
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
File: dtAtj564761YOO-TGIVJb8-vHGE.mft (raw, json)
Hash identifier: RuNeE22OFG3By2ghEPmEOk/8DquY+CvR3gCz5OJo5Fc=
Subject key identifier: 6F:4D:B6:48:EE:B5:5B:7F:DA:0F:AA:60:92:93:18:45:13:B4:A7:AA
Authority key identifier: 76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61
Certificate issuer: /CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
Certificate serial: 019CAB6AC88D53BB22B6EAB7A221B8EF3160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 22:00:27 +0000
Manifest this update: Sun 01 Mar 2026 22:00:27 +0000
Manifest next update: Mon 02 Mar 2026 22:00:27 +0000
Files and hashes: 1: dtAtj564761YOO-TGIVJb8-vHGE.crl (hash: 3R7zl0j87VpKP9rKeOxyYL4m0o6UxWfWCy9TjnxxDLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:c8:8d:53:bb:22:b6:ea:b7:a2:21:b8:ef:31:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
Validity
Not Before: Mar 1 22:00:27 2026 GMT
Not After : Mar 2 22:00:27 2026 GMT
Subject: CN=6f4db648eeb55b7fda0faa609293184513b4a7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:14:e0:f2:c3:5d:60:4e:d5:f0:b2:65:e0:
3a:8a:9e:2b:4a:bd:3c:38:1c:a1:11:88:17:74:ba:
82:44:52:c4:8b:25:3e:c6:ab:1f:3c:96:57:6c:39:
69:bc:8d:2f:16:a3:bd:32:9a:e9:4c:3a:33:c7:10:
fd:bf:e9:bc:9a:18:81:2d:df:6d:7c:80:6d:61:f1:
1b:ea:bf:80:db:1f:1d:0d:2d:62:c7:e8:7b:08:a1:
b3:55:ef:11:56:7e:2e:3b:29:bb:fa:51:29:cb:60:
fd:9e:ef:65:9f:5d:9f:7b:0e:d3:06:e5:a2:b9:4e:
38:57:90:53:01:d1:3f:b8:e6:d1:61:d7:48:1a:25:
ff:5d:3b:ab:e8:1b:81:65:b4:84:81:b0:b6:39:b6:
1c:a6:39:51:f2:bb:38:50:7a:d5:f1:68:f8:0e:5f:
56:35:d0:49:f8:da:3a:ce:15:9a:61:67:54:c9:e3:
ac:bc:30:54:0c:ff:e1:99:cb:70:d6:77:77:6a:6a:
50:ec:47:ed:3a:93:34:e2:87:96:d8:69:d8:c6:71:
36:b7:eb:7c:12:32:3e:f7:a5:a3:e5:e3:c7:c1:02:
bb:db:68:b4:64:f1:e8:83:48:ba:e4:a7:fd:64:60:
6d:d3:8a:2c:a1:4f:5d:a5:35:dc:89:0c:cf:7a:55:
88:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4D:B6:48:EE:B5:5B:7F:DA:0F:AA:60:92:93:18:45:13:B4:A7:AA
X509v3 Authority Key Identifier:
keyid:76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:7b:80:dd:06:da:e3:1b:68:6e:1b:d7:5e:3c:a9:ed:2e:0f:
d9:e5:11:c9:36:bf:6d:a5:5c:6e:9f:7f:26:17:fc:e5:21:36:
59:84:85:6b:d4:0c:dd:8a:f9:98:a6:da:08:ee:d4:71:89:ab:
69:7a:25:33:5d:0c:bf:d1:15:86:6c:93:d3:15:ab:e9:c9:93:
f3:59:3d:99:5d:35:e9:d5:f2:51:cc:23:d4:0d:5c:35:ba:df:
d3:44:44:9d:77:12:a5:5d:48:df:3b:29:47:69:c8:62:69:e3:
43:43:f6:5a:a6:f8:7f:ca:c6:70:11:b8:dc:1b:28:29:34:8d:
24:d4:0f:aa:f6:6e:6d:f8:31:1e:a5:8b:9f:9e:e8:87:09:8f:
c0:50:1c:d0:0d:0c:0e:d0:bc:9a:b2:80:7e:9a:1a:64:28:d3:
cc:33:ee:a1:fc:fe:42:81:15:74:d5:ec:64:f5:f4:89:b4:ef:
a6:68:5d:35:88:15:8c:eb:41:da:2b:53:86:29:f4:4d:fa:46:
06:94:4a:72:76:26:4d:e3:16:9a:ed:66:3e:8a:ab:c5:9d:8f:
9e:08:89:27:61:36:77:db:89:9c:04:c8:60:cd:16:1e:12:bc:
c6:df:16:ec:f8:e8:41:0e:f0:04:b8:46:a8:39:23:c8:9b:50:
4d:d4:8b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:18 2026 by rpki-client