Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
File: dYOxUbdLsu2w9c5rbpux4MPQrRs.mft (raw, json)
Hash identifier: YZgssgqAwWwRZTWg2Fzr9sxinVM+VLoNHxYjQOUvjj8=
Subject key identifier: 6A:19:6B:E9:36:6B:16:D7:9C:4B:CC:2C:81:4B:24:7F:F6:DE:23:4E
Authority key identifier: 75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
Certificate issuer: /CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Certificate serial: 019CA9EB30D3D71A2AA7B21366C279BE0403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 15:01:28 +0000
Manifest this update: Sun 01 Mar 2026 15:01:28 +0000
Manifest next update: Mon 02 Mar 2026 15:01:28 +0000
Files and hashes: 1: dYOxUbdLsu2w9c5rbpux4MPQrRs.crl (hash: D+O2Znm+/+6JaLdKYqphbDQQSvw99um8aktmV/y13NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:30:d3:d7:1a:2a:a7:b2:13:66:c2:79:be:04:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Validity
Not Before: Mar 1 15:01:28 2026 GMT
Not After : Mar 2 15:01:28 2026 GMT
Subject: CN=6a196be9366b16d79c4bcc2c814b247ff6de234e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:d2:cc:78:f9:0d:e9:d8:f3:3a:a8:9e:60:
80:56:82:4c:04:95:6f:17:46:ff:9e:a1:ec:3e:d7:
08:b5:17:96:25:8d:a7:40:ee:ba:fa:61:de:98:a1:
d6:68:85:1b:77:43:06:b0:8c:8b:02:fd:e7:22:ae:
78:ff:d4:d4:08:b5:92:b4:94:6d:8d:30:e1:f7:ff:
fa:16:69:72:51:10:05:89:95:17:63:fd:bc:2d:67:
cb:26:6e:7d:58:6d:1d:1c:6c:78:ed:b5:65:71:e2:
0d:3f:c5:da:44:fb:e2:29:76:88:d3:1a:11:a1:cb:
b0:02:1d:6b:15:d7:81:fa:42:ad:3a:b2:ce:f1:05:
43:cb:e0:85:dd:78:3a:bf:e4:18:2b:1d:10:f7:84:
91:ef:31:65:47:3c:42:f5:ed:4f:7a:c0:2b:aa:34:
2d:35:9d:28:f3:cd:b1:43:05:b4:35:aa:de:3e:f1:
3d:1c:20:22:5b:ed:39:80:6b:c3:92:23:af:23:71:
f7:ca:e9:b8:a8:46:9d:54:20:f9:cb:5b:58:2c:0a:
d0:b2:0c:27:90:fc:17:af:59:f8:d4:d8:cf:70:80:
6f:d0:e2:dc:8f:c5:b1:49:d7:28:f4:56:3d:c8:c5:
16:41:fd:15:90:23:99:23:fd:6f:84:b4:46:41:27:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:19:6B:E9:36:6B:16:D7:9C:4B:CC:2C:81:4B:24:7F:F6:DE:23:4E
X509v3 Authority Key Identifier:
keyid:75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c5:db:97:e0:b7:29:be:b9:d6:1a:75:84:a2:a7:97:56:1f:
67:a3:39:cf:8c:d6:0f:e1:e3:88:92:cf:57:6b:9b:42:cb:1f:
2d:68:3d:9a:44:14:39:8c:84:ee:78:70:d3:11:20:09:24:37:
9c:ed:c5:5e:c3:f3:9c:c9:30:9a:f8:bf:f7:24:4e:2b:48:f2:
16:ca:2d:15:61:b8:cc:f7:fc:c9:8e:86:79:b1:78:44:a4:0e:
62:bb:13:02:35:7f:09:99:31:db:27:92:79:33:df:0b:f1:cf:
bc:ef:23:71:27:bb:08:a0:4f:84:91:51:1a:05:85:fc:f4:38:
8f:03:d7:73:03:da:4f:2b:8d:66:91:2a:ce:c8:83:26:be:bd:
54:1c:45:1f:94:57:ab:16:db:f3:a4:14:f9:a2:91:85:1f:78:
af:5c:2e:0d:79:bf:83:de:29:5b:90:2c:cf:99:f8:6b:36:17:
4f:bd:bb:18:ab:4a:39:43:78:ed:3f:f6:4f:71:fd:a8:fe:75:
ac:d8:e0:a1:fb:67:74:79:1a:07:5f:83:7f:a6:db:f9:9b:90:
ca:c6:7e:05:e6:93:26:8f:7e:36:8a:7d:8b:a3:8c:da:d9:f3:
be:04:5c:91:9d:a3:15:cb:b8:85:05:d9:9b:8c:4d:a2:ff:7e:
bd:e7:0d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:12 2026 by rpki-client