Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
File: dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft (raw, json)
Hash identifier: scOY5lb6S6FdI9NHOPa9MFuhoC2f8ka/2/RGM0/mV58=
Subject key identifier: 80:EF:3C:2B:88:5E:3E:DA:33:C5:2E:5F:BA:74:31:60:06:D2:59:8C
Authority key identifier: 75:71:C8:92:99:9B:B4:56:4B:CE:48:0C:92:1B:6F:F1:72:05:EC:C6
Certificate issuer: /CN=7571c892999bb4564bce480c921b6ff17205ecc6
Certificate serial: 019CAA583773A4A213C3DF5E025E9CC55258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
Manifest number: 0824
Signing time: Sun 01 Mar 2026 17:00:33 +0000
Manifest this update: Sun 01 Mar 2026 17:00:33 +0000
Manifest next update: Mon 02 Mar 2026 17:00:33 +0000
Files and hashes: 1: dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl (hash: kh3nL5Bvib7GktM9ETVBBDt2ziW1IMF4BrtWQaw09KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:37:73:a4:a2:13:c3:df:5e:02:5e:9c:c5:52:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7571c892999bb4564bce480c921b6ff17205ecc6
Validity
Not Before: Mar 1 17:00:33 2026 GMT
Not After : Mar 2 17:00:33 2026 GMT
Subject: CN=80ef3c2b885e3eda33c52e5fba74316006d2598c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:56:c8:f1:16:e9:c2:1d:95:68:ff:6c:b5:c7:
cc:00:8b:67:81:d4:c3:ea:6d:7c:f2:d6:0a:5d:5f:
79:43:72:1c:c5:e8:58:80:34:f2:c5:7b:84:2d:74:
0a:54:bd:35:ae:dd:c0:73:a3:90:36:04:e1:56:33:
b9:fa:f9:c3:13:63:a4:cf:c0:d7:f1:c0:b4:b4:a7:
bd:7b:41:cb:ac:56:84:7e:3f:53:20:d1:f3:b6:76:
eb:f8:88:2e:fe:38:11:f9:91:11:12:a2:c4:4e:fc:
aa:54:f1:5c:82:45:dc:06:80:22:52:f2:98:aa:f8:
35:e5:27:a6:e0:64:a1:6a:24:2d:fb:e5:f3:9d:68:
89:64:58:5a:2d:ac:91:24:95:bf:2d:30:21:37:7d:
18:a7:3b:8d:88:49:b6:22:86:6f:ee:90:12:36:8d:
ba:65:38:19:57:49:a3:d1:a1:04:4b:20:d0:ec:64:
2c:a1:f5:9d:2f:3d:f7:a4:39:fe:d7:f9:34:d0:eb:
a3:25:b1:f5:9d:75:1e:6a:26:fa:fa:7a:7c:91:ca:
67:7c:9a:72:1c:fb:71:94:f2:76:60:42:1d:3d:65:
a8:bd:52:03:7e:3a:34:15:14:d5:e3:4b:48:3f:95:
95:38:d4:1b:cc:a2:52:46:bf:e6:84:52:6e:87:bf:
5f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EF:3C:2B:88:5E:3E:DA:33:C5:2E:5F:BA:74:31:60:06:D2:59:8C
X509v3 Authority Key Identifier:
keyid:75:71:C8:92:99:9B:B4:56:4B:CE:48:0C:92:1B:6F:F1:72:05:EC:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:09:b1:14:3d:1d:8b:47:06:44:6e:28:fa:50:c8:b0:cc:cc:
a5:5a:01:cb:95:4e:04:51:a7:38:9c:86:4c:36:00:e8:7b:2d:
c2:ff:87:ae:6d:2b:90:71:7f:32:1c:76:0d:6d:92:1d:bb:95:
d0:58:4c:f6:18:eb:fc:9f:62:10:4a:69:79:ef:bd:fd:72:25:
c5:c0:e7:3e:0d:68:2c:bf:3e:7d:28:7b:5e:27:5a:bb:01:70:
d6:78:7e:3d:e8:e7:c3:ba:57:ef:85:c0:85:24:f9:0f:6e:43:
68:97:ac:ab:04:3d:87:1c:3a:f2:cc:f3:41:01:b7:1e:51:aa:
2c:f1:35:6c:15:64:29:94:6c:21:c6:c0:c0:b6:a5:52:3c:23:
c8:3d:f5:8f:40:6b:81:84:37:95:9d:8f:4d:0b:f5:cd:ac:2c:
2d:df:f9:e9:e6:7a:3c:dd:97:69:e5:94:ad:5f:2e:05:e8:41:
d9:f7:e8:3d:95:4e:96:84:be:4f:e8:3d:bf:ca:e7:75:00:88:
86:8e:06:ad:80:a4:2a:ef:90:4d:b9:dd:14:90:a6:88:47:cc:
ce:ab:7b:b1:b4:82:fe:d0:a5:1d:e9:9d:30:c7:3d:50:c5:e7:
66:fb:b4:0b:d2:b2:10:f0:ee:9c:6e:e7:3c:8e:f9:90:a2:7f:
70:da:4c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:58 2026 by rpki-client