Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
File: DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json)
Hash identifier: 4kjBDfO1gJRD86h7qnj6Di5CyEpAxYYXTEVVCnEhe1E=
Subject key identifier: 3F:79:A4:C7:F2:F2:30:63:0D:4F:06:D8:FA:BC:57:57:03:01:20:A3
Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
Certificate issuer: /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Certificate serial: 019D99D081E223702671E91CAA9E5CC681C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
Manifest number: 1129
Signing time: Fri 17 Apr 2026 05:01:11 +0000
Manifest this update: Fri 17 Apr 2026 05:01:11 +0000
Manifest next update: Sat 18 Apr 2026 05:01:11 +0000
Files and hashes: 1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: tQ+BVqv7elTlbpWypKWxG7hf1+CK+PWXb3+Jo1cg9iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:81:e2:23:70:26:71:e9:1c:aa:9e:5c:c6:81:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Validity
Not Before: Apr 17 05:01:11 2026 GMT
Not After : Apr 18 05:01:11 2026 GMT
Subject: CN=3f79a4c7f2f230630d4f06d8fabc5757030120a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:d3:cd:c0:a1:c8:2d:2f:3e:c6:de:ee:35:
53:26:3a:4e:16:a0:ee:84:f2:dc:5a:a8:91:48:ca:
dd:50:54:b8:e8:3e:88:3f:78:b9:16:ac:fb:25:39:
81:ad:ff:6e:f9:86:62:9f:bf:4e:c2:a4:a5:e7:e6:
b5:a8:84:81:83:6d:ab:d7:ec:28:3c:59:96:71:00:
01:54:ba:63:3a:02:ab:31:c5:ed:6e:0d:83:be:aa:
8d:65:9a:75:a2:58:1b:80:b8:37:72:cf:f4:49:ab:
54:8e:c4:09:7e:c1:22:c8:ea:27:51:bc:8b:d3:24:
eb:ec:24:28:09:8c:6a:b8:b6:55:66:5f:0e:fe:95:
61:6b:94:6f:bc:0c:8b:27:dc:f4:0b:7f:5b:28:ef:
fb:51:93:08:58:63:c2:bb:cf:02:6d:36:9e:6b:19:
bc:3e:0b:14:85:44:cd:6f:ca:1a:64:c6:88:54:b2:
2b:cc:e4:04:b3:b1:9a:99:00:9b:ce:ba:52:69:39:
70:3e:ed:05:05:c5:a0:9b:38:d9:6d:61:26:8f:d0:
72:c2:56:2d:2a:c3:8b:6d:d0:76:60:99:ab:9f:5f:
bb:0b:d4:32:16:c3:e5:72:a6:e7:c2:a1:77:27:ed:
5c:b2:1e:c5:a3:4d:94:e4:fc:8d:4f:d2:9e:1d:58:
84:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:79:A4:C7:F2:F2:30:63:0D:4F:06:D8:FA:BC:57:57:03:01:20:A3
X509v3 Authority Key Identifier:
keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a5:ad:02:f8:60:18:2f:8e:2e:7d:34:89:08:e9:b5:dc:53:
3d:93:19:fb:11:13:8a:8b:85:a0:9f:79:81:f7:78:6c:ba:47:
31:d3:64:e6:6b:54:80:b9:d0:25:00:65:49:ff:77:b9:b0:dc:
f1:2b:ea:1d:ec:d6:16:06:b0:d3:dc:ad:c8:53:ee:9e:5a:8d:
b5:1d:15:9d:37:e9:5d:c5:2a:54:52:b3:49:5d:5a:a1:e2:95:
1c:f4:e4:01:88:92:1d:4f:c4:24:d1:d0:b4:81:7c:56:71:c2:
98:34:d1:b3:19:ed:eb:fe:3d:22:44:63:0c:29:cd:d6:04:57:
5b:f4:7a:8c:9e:50:dd:50:54:b1:d6:80:a2:52:e5:0e:8b:9c:
5d:45:aa:52:c0:d8:60:7e:7a:8b:6e:b5:f2:88:79:0e:b8:9f:
3e:79:fc:65:11:e1:66:5f:f5:7b:c3:50:5e:b7:c4:c0:ff:96:
df:a9:0e:26:f6:df:72:2d:6f:1b:b9:4e:0a:6b:3c:1c:b4:f0:
f4:aa:39:bf:96:9b:ff:26:a6:36:7b:78:a7:95:4e:3f:68:38:
ed:44:7c:85:50:b1:a7:d1:a0:ed:f6:2b:7f:16:7c:ac:e1:07:
36:ef:77:63:f5:2e:40:55:6d:de:e8:92:52:7b:9a:48:21:38:
b2:0d:52:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:25:47 2026 by rpki-client