Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
File: DZxWoYyYei0aLnBEt-MbMhv3rBY.mft (raw, json)
Hash identifier: W6l4nO1mM8x8tkkYgEl5udgvDKrV+2dNHWwWFeoT794=
Subject key identifier: 8E:5C:CD:6E:AD:DB:0D:7E:93:0C:D4:60:FF:C5:08:7B:45:97:07:93
Authority key identifier: 0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
Certificate issuer: /CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Certificate serial: 019FAA1A5205B76BA03AB473EDFE9D4B8982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
Manifest number: 0B64
Signing time: Tue 28 Jul 2026 19:01:19 +0000
Manifest this update: Tue 28 Jul 2026 19:01:19 +0000
Manifest next update: Wed 29 Jul 2026 19:01:19 +0000
Files and hashes: 1: DZxWoYyYei0aLnBEt-MbMhv3rBY.crl (hash: J/Evz+Js2yKs2FIaFoXZiiST9vcv13jPB1J5UH0CaLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:52:05:b7:6b:a0:3a:b4:73:ed:fe:9d:4b:89:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Validity
Not Before: Jul 28 19:01:19 2026 GMT
Not After : Jul 29 19:01:19 2026 GMT
Subject: CN=8e5ccd6eaddb0d7e930cd460ffc5087b45970793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:6b:a2:85:98:1c:d8:95:e0:9b:f6:cf:79:
ee:e6:0d:36:97:95:65:f0:d3:e4:51:ef:9a:89:cb:
35:a0:cb:3b:0d:41:9c:c4:c4:94:3d:4f:d0:5d:39:
ba:7d:12:5a:33:fe:18:1c:3b:16:25:b0:39:42:11:
1b:c4:c2:91:62:2d:30:bf:3c:fb:cc:2b:f6:66:4e:
e8:03:c4:90:fd:f0:bb:42:29:16:d5:0b:7a:28:10:
31:a8:d4:ff:c2:a1:59:f8:17:38:51:b2:db:cc:f6:
f9:b9:5c:16:8f:86:0d:fb:26:b7:7a:d2:5b:ef:11:
bc:49:a9:2c:ef:3e:e0:43:64:6f:72:ec:80:0e:4d:
86:0e:ac:d0:17:5c:42:06:e5:b3:48:95:28:6c:ee:
d6:9d:b8:ae:53:71:aa:c4:6e:8a:f7:f5:44:18:bf:
9b:47:d6:04:2c:cc:c4:d3:ce:71:61:7f:ca:f0:0b:
70:08:b4:b4:a1:85:5c:ad:98:4c:ee:71:7d:0f:93:
19:bc:c2:4d:93:60:3f:a7:5d:b1:cf:75:fe:21:ed:
88:1c:a4:da:e1:8e:04:1d:c3:5f:84:9d:1c:20:94:
cb:94:52:97:d8:74:fd:bc:79:f8:ec:e4:76:f1:d9:
62:72:4d:57:df:6a:71:2f:72:72:6e:ab:0f:a1:a5:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5C:CD:6E:AD:DB:0D:7E:93:0C:D4:60:FF:C5:08:7B:45:97:07:93
X509v3 Authority Key Identifier:
keyid:0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f3:b9:30:28:1b:f2:63:0c:06:72:04:4f:00:7c:58:8d:18:
1d:e7:f5:b9:a5:c1:f7:ad:d1:16:e8:51:63:f3:17:29:4c:6a:
74:c0:7e:63:6a:63:2e:a0:08:22:e1:0c:c0:85:38:fb:c3:40:
c9:3f:6e:e3:37:66:8a:7d:9e:76:33:8e:77:32:6c:68:e7:50:
e9:bf:68:15:6a:92:cc:b9:bd:dc:c4:c0:b5:7b:0b:33:31:6d:
e4:fd:29:c2:57:ec:c8:7e:fa:01:4b:fd:3a:5f:7d:d4:4a:4a:
2d:f7:30:54:5a:0e:83:52:e9:f5:2e:ad:37:49:cc:b3:31:88:
eb:e3:05:a3:7d:ba:bc:60:5d:3b:d3:d7:40:d8:04:fd:39:37:
93:f8:1f:13:29:8d:82:84:c1:47:a9:83:59:0c:35:eb:b7:46:
bd:ba:8b:9c:c4:cc:ca:a7:09:d3:c7:96:bb:99:f8:c7:43:a9:
2c:22:7e:e2:d9:47:93:3c:84:b9:08:4d:7b:23:d9:82:c0:5f:
7b:ab:44:2f:94:90:55:1b:c9:e6:2e:1c:20:2a:b2:2d:75:2e:
de:ba:b2:8f:11:e0:7e:f0:10:bd:85:fc:5b:37:f6:84:a7:5e:
2b:90:ac:92:9b:72:ba:4c:00:5e:a1:d5:53:69:52:8b:7a:ab:
89:6b:73:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:10 2026 by rpki-client