:05:ae:d8:60:f1:e1:71:
35:81:07:bf:a5:da:16:36:8d:c0:7d:ee:d7:7f:9a:db:2f:1e:
6a:0b:74:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:41 2026 by rpki-client