Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier: 0FnLauUZ7YnFN8oR7irtefBWi1irP2k5xg36cSGEZUY=
Subject key identifier: 7B:7D:1A:6C:C0:8D:96:42:61:1F:17:C5:5C:19:B8:3F:0E:BE:4A:67
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial: 019D9B50BEE97E37216795EF6CB79C8EE096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number: 0CAD
Signing time: Fri 17 Apr 2026 12:00:53 +0000
Manifest this update: Fri 17 Apr 2026 12:00:53 +0000
Manifest next update: Sat 18 Apr 2026 12:00:53 +0000
Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: RePeswVYhXMwGgp03In1YD+Wmzd6wFzhu0plQ4Tz1Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:be:e9:7e:37:21:67:95:ef:6c:b7:9c:8e:e0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
Validity
Not Before: Apr 17 12:00:53 2026 GMT
Not After : Apr 18 12:00:53 2026 GMT
Subject: CN=7b7d1a6cc08d9642611f17c55c19b83f0ebe4a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:fc:da:33:fb:40:c3:31:de:8d:fe:77:ec:
4a:40:12:cd:1b:16:ed:6f:b2:0d:bb:7d:e9:46:2f:
bc:dd:1b:f0:9f:7f:0c:61:aa:3e:a3:42:9d:90:aa:
02:b6:b9:51:6e:94:0d:a4:95:a3:d4:d4:88:b5:97:
c3:e0:3d:a4:6b:57:c7:3f:d3:e4:5d:8b:bf:63:78:
98:b6:1e:34:bd:fe:0c:d3:d5:aa:dd:32:eb:68:6d:
ec:17:d2:b8:4d:30:09:84:56:3e:9e:78:65:09:1c:
a3:32:7d:4d:da:49:ab:a7:f8:f6:fc:78:9d:38:87:
32:cb:ca:7d:35:e2:f2:56:f0:c7:65:e1:de:dc:6f:
eb:69:47:56:17:18:ba:9b:45:fa:63:11:b6:54:24:
93:86:dd:08:21:b1:af:39:6c:62:5e:fb:76:36:82:
c5:84:b9:39:e6:bf:ce:1f:35:90:e1:59:95:ef:7c:
68:16:ec:4d:13:cb:a5:45:c4:57:77:cf:e2:74:78:
7b:ac:ee:64:db:5a:2a:f1:91:09:ac:3e:f9:a1:a8:
90:9e:29:b2:14:ea:ab:85:29:fe:73:41:23:4e:ef:
ea:87:39:da:b4:81:0f:22:f4:1e:5f:ef:ea:07:7a:
68:29:6a:23:07:e6:17:9e:cf:8e:7e:00:34:4e:3b:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7D:1A:6C:C0:8D:96:42:61:1F:17:C5:5C:19:B8:3F:0E:BE:4A:67
X509v3 Authority Key Identifier:
keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bf:3d:03:3a:8f:8d:85:e0:00:6c:16:5c:83:59:fc:f1:d7:
50:e5:14:19:6a:8c:fd:2f:43:6b:30:43:7c:e3:40:18:2e:b7:
62:05:a8:23:48:22:13:db:bf:56:15:47:b3:96:10:f0:02:90:
e9:79:19:cd:1d:e8:9a:3f:c3:2e:cd:4f:2d:23:68:ef:57:7d:
f6:b7:19:77:b8:36:a7:c3:ba:d1:ae:05:3a:b6:78:43:2e:66:
dc:d6:68:17:18:25:68:be:7e:41:7f:e3:92:1c:f0:b2:1f:9b:
31:b2:f4:85:66:2b:e7:f5:b7:42:cc:2a:13:e5:c5:07:da:af:
b1:a3:7f:46:f2:c4:ae:55:8b:fe:57:a2:8f:ef:1c:8f:1d:0d:
4a:6f:a4:e3:cf:01:c7:30:d0:04:21:0e:69:eb:a2:61:d4:35:
8c:21:73:b4:08:bb:a9:12:4e:43:8b:d1:7b:e5:3c:32:84:ba:
95:97:f2:f6:17:8d:d9:f9:80:d9:7e:2d:7a:87:38:3c:2a:13:
dd:fd:da:ff:f9:8c:08:17:e6:c7:3f:fb:96:84:03:e9:d6:24:
de:a6:58:db:d4:b6:b4:4b:8b:9f:8b:44:36:76:b8:bf:eb:3a:
0c:7f:2a:03:90:6f:4e:40:49:9a:58:40:e7:32:b7:6d:59:47:
77:66:12:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:50 2026 by rpki-client