Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
File: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft (raw, json)
Hash identifier: UZCn1AXFVzUgEhq1ptE3YERufNLliBw+i1hMJN3CtBQ=
Subject key identifier: C7:1D:9D:FA:C6:1F:C7:C0:22:AD:93:2A:DC:C1:3A:95:88:DD:F9:AF
Authority key identifier: F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
Certificate issuer: /CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Certificate serial: 019D98F43C2165FEDA3B8EC844C412B9A5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
Manifest number: 0FB4
Signing time: Fri 17 Apr 2026 01:00:35 +0000
Manifest this update: Fri 17 Apr 2026 01:00:35 +0000
Manifest next update: Sat 18 Apr 2026 01:00:35 +0000
Files and hashes: 1: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl (hash: 0R6FWL0hvsKsDnh2tCjQI29cD/kQSeQZ8cV/k1eH2R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:3c:21:65:fe:da:3b:8e:c8:44:c4:12:b9:a5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Validity
Not Before: Apr 17 01:00:35 2026 GMT
Not After : Apr 18 01:00:35 2026 GMT
Subject: CN=c71d9dfac61fc7c022ad932adcc13a9588ddf9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:6a:5e:b9:08:3e:c7:42:5a:75:ad:51:fc:
c3:00:6d:e2:cc:5d:09:8e:76:c1:3e:3c:cd:36:d7:
58:b5:25:90:c6:2f:0d:19:d4:e3:f3:44:d2:4a:36:
9a:43:64:17:00:23:9f:86:c4:ae:b3:92:43:05:c6:
35:6c:9b:e2:10:ce:0e:a3:37:17:f6:7b:68:c2:6c:
b7:ee:cd:41:c3:09:98:b4:1f:bf:f0:b6:12:96:7b:
ca:16:c0:0a:a2:72:a1:d2:62:68:e4:8d:22:cf:e7:
ce:07:8d:0f:16:ed:9b:a4:cb:6f:d3:3e:63:23:78:
94:93:fd:5d:f2:a6:17:57:ee:52:0b:b4:b3:77:54:
1b:27:3a:c6:f6:24:c3:0f:b6:eb:37:60:9f:b3:89:
1e:74:75:13:8e:ee:5a:6c:37:f3:8c:09:20:87:c4:
3f:83:37:6b:63:4d:05:3d:44:75:1a:42:cd:1a:fc:
8e:7d:e8:06:07:06:cb:1a:24:28:45:5a:df:48:01:
20:72:c1:75:2b:8e:4b:c3:f4:50:47:ed:86:23:93:
40:9d:3e:cb:c5:5f:73:1d:d9:e7:05:59:94:3c:7c:
b3:c5:37:c5:14:f3:0f:bc:d5:3c:36:f7:db:c6:47:
5e:25:4c:fa:a4:1a:5e:60:59:df:b2:7b:8d:1a:bc:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1D:9D:FA:C6:1F:C7:C0:22:AD:93:2A:DC:C1:3A:95:88:DD:F9:AF
X509v3 Authority Key Identifier:
keyid:F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1d:f9:0b:f5:e8:3f:cd:94:15:3c:31:7c:95:3f:66:7e:ef:
ab:6c:2d:89:bc:4c:4d:0b:c9:3e:4f:27:6c:8e:76:f9:be:d1:
cd:6f:26:f5:43:7b:ab:4e:7a:24:4e:47:1c:fe:ca:f3:5f:0d:
f0:69:06:ab:0a:63:3d:a2:81:7f:ae:92:3d:ea:93:6b:2a:d7:
4d:e4:18:8e:97:65:12:15:5a:7b:34:37:a5:d1:64:cb:61:9e:
95:8e:e8:b1:ef:09:f4:db:7c:f2:53:8f:ab:58:f4:da:59:58:
0f:42:1e:a8:84:2d:d2:5d:a4:68:35:9a:21:e6:7f:5f:40:01:
63:b5:d9:b7:f6:a0:bd:f4:b3:26:97:3a:df:74:b1:78:99:c0:
f0:57:34:56:01:e4:47:e3:2b:0d:a6:56:65:cb:d8:a3:f1:b5:
26:be:67:2e:79:d3:7f:5a:41:61:30:4a:de:c0:75:8a:55:cb:
f7:a1:ad:73:22:97:64:f0:41:06:26:bc:cf:b1:0e:8b:3e:5e:
c4:1e:8d:52:40:d0:3e:bb:52:83:87:57:96:a7:3b:88:0a:7c:
ad:e3:2b:c0:1a:46:3c:35:fd:77:0c:d9:6a:56:88:af:31:ef:
36:95:48:43:d7:ae:c3:2a:af:c3:9b:18:b0:f0:c9:2e:56:9d:
99:f4:30:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:53 2026 by rpki-client