Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: D3v43vgBsQRLtSFlmCLODrDIxEfa+8Y4Z7+cO4lOCwE=
Subject key identifier: 67:DF:93:D3:1D:15:CC:B1:21:93:DF:23:57:AF:12:BF:6E:F3:88:5C
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 019CAD595AA2F9865EE6763FB383444CFA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 07:00:40 +0000
Manifest this update: Mon 02 Mar 2026 07:00:40 +0000
Manifest next update: Tue 03 Mar 2026 07:00:40 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: lsogdNJoGI3IVIObjWBgoIK+L5K/w7JcXr2DfYDL8dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:5a:a2:f9:86:5e:e6:76:3f:b3:83:44:4c:fa:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Mar 2 07:00:40 2026 GMT
Not After : Mar 3 07:00:40 2026 GMT
Subject: CN=67df93d31d15ccb12193df2357af12bf6ef3885c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dd:a4:fd:9c:2b:0a:a3:10:eb:b9:83:24:00:
ae:3d:a2:73:2f:ce:3d:50:d6:16:6f:66:18:09:70:
13:df:7a:c3:fa:1a:f2:f6:87:4d:69:94:90:33:04:
a4:0d:b7:b4:b5:d5:95:43:fb:23:2a:89:2d:36:31:
45:2e:d8:e9:99:28:5a:5f:0a:67:53:a0:76:c9:f4:
f8:f7:52:62:7d:4a:7d:88:d9:97:90:6f:a6:7e:c3:
45:91:48:39:eb:21:d7:68:0c:8d:ba:98:32:d5:ed:
95:cb:a4:49:1e:60:db:77:7c:be:b4:0f:66:41:cd:
59:9b:50:29:87:9e:4a:8b:20:24:5d:3b:28:02:89:
45:e2:22:2f:93:a6:ef:66:f1:0b:d7:ae:08:bc:60:
eb:08:39:3c:b9:bf:d5:26:ab:6a:bd:b8:11:61:6c:
b4:42:f8:40:59:68:17:ce:22:fa:33:a6:8d:ba:91:
40:4f:bb:04:17:08:7e:cc:a9:ad:15:ea:09:3d:dc:
2a:0c:2a:dc:4d:1f:0f:ac:e3:9e:93:f9:b5:11:68:
92:db:e3:6f:dd:4e:53:1b:19:52:2a:cb:3b:27:84:
ec:eb:01:0d:f1:cb:80:99:0f:2b:58:33:8f:59:5b:
25:b9:74:a5:99:23:9a:23:2f:d6:69:d6:7e:7f:50:
34:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DF:93:D3:1D:15:CC:B1:21:93:DF:23:57:AF:12:BF:6E:F3:88:5C
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:14:48:37:52:d0:68:4e:72:bb:4e:83:78:3d:68:7a:dd:0c:
68:35:b1:6d:80:8d:41:75:21:b8:bc:c8:df:49:d7:18:c8:96:
f7:b0:74:38:0f:af:19:83:c3:81:0d:f3:8f:b7:c9:c7:70:9a:
8c:14:e4:fe:2d:30:e1:a8:e0:c8:90:b8:15:38:5d:c2:e7:ab:
bc:cb:6f:6a:61:5e:6c:a7:0b:2e:5a:20:04:c6:92:f3:9a:6b:
78:97:a9:c9:a9:d4:65:ad:2c:65:81:35:3f:12:81:56:b7:00:
69:eb:3d:ff:45:60:46:15:d4:ea:32:42:ba:31:b1:f1:ab:a1:
8c:47:1a:41:75:9c:f1:11:7c:42:12:5d:5d:2c:30:64:59:d9:
12:06:96:92:ea:91:b9:59:d3:67:d7:a3:84:ff:9a:d6:80:1d:
ee:1e:ca:b7:3a:85:53:c8:21:87:68:82:6c:ef:b5:48:ac:eb:
11:f3:48:14:9e:f9:5d:ae:ce:11:a5:67:75:b3:d1:24:c9:cb:
34:32:e9:c7:d5:08:de:33:c5:e8:32:3a:21:15:82:4a:21:bf:
11:b8:4a:72:90:40:2d:71:e9:82:58:fc:33:59:a4:1d:3a:55:
de:ea:14:8e:76:f9:39:ff:0e:6c:74:0f:04:3d:21:94:9d:18:
5a:4b:7e:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWVqi+YZe5nY/s4NETPqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZDhjOWExNjE5NzJkNjhiNDQ1MzNlMGUzMWY1MWU0ZGNl
NWJhNzUwHhcNMjYwMzAyMDcwMDQwWhcNMjYwMzAzMDcwMDQwWjAzMTEwLwYDVQQD
Eyg2N2RmOTNkMzFkMTVjY2IxMjE5M2RmMjM1N2FmMTJiZjZlZjM4ODVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN2k/ZwrCqMQ67mDJACuPaJzL849
UNYWb2YYCXAT33rD+hry9odNaZSQMwSkDbe0tdWVQ/sjKoktNjFFLtjpmShaXwpn
U6B2yfT491JifUp9iNmXkG+mfsNFkUg56yHXaAyNupgy1e2Vy6RJHmDbd3y+tA9m
Qc1Zm1Aph55KiyAkXTsoAolF4iIvk6bvZvEL164IvGDrCDk8ub/VJqtqvbgRYWy0
QvhAWWgXziL6M6aNupFAT7sEFwh+zKmtFeoJPdwqDCrcTR8PrOOek/m1EWiS2+Nv
3U5TGxlSKss7J4Ts6wEN8cuAmQ8rWDOPWVsluXSlmSOaIy/WadZ+f1A0jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGffk9MdFcyxIZPfI1evEr9u84hcMB8GA1UdIwQY
MBaAFA7YyaFhly1otEUz4OMfUeTc5bp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTIt
ZGE4NWM1NzMyYjg1LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTItZGE4NWM1NzMyYjg1
LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahRIN1LQ
aE5yu06DeD1oet0MaDWxbYCNQXUhuLzI30nXGMiW97B0OA+vGYPDgQ3zj7fJx3Ca
jBTk/i0w4ajgyJC4FThdwuervMtvamFebKcLLlogBMaS85preJepyanUZa0sZYE1
PxKBVrcAaes9/0VgRhXU6jJCujGx8auhjEcaQXWc8RF8QhJdXSwwZFnZEgaWkuqR
uVnTZ9ejhP+a1oAd7h7KtzqFU8ghh2iCbO+1SKzrEfNIFJ75Xa7OEaVndbPRJMnL
NDLpx9UI3jPF6DI6IRWCSiG/EbhKcpBALXHpglj8M1mkHTpV3uoUjnb5Of8ObHQP
BD0hlJ0YWkt+Ew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:00 2026 by rpki-client