Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
File: DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json)
Hash identifier: EV1SK+jdtAHkNRdN1nCS0aNU3ajGdYf62n/ukyqE27I=
Subject key identifier: 4F:D5:55:44:D2:82:7E:33:22:8F:82:03:5C:73:0E:83:91:5B:19:D9
Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
Certificate issuer: /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Certificate serial: 019CAA5880E4C56E75203B9FFED4DEEBB188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
Manifest number: 10AD
Signing time: Sun 01 Mar 2026 17:00:52 +0000
Manifest this update: Sun 01 Mar 2026 17:00:52 +0000
Manifest next update: Mon 02 Mar 2026 17:00:52 +0000
Files and hashes: 1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: BOz68DnqDh7al0TbPVbgq5lEoZiae6X78gQL+zizax0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:80:e4:c5:6e:75:20:3b:9f:fe:d4:de:eb:b1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Validity
Not Before: Mar 1 17:00:52 2026 GMT
Not After : Mar 2 17:00:52 2026 GMT
Subject: CN=4fd55544d2827e33228f82035c730e83915b19d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ea:c6:ea:da:c9:3a:27:77:70:79:8e:8b:c1:
fd:c4:40:70:93:87:e5:79:fa:1a:83:5a:3d:9e:f6:
f5:39:8b:99:d4:04:c6:28:8c:c4:b6:71:6a:1a:2f:
58:20:f9:cd:a6:15:48:47:b6:5f:35:71:29:00:ad:
da:6c:4f:f7:36:ab:99:bd:78:9e:b1:e5:6d:e4:55:
d8:8d:e0:ad:56:ed:cb:93:30:85:8f:16:d6:ee:a4:
fb:33:e4:97:01:52:17:7d:64:ac:5c:d1:39:e2:28:
9b:e0:f2:70:02:75:6e:7d:e9:fd:36:eb:e9:9d:48:
83:00:d8:4e:d5:cd:d5:6f:56:b1:11:9b:4d:b3:1d:
b4:df:fb:5a:ba:a4:71:34:fe:50:4c:92:b5:28:05:
e1:f1:65:5a:24:12:28:fa:38:71:47:aa:9a:5a:06:
87:cb:a1:74:c1:44:70:6a:e4:49:6c:a5:82:22:cd:
bd:9b:0f:9c:3a:b4:dc:fb:28:43:b4:f3:97:f8:e8:
fe:e2:36:37:7a:b0:c1:a8:2a:b1:2d:fe:e5:5c:60:
f4:0c:4e:59:51:2c:f6:94:6d:57:a9:9f:fc:8f:0f:
69:96:56:e3:87:27:4f:37:54:93:9a:85:ed:d0:99:
70:7a:b6:d6:d0:54:5a:31:55:9a:96:1b:6c:68:3f:
d4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D5:55:44:D2:82:7E:33:22:8F:82:03:5C:73:0E:83:91:5B:19:D9
X509v3 Authority Key Identifier:
keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c2:d1:b9:45:f3:4a:90:23:43:3c:22:64:c2:a2:72:bc:91:
56:c8:5a:58:2c:c6:32:64:2a:36:0e:83:df:5b:0a:97:dc:d5:
d1:b5:4f:3e:78:91:f3:46:d0:34:e8:31:88:80:48:03:fa:59:
71:67:6f:c6:ac:7e:80:f3:b8:37:e7:e7:31:20:f5:58:fb:45:
f7:1b:4c:eb:cd:b2:fe:67:ad:df:c4:9f:61:3c:a1:1c:97:48:
59:f3:75:30:86:c1:35:d0:86:9c:7a:ef:5b:5e:bc:e8:bc:f5:
3b:7f:d4:86:3d:5e:20:5e:0b:d0:df:a0:e0:74:54:30:38:cf:
de:17:c3:8b:07:bc:62:95:63:d6:1d:8f:90:77:1a:da:10:9a:
27:e5:0d:b0:1e:01:85:d5:2b:dd:7a:29:15:c3:e7:2d:de:ea:
6b:0c:ff:31:6a:4e:c8:12:0d:54:37:8a:bb:54:85:74:6d:9b:
e0:87:17:6e:9b:18:bb:a4:cc:e3:3a:b7:3b:fc:64:57:99:06:
67:b0:1a:e3:b8:d4:87:b1:f2:60:6a:98:91:cf:aa:61:6c:fb:
71:f3:5e:73:f0:23:9b:49:5c:65:d6:dd:fb:57:bf:78:19:64:
73:42:3a:fd:93:bd:97:3b:fa:17:04:ec:1d:e2:20:c9:4d:1d:
4d:b0:33:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:32 2026 by rpki-client