Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
File: dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json)
Hash identifier: APM0xG0qVZgqZ3sr/7mrQeZIJ7IiC66pCIzFHZMfFHA=
Subject key identifier: AA:2F:3D:66:3D:8A:B1:98:5F:51:70:5F:8C:17:29:D0:03:FA:70:FB
Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
Certificate issuer: /CN=75caa7991288876680d7ac90a8569f3fc20387fa
Certificate serial: 019DA309FC938087B709D014661A8953FBA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
Manifest number: 18C3
Signing time: Sun 19 Apr 2026 00:00:33 +0000
Manifest this update: Sun 19 Apr 2026 00:00:33 +0000
Manifest next update: Mon 20 Apr 2026 00:00:33 +0000
Files and hashes: 1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: wFNRijCFDHkyYHR4R9SIecaKkDttbXXUFPw7zrM+nwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:fc:93:80:87:b7:09:d0:14:66:1a:89:53:fb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa
Validity
Not Before: Apr 19 00:00:33 2026 GMT
Not After : Apr 20 00:00:33 2026 GMT
Subject: CN=aa2f3d663d8ab1985f51705f8c1729d003fa70fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:2b:95:eb:21:89:c9:a8:b6:fd:f5:92:61:
13:8d:c7:cb:d1:db:d9:d7:d7:48:08:89:52:82:7f:
c0:6f:54:3e:d6:e5:a9:ab:98:44:40:ac:78:bf:06:
21:e5:a7:16:00:75:3f:18:47:09:ab:a5:86:31:56:
9b:b9:b4:39:0d:fe:64:59:a2:c2:a7:39:b2:00:2c:
af:c5:e5:32:93:f7:c1:33:22:35:11:75:70:43:30:
aa:62:4a:49:b1:f6:90:1b:33:4f:4f:6e:11:b1:5a:
52:c3:03:36:67:56:15:31:9f:a7:ba:39:5a:6d:93:
77:e7:f0:46:cd:28:2c:2f:7d:76:41:b3:29:fe:42:
9b:fd:d7:70:b1:c7:fa:99:e1:25:ca:07:a2:6b:35:
94:ae:e9:97:16:db:67:bc:f8:00:5d:44:c6:84:82:
9d:da:63:c2:df:29:0f:ba:bf:be:5d:f4:6a:a7:1c:
f7:10:91:38:49:03:cc:6f:ff:72:b2:ac:0b:28:f8:
e5:c9:b6:97:4e:ad:94:39:b8:41:3a:d3:d8:a0:7c:
9c:a1:ce:46:7b:76:f9:2f:76:f0:b5:cd:86:48:80:
16:e4:98:ef:92:63:cf:e6:6a:8a:6b:8e:b4:07:33:
36:00:ce:c6:e8:76:ec:cd:f9:51:41:36:47:87:57:
17:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2F:3D:66:3D:8A:B1:98:5F:51:70:5F:8C:17:29:D0:03:FA:70:FB
X509v3 Authority Key Identifier:
keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6d:ba:7c:df:dd:df:fd:38:a6:4c:9b:05:05:4a:a4:3b:9f:
78:05:ba:83:2a:6d:28:cb:ee:b2:8a:38:10:af:0d:de:a1:1f:
f4:d0:9c:ff:ca:2c:2f:4d:1d:64:14:a8:64:a0:87:a4:23:fd:
18:42:2e:05:cf:0b:cd:75:a1:08:f3:f4:33:0d:64:9a:b9:27:
c0:33:86:6b:cd:55:37:1e:1b:e3:fe:96:cf:83:3e:6a:d9:1e:
8c:95:be:93:1a:0c:fa:76:ba:c1:fa:a0:96:2e:8e:78:b0:21:
9a:79:12:92:f9:c1:00:c4:1d:9a:9f:f2:69:a9:18:cd:5b:42:
89:cc:9c:ce:9e:2d:7b:9e:c0:2b:b7:d9:05:54:00:5d:1f:50:
23:e0:d3:44:b3:34:9a:72:91:ba:d2:69:9a:05:6f:35:81:2b:
d9:1d:34:c3:1a:c6:3c:a0:e0:4a:27:0a:f0:61:08:f3:4e:2f:
11:65:47:e5:fa:a7:cf:4d:c6:79:7b:9f:70:27:80:cc:46:52:
6b:19:e1:20:09:8d:12:a6:76:0a:b5:42:05:2d:8d:81:4e:fa:
0a:5c:8d:db:ee:cc:e8:e6:bc:d5:5c:ea:9c:ea:03:26:40:46:
a1:e1:7f:2d:91:26:9f:2c:21:42:ec:1d:04:b8:7a:a2:dd:2b:
f5:9f:f1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:30 2026 by rpki-client