Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
File: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft (raw, json)
Hash identifier: 9Ag6ajsL2clgBMijQomUa7t3aP3H9zFeomQG2xWQ1s4=
Subject key identifier: B3:E0:DE:BC:F9:98:9F:70:BC:4A:CC:85:2E:A8:4B:9A:D8:3C:78:FE
Authority key identifier: F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
Certificate issuer: /CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Certificate serial: 019CAB6AF27CD346CD85DD4F7BD8CDB2ED2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
Manifest number: 0F39
Signing time: Sun 01 Mar 2026 22:00:38 +0000
Manifest this update: Sun 01 Mar 2026 22:00:38 +0000
Manifest next update: Mon 02 Mar 2026 22:00:38 +0000
Files and hashes: 1: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl (hash: esGOvTKrgq8lFR1+hdK3JpUi8odQKWzgyGy1KCr4P98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f2:7c:d3:46:cd:85:dd:4f:7b:d8:cd:b2:ed:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Validity
Not Before: Mar 1 22:00:38 2026 GMT
Not After : Mar 2 22:00:38 2026 GMT
Subject: CN=b3e0debcf9989f70bc4acc852ea84b9ad83c78fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dd:b3:7d:a2:29:1c:44:57:5b:13:3a:06:cb:
c0:63:b6:3b:72:79:db:75:bd:ff:ff:41:20:dd:fd:
08:d5:90:be:2d:2c:96:2f:b8:83:38:37:0d:2a:79:
8f:0c:dc:75:88:03:f6:9c:63:35:17:da:8d:d8:fe:
9b:fd:b6:55:83:e3:80:32:d5:be:27:e5:b9:16:05:
b7:0d:f0:74:d7:a2:be:e6:53:01:46:21:42:66:2c:
42:33:6e:81:f2:b3:78:6d:a3:6f:0d:86:29:a5:08:
aa:61:3e:2e:a8:1f:c4:51:92:84:92:2f:d0:e7:34:
69:f1:18:32:fc:7d:83:1a:68:8b:5b:3b:c5:38:0d:
af:cb:42:c2:c4:a9:16:bb:ad:15:2a:1b:a9:61:74:
67:d0:56:2f:e7:79:d8:70:dc:94:15:0d:58:c3:56:
83:fa:43:a6:18:46:2a:ee:30:fb:43:f7:e7:94:28:
e6:af:ba:74:de:a8:60:a8:6b:b1:6d:30:84:68:47:
b8:62:dc:29:98:90:e5:c1:e9:5d:9f:27:39:c9:2f:
7b:6e:0b:aa:47:c3:81:9f:e7:d3:e1:c9:bb:c2:07:
23:4c:ae:74:f1:a4:f3:8e:eb:6f:06:b4:11:31:e8:
eb:06:f8:1d:94:2e:44:2b:90:6e:c9:e5:ee:69:d6:
2b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E0:DE:BC:F9:98:9F:70:BC:4A:CC:85:2E:A8:4B:9A:D8:3C:78:FE
X509v3 Authority Key Identifier:
keyid:F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bc:31:82:c3:43:b5:ed:f8:83:97:c6:6b:03:82:b9:c1:13:
64:1f:66:11:f2:dd:67:bb:93:ff:fc:8d:b6:af:d9:49:8e:e3:
f7:dd:71:26:3b:26:d7:bd:20:c0:bc:d0:7a:df:eb:66:af:5d:
62:25:8f:5c:01:52:7f:52:d5:85:ba:69:2e:fe:88:01:96:36:
a0:a5:dd:19:8b:5a:77:c9:17:07:b6:12:ea:62:4c:60:7d:f9:
43:32:38:af:79:f2:5d:99:8f:f4:bc:41:51:2f:62:b1:14:a4:
5c:5b:2e:6c:94:0f:67:a2:82:5e:89:53:23:e6:d4:59:db:84:
6e:21:fb:ac:9a:62:d9:cf:a4:72:ef:dd:05:3b:53:5c:e5:c7:
ef:79:59:de:75:51:b3:2a:d9:5b:80:a5:8f:89:f2:51:1b:ba:
f5:40:6a:af:63:52:4f:b6:d0:92:e1:d3:3b:32:b9:5d:7a:04:
8b:6a:89:46:77:17:c0:1e:92:0f:7a:69:bb:2b:a6:9b:26:9a:
28:90:56:68:02:37:02:3f:29:a5:7d:7d:6c:81:12:73:bd:9d:
23:ec:50:05:58:22:5d:85:52:22:ec:10:ba:f6:1a:db:33:9d:
4f:f3:24:c1:00:7f:ca:87:c0:85:da:df:00:18:9d:a1:f2:11:
f6:6b:d6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:38 2026 by rpki-client