Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: c9YcfmPbsgJAd41grRDRLQNVYAcx/qYfIjI2wclEzCQ=
Subject key identifier: 02:80:E3:B2:24:88:4E:9B:37:79:62:AD:E3:D6:93:39:A3:60:0A:15
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 01A0E8C0CA0D0EB7C68A16EB8601522D7F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 1A73
Signing time: Mon 28 Sep 2026 16:02:23 +0000
Manifest this update: Mon 28 Sep 2026 16:02:23 +0000
Manifest next update: Tue 29 Sep 2026 16:02:23 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: Amu4OG/6wPk+gKcasivDJ+MfjC0CzrmvjH7Pwj5xoi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 16:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c0:ca:0d:0e:b7:c6:8a:16:eb:86:01:52:2d:7f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Sep 28 16:02:23 2026 GMT
Not After : Sep 29 16:02:23 2026 GMT
Subject: CN=0280e3b224884e9b377962ade3d69339a3600a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:5c:2b:0c:d1:a8:14:bf:1a:a4:ad:34:9b:
54:d5:21:c7:ff:72:c4:ec:e4:53:9d:2d:43:e3:e8:
fc:fa:0b:26:d9:0e:da:51:78:7c:50:4c:76:9c:17:
44:6c:ee:1d:bb:29:42:c0:e1:61:e5:98:0b:7c:ce:
96:e6:a3:2d:e4:fc:b6:8b:d0:73:02:b1:10:77:25:
d1:a1:45:77:96:a5:06:6d:be:1d:47:bc:a4:1a:64:
c6:84:5d:76:02:16:b3:04:fb:92:8d:61:39:9f:18:
09:0f:78:dc:58:72:14:44:e3:e3:14:03:f6:bd:a2:
00:90:a1:02:36:25:73:9d:df:c0:90:31:fb:b7:e7:
60:ea:2e:23:61:c3:9b:65:b3:e2:cc:2b:a2:4c:c9:
28:0b:e8:11:fe:10:4d:0c:87:c9:61:6c:bf:6c:91:
0e:a5:6b:7d:57:39:2d:dd:43:23:2f:bf:77:84:6f:
2e:85:56:37:10:e3:74:db:18:4f:a5:48:d4:f1:59:
c4:fe:2c:f7:a5:12:27:ca:d1:0c:9b:07:fa:0a:00:
ed:8a:22:a1:de:02:3c:33:42:fe:b7:ae:2a:e3:2d:
34:7b:88:1f:d9:95:f7:5d:c4:65:98:ed:f2:6c:74:
6d:97:b7:d5:80:8c:9b:45:f3:9e:1a:ec:e1:cf:a6:
21:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:80:E3:B2:24:88:4E:9B:37:79:62:AD:E3:D6:93:39:A3:60:0A:15
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e2:71:91:84:91:5d:d3:9e:35:4c:8e:2b:a3:6b:7d:58:6c:
fb:6b:18:c4:d0:46:9e:4d:9a:c5:7b:e3:fb:01:0e:d0:86:f2:
12:07:4a:6e:2d:5c:42:6c:eb:51:9c:c1:9e:70:35:ac:62:d2:
0c:44:0e:92:7b:5e:81:62:6e:6d:ff:6e:6c:8d:87:d9:28:ce:
01:ea:54:79:81:41:3e:97:98:07:0f:9e:a7:27:b8:9c:ef:a5:
a5:b9:6b:88:6f:e1:ed:1d:6e:f9:6c:34:a0:ad:c5:58:c2:72:
a7:53:7e:bf:56:e5:93:39:31:83:d4:5b:7e:f9:09:9c:85:61:
2e:32:81:e0:2e:f9:18:29:19:b6:dc:4d:6a:02:a8:41:d8:01:
fc:d3:39:60:eb:53:56:0c:62:ce:1b:16:25:eb:4e:41:10:94:
8b:5b:36:ff:33:ef:1e:7a:6d:d7:d1:47:0d:1b:6f:6c:39:c1:
01:27:7a:c1:09:10:9b:51:e2:7e:32:22:ea:2b:78:ca:3b:6c:
a7:ba:2c:d2:ba:55:77:69:4c:5a:62:fe:6c:a7:0f:7e:a2:1e:
16:5a:ce:7e:b0:0d:e1:ed:ec:87:0f:3b:53:bf:bd:5d:fb:3c:
eb:07:1d:dd:01:43:5b:c9:56:55:f4:46:1c:c8:82:12:7d:ea:
38:fd:8f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:49:21 2026 by rpki-client