Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: 0Ccbsbg4CrFuvG9MCv73myjdGdPC2mgRQpPzrvAenMg=
Subject key identifier: AF:26:EB:ED:2D:99:23:BE:02:07:FD:67:B5:44:52:E7:71:6D:DF:E9
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 019EBE7F797C793BDCAAA860AB59C87B1943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 1954
Signing time: Sat 13 Jun 2026 01:01:25 +0000
Manifest this update: Sat 13 Jun 2026 01:01:25 +0000
Manifest next update: Sun 14 Jun 2026 01:01:25 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: nNH3MmBa3vxPLrIGB2T/laZZpxcE+8XK+kCP26Uv0wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:79:7c:79:3b:dc:aa:a8:60:ab:59:c8:7b:19:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Jun 13 01:01:25 2026 GMT
Not After : Jun 14 01:01:25 2026 GMT
Subject: CN=af26ebed2d9923be0207fd67b54452e7716ddfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:66:21:f0:47:dc:ba:bf:1a:b8:d6:12:6d:c3:
fe:62:bf:2b:2a:eb:fe:e3:f2:fb:ce:67:9a:3a:10:
78:b8:a7:d3:80:f9:30:48:01:12:7e:54:5f:80:81:
32:23:5e:ea:dd:17:5c:64:5b:5d:02:76:ea:87:93:
7a:ec:b5:b2:5e:b1:10:f7:fd:bb:ad:5d:da:4f:ce:
89:c6:14:25:c8:f7:1a:c7:e0:80:c7:21:f5:43:cf:
12:b7:55:e7:68:7d:57:93:10:99:57:9b:4c:69:7d:
ff:27:1f:7c:34:0f:82:9e:65:03:bf:3f:80:fc:79:
52:e2:35:b6:6a:4b:1e:88:2b:cd:64:c4:b6:1c:c3:
a7:32:3a:aa:70:ac:55:9c:3c:92:29:be:40:f7:34:
fa:c6:dc:e7:01:eb:01:7b:60:cc:37:30:46:09:87:
55:4d:ed:45:8f:af:f2:ee:58:86:1a:5b:03:dd:3f:
8b:42:fc:ee:0c:8c:0c:7d:d3:c4:31:b3:3e:52:fe:
db:48:be:42:4e:97:91:d3:78:5f:eb:62:6c:a5:11:
48:3c:08:4c:ba:18:9e:fb:21:d2:f5:ac:38:6b:7f:
a0:52:42:69:f4:e3:8d:b9:71:6f:bc:09:3a:d8:75:
cf:54:70:fe:4a:c4:47:86:36:59:07:b3:7d:dd:45:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:26:EB:ED:2D:99:23:BE:02:07:FD:67:B5:44:52:E7:71:6D:DF:E9
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:45:e2:f1:8d:26:c4:8a:6c:39:01:f3:a9:65:e6:79:c9:3c:
2e:4b:2f:ef:0f:fa:fe:5e:62:32:9f:f5:a0:1d:4a:3b:f2:29:
74:7e:53:4a:39:98:04:f8:e8:63:6e:34:22:f0:c1:90:fb:20:
bc:c0:c3:9d:1c:68:9b:d2:0e:ce:19:12:e5:03:61:9a:b1:86:
00:74:6d:ac:ce:87:0e:dd:9c:f7:e0:bb:fe:d0:6a:7a:d6:b4:
a6:e9:7c:e2:0e:ff:a1:97:1e:bd:cc:f7:f5:58:f9:fd:99:be:
8e:b5:0c:12:b6:4c:ef:a0:17:94:6c:2d:99:69:0c:f1:09:66:
07:a4:b4:e0:5c:d1:1d:d3:f2:9f:84:35:9c:99:ba:6b:17:39:
3d:10:36:ca:23:6a:22:76:57:f7:4f:c4:8d:cf:57:d7:52:4c:
31:4f:12:24:b5:ea:e2:17:83:a4:88:ba:fa:d5:35:69:2e:0c:
70:77:02:d0:72:74:99:67:ca:55:56:6f:bd:95:99:81:ab:7e:
03:e7:54:78:33:de:cd:8d:ce:a2:d9:4e:c2:54:3f:b0:8f:b9:
48:e4:46:3b:6e:c7:8f:23:19:05:c7:2b:98:e7:74:9e:4b:97:
3c:65:47:eb:39:0a:38:cc:c5:8d:33:da:62:23:3f:9a:0c:81:
48:74:21:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:32:10 2026 by rpki-client