Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
File: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft (raw, json)
Hash identifier: XT3YyyWH9uL0fhHodxWCnOB42sC01Ctl34TMYovb+wo=
Subject key identifier: 25:91:09:8D:B7:0A:D9:17:B6:A4:93:28:BE:B2:3A:F4:94:4C:79:77
Authority key identifier: 0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
Certificate issuer: /CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Certificate serial: 019CAD2247D98B9AC6CAA1A329AFB2E0429A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
Manifest number: 17D8
Signing time: Mon 02 Mar 2026 06:00:30 +0000
Manifest this update: Mon 02 Mar 2026 06:00:30 +0000
Manifest next update: Tue 03 Mar 2026 06:00:30 +0000
Files and hashes: 1: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl (hash: wX1LyoJj6QykBJLUNp7ZGtVALw/2pf9CvEJLQjyaWXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:47:d9:8b:9a:c6:ca:a1:a3:29:af:b2:e0:42:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Validity
Not Before: Mar 2 06:00:30 2026 GMT
Not After : Mar 3 06:00:30 2026 GMT
Subject: CN=2591098db70ad917b6a49328beb23af4944c7977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:cf:15:bd:9e:c9:59:e9:12:8d:bd:be:66:
8c:49:11:9e:b3:56:df:a2:e0:1a:81:e5:82:96:bb:
50:65:94:c4:c7:11:c0:e5:69:f3:47:03:e2:a9:10:
94:d1:01:1f:72:3a:08:6c:c7:50:c7:bb:b0:72:e7:
95:79:b0:77:d9:90:e9:69:1f:09:1d:a5:ee:93:90:
77:b1:34:6e:8c:39:92:f1:66:d6:71:84:b9:a7:94:
63:e4:7a:3b:c0:6a:04:9e:49:07:7b:52:07:7a:6b:
bd:58:4d:90:f3:20:22:c0:b0:07:3f:9d:0f:64:19:
7c:f4:97:06:b7:1f:a5:95:30:31:03:cb:29:e2:6b:
d4:b2:87:7b:f5:fa:2f:b2:22:ad:44:71:ea:3c:7e:
54:bd:d6:98:a2:d4:b7:13:9e:eb:a9:3b:22:80:76:
e9:73:07:04:74:f0:f1:6b:28:7b:13:8d:e3:22:78:
6c:1d:fc:22:84:da:7a:10:85:af:3a:e8:ca:01:2d:
b4:43:f0:ea:93:b2:86:47:81:67:9d:5f:f1:f7:14:
b0:64:d3:b4:03:16:6d:44:31:56:2c:f8:22:c5:5b:
51:15:37:57:57:8e:6b:e2:ca:b8:b9:12:e6:1a:23:
0d:1d:eb:76:8e:1a:33:90:22:db:b3:82:92:d2:31:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:91:09:8D:B7:0A:D9:17:B6:A4:93:28:BE:B2:3A:F4:94:4C:79:77
X509v3 Authority Key Identifier:
keyid:0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d0:6e:55:d9:06:34:85:53:92:04:e5:28:e0:6b:6c:79:ce:
12:07:73:6c:ce:15:32:bb:d5:22:b0:e7:5e:65:6e:f6:f3:c8:
26:e9:34:b3:3c:df:ed:03:87:de:14:bd:97:8c:4b:0f:75:cb:
9a:e7:8b:f9:2c:7a:e1:ad:08:1a:0d:dd:b3:ee:8a:7f:79:96:
73:cc:97:5c:af:1b:65:f2:53:f5:c9:c8:60:53:2d:7c:95:59:
70:8c:50:ab:06:c2:34:5c:56:1d:0a:44:db:57:1e:33:b3:04:
a2:66:7c:b2:c9:89:47:c5:2a:47:45:9c:37:88:a6:3d:5d:bc:
40:32:aa:35:45:2c:2e:04:b8:c1:d5:f3:b1:36:c6:cf:59:cb:
7c:54:8c:db:67:c2:e8:f9:4a:db:ad:18:96:d5:9a:8f:77:f1:
03:6b:c6:31:2c:22:78:03:16:ef:49:a0:3c:f7:a1:66:a3:f5:
9d:7c:21:b9:19:b3:41:1a:36:5d:0d:6b:3d:25:76:d3:04:8e:
73:a5:05:2e:c7:c2:e3:7b:b6:ba:e5:f5:f9:e8:c2:8e:79:f9:
f5:6b:98:32:79:d7:64:ba:be:c0:62:4f:31:94:8f:c4:d2:5b:
6d:ea:23:b0:63:bf:cd:9d:17:26:56:f8:eb:d3:9a:3d:31:7d:
35:ba:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:52 2026 by rpki-client