Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier: C7qCRVUUKP3iocsHr1+xTAHzpNpdQ2TBvZ4fhBy1SP8=
Subject key identifier: 09:31:4A:D2:21:A5:6C:25:97:35:41:67:AB:FD:1D:B2:BC:99:3E:B5
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial: 019CADC7C085B90B67B2ECBBDE8FC96E265C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number: 0C32
Signing time: Mon 02 Mar 2026 09:01:15 +0000
Manifest this update: Mon 02 Mar 2026 09:01:15 +0000
Manifest next update: Tue 03 Mar 2026 09:01:15 +0000
Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: b+I4xUYILXQ0j7ee5n/lFO6pGZnQVMxm9fEamkZCwAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:c0:85:b9:0b:67:b2:ec:bb:de:8f:c9:6e:26:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
Validity
Not Before: Mar 2 09:01:15 2026 GMT
Not After : Mar 3 09:01:15 2026 GMT
Subject: CN=09314ad221a56c2597354167abfd1db2bc993eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8d:2e:62:49:32:15:bb:db:87:a8:f1:cd:af:
61:a0:94:dd:18:99:1a:bd:ba:9d:a3:e1:91:93:74:
c7:e8:b1:b7:13:0a:48:80:be:48:4f:3e:ef:95:14:
8a:81:78:63:42:c0:e0:47:ce:04:d3:8b:d2:36:74:
6b:cc:e9:d4:57:f2:cb:b0:e6:0c:ec:4c:4c:d4:fa:
b7:e9:45:0a:1c:80:13:88:9d:f0:b6:ce:2d:30:72:
43:64:e5:ea:21:d8:e8:b8:e0:a2:07:1a:cc:ad:a2:
22:ab:c0:38:25:d1:4d:31:5b:e9:0a:78:1a:56:d9:
ab:d2:19:cd:1e:f4:a1:0b:2d:93:1f:5e:10:55:70:
c9:61:1b:b9:91:02:bb:20:29:62:47:0a:6e:d5:53:
e8:ea:e9:4b:c3:0b:bb:1a:88:c2:40:1d:bf:d2:66:
60:c7:dd:47:14:c3:79:08:ed:56:16:54:5f:5a:30:
79:98:d0:0a:69:38:83:16:06:dd:f4:5b:a0:4a:ae:
85:ed:95:47:f6:32:dd:a8:5e:0d:78:7d:df:48:51:
32:8b:79:63:b1:da:0b:72:3d:0a:26:70:dd:9f:84:
37:9b:24:31:85:d1:53:d3:f6:43:c9:ac:f4:84:cf:
e0:18:31:e9:28:4e:9b:57:7c:41:22:cd:be:f9:b9:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:31:4A:D2:21:A5:6C:25:97:35:41:67:AB:FD:1D:B2:BC:99:3E:B5
X509v3 Authority Key Identifier:
keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ba:a8:37:2b:a4:75:a4:b6:9d:6d:8c:ea:08:3e:f2:54:01:
c7:f1:d7:0c:c8:13:2d:19:0f:19:f4:88:ac:00:f3:86:33:91:
6c:a7:89:05:39:f6:f5:b4:40:ef:4b:69:3f:72:a0:9b:21:6d:
02:85:ff:23:50:bc:34:00:d8:e7:82:4f:7d:de:20:a1:ee:ea:
d7:a9:5a:46:cd:2b:85:26:7f:fa:05:51:6a:96:87:97:37:5d:
db:3b:20:12:69:d1:dc:c3:5e:87:e4:a0:ca:ea:7f:95:54:ca:
c1:85:bf:6d:bc:f2:c9:21:b4:26:e5:98:f0:53:c4:80:94:cd:
54:40:db:f0:7a:cd:33:4a:da:bd:d7:a3:ed:c8:e1:43:97:9d:
50:8a:ca:15:50:02:d1:c4:8c:ac:7e:a2:04:44:a9:13:81:1c:
7b:cd:e1:32:97:34:e1:c1:73:54:64:d0:ae:82:16:e7:d0:a7:
1c:1f:4b:62:18:d8:0d:02:d9:c9:88:90:d1:b4:79:2e:4b:2b:
bb:58:55:65:ce:f4:d0:2f:f3:c1:b8:0c:14:4b:ed:11:26:56:
a2:13:50:37:d2:15:5e:95:cc:87:3a:9a:3f:ac:ae:13:60:1e:
79:2a:bc:ab:76:87:c5:3c:0d:43:d3:49:96:1d:95:32:f1:c3:
2d:ab:3e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:10:07 2026 by rpki-client