Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
File: dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft (raw, json)
Hash identifier: abC/6NuT0yK4KRY0/gEpFS79nKtwfUzCi4Xd0MCuz7A=
Subject key identifier: A2:2E:EC:4C:B2:62:13:E8:65:9E:E9:61:AC:F1:24:3B:E7:63:E9:98
Authority key identifier: 76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66
Certificate issuer: /CN=7607f69dee43ac01d7dfeaca9b76a240ea6ef366
Certificate serial: 019CAB6B7C7603159C662E48CFE7A600448E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
Manifest number: 0671
Signing time: Sun 01 Mar 2026 22:01:13 +0000
Manifest this update: Sun 01 Mar 2026 22:01:13 +0000
Manifest next update: Mon 02 Mar 2026 22:01:13 +0000
Files and hashes: 1: dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl (hash: IfLgp3Kp3AWCj0Z6el1RlvDs279/8Zv5fvTg49pZBKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:7c:76:03:15:9c:66:2e:48:cf:e7:a6:00:44:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7607f69dee43ac01d7dfeaca9b76a240ea6ef366
Validity
Not Before: Mar 1 22:01:13 2026 GMT
Not After : Mar 2 22:01:13 2026 GMT
Subject: CN=a22eec4cb26213e8659ee961acf1243be763e998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:01:44:eb:12:5d:c3:d6:e3:c4:5b:7c:f5:
9b:29:fb:7c:e0:32:29:57:10:71:5e:0e:f8:fd:97:
f0:fa:0e:12:5b:a2:e2:92:be:5e:b6:74:ba:c8:ce:
ef:10:22:be:a2:13:f2:ef:21:7d:a3:0c:83:3f:0b:
f9:ce:6b:47:c6:ad:90:35:d6:d1:e3:86:86:2f:59:
ad:e9:26:82:f0:da:f8:92:04:f4:d2:a7:9d:5b:44:
dc:4a:e4:e1:f3:2b:88:3b:79:63:d1:3c:d3:0c:99:
8f:ac:31:a2:64:65:4b:68:de:41:8c:e3:aa:f4:57:
c2:5a:0c:14:85:65:ee:42:e3:40:cf:ef:70:3b:0c:
0d:79:47:07:d3:28:2b:0d:2c:e7:09:82:fe:6d:66:
62:85:b3:94:5b:37:fa:ee:0f:db:99:4e:35:2c:59:
65:d8:08:ed:04:db:12:88:67:08:db:6c:7c:04:68:
7d:97:a8:2c:53:ba:dc:fe:c9:35:66:ca:ba:77:b8:
f3:e3:e7:9a:48:87:b4:20:ea:8c:fc:53:10:46:79:
23:15:24:02:72:92:0d:87:43:3a:f1:f2:e7:1a:d6:
f8:9c:17:ed:5d:40:27:8d:cb:8b:45:7d:52:8e:e3:
95:c5:b0:0f:68:26:6a:88:d7:ae:e6:b6:41:fe:fc:
b8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2E:EC:4C:B2:62:13:E8:65:9E:E9:61:AC:F1:24:3B:E7:63:E9:98
X509v3 Authority Key Identifier:
keyid:76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fe:81:f7:b7:2f:13:f2:a2:48:cb:6f:13:7b:21:cc:bd:79:
f1:6e:36:56:23:64:4d:42:db:b6:a6:f5:ee:f5:aa:af:23:61:
73:39:d7:e8:36:81:c6:be:d7:7a:be:5d:d0:a5:47:8a:28:2d:
0e:7a:b0:df:38:1d:ca:c3:33:fb:b4:58:21:b8:01:99:8c:17:
4d:87:b2:b0:85:b5:9d:db:9e:92:38:0c:a7:cc:e2:41:2a:38:
97:a4:1f:5c:ac:65:7b:f8:50:73:92:ea:47:eb:33:43:bf:17:
09:a6:d8:39:a8:19:4d:8d:76:80:e1:56:5c:91:91:33:6f:c0:
0b:79:94:c1:98:51:52:38:34:1d:26:7b:de:e2:33:dc:62:d4:
b1:e1:75:58:c6:55:f9:22:08:08:58:57:d5:e9:8d:cc:7d:a5:
b7:54:79:b7:49:a2:7a:ae:15:d8:43:83:45:a5:2e:a1:95:4f:
bf:66:49:7e:83:7c:3c:aa:98:e5:8f:57:28:b0:73:8a:14:2b:
71:9e:8b:8b:92:3d:06:7f:77:6c:ad:f6:c1:1f:ef:aa:52:c7:
40:c8:4b:66:18:ec:ad:6f:fc:70:6e:0e:99:ea:ee:f9:91:00:
85:d2:b1:79:b2:de:aa:f5:8c:89:81:8b:80:fe:14:33:d2:d9:
72:9a:84:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:42 2026 by rpki-client