Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
File: Da7a5Z2cmvUe9UivsMlkOM73IRw.mft (raw, json)
Hash identifier: 8Rt7G73BlRDe49nLc3X4AjGSqsHbXgNjBKXhrM7g6lI=
Subject key identifier: 7A:81:CD:1B:31:CC:46:1B:DC:DB:3F:A6:D3:2C:68:9D:72:E4:E0:BD
Authority key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
Certificate issuer: /CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Certificate serial: 019CAC0FE5E066C310527EE26443ED9E3399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 01:00:48 +0000
Manifest this update: Mon 02 Mar 2026 01:00:48 +0000
Manifest next update: Tue 03 Mar 2026 01:00:48 +0000
Files and hashes: 1: Da7a5Z2cmvUe9UivsMlkOM73IRw.crl (hash: JPJ1zl/qt6MElhrBF97y3x/TquzcyXZE9CWD8EczpHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e5:e0:66:c3:10:52:7e:e2:64:43:ed:9e:33:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Validity
Not Before: Mar 2 01:00:48 2026 GMT
Not After : Mar 3 01:00:48 2026 GMT
Subject: CN=7a81cd1b31cc461bdcdb3fa6d32c689d72e4e0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ff:88:a5:ac:84:d0:ad:a0:6b:40:7e:f7:1c:
69:2f:25:72:6b:83:6f:36:26:0e:ca:c0:53:8d:20:
ce:9e:f9:5a:48:19:e4:9b:83:7c:24:f6:b4:34:e0:
49:f2:e1:d2:fe:91:2b:fe:eb:36:8f:04:b8:de:2a:
9c:ac:c8:c2:7f:47:21:d5:8f:5a:8c:38:22:9d:ef:
1d:e7:30:be:f6:74:64:ac:cb:2e:df:20:0e:72:97:
bb:84:fc:f4:b4:6a:b4:41:f1:4d:ed:81:13:f5:9f:
36:84:b8:9c:a5:98:4b:d8:a5:5f:ba:bf:4c:da:ac:
d5:b6:23:67:b7:63:68:65:3d:da:a0:13:cc:d5:76:
35:8c:01:c1:94:f9:25:0f:69:fc:8c:d6:f9:0c:d3:
a2:f4:36:d0:f8:ea:03:be:c4:25:18:f0:ce:9c:cc:
2b:36:24:85:05:6e:aa:ed:ea:08:b2:4f:2a:ed:7f:
b3:f4:38:37:06:97:58:b3:46:73:2e:6e:67:89:6b:
bb:f1:ad:e8:9b:fa:34:71:27:6e:ff:9b:50:85:4d:
99:db:52:b9:1d:4c:fc:64:17:3f:04:56:65:25:bb:
a6:be:e0:ef:5c:a8:46:f9:23:78:89:33:db:b9:45:
45:73:5c:87:62:69:57:8f:b9:d4:fb:30:07:06:4f:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:81:CD:1B:31:CC:46:1B:DC:DB:3F:A6:D3:2C:68:9D:72:E4:E0:BD
X509v3 Authority Key Identifier:
keyid:0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:cb:e1:b3:ef:52:c9:ce:22:06:e4:60:9d:1e:65:20:4d:09:
aa:69:9c:14:9b:7b:d5:85:7b:44:72:90:f9:02:a3:35:36:9d:
2b:88:5b:57:35:f9:5e:87:00:86:1d:a8:29:38:b5:94:a1:15:
22:a8:7a:f7:ee:5b:52:cb:35:06:a0:51:9c:66:e5:7e:ff:38:
c3:9b:23:09:16:66:94:eb:b0:a6:e7:83:ec:68:91:4f:eb:c9:
d2:98:ec:b3:f2:05:cb:aa:7e:f6:c8:2e:65:b2:25:77:9e:a6:
cc:7e:1d:a5:f8:53:5e:4c:02:67:b5:42:59:f6:3d:cf:61:e0:
fc:93:20:20:e6:1f:ab:9b:af:88:8a:bd:e7:bf:6d:26:23:1c:
bb:62:00:14:85:39:48:28:09:4a:1d:f1:0e:d2:54:d0:37:5f:
2a:d2:f7:18:7c:13:16:1c:1c:95:2b:76:1e:65:db:9b:bc:9f:
8e:b2:24:86:2f:2f:e0:c5:28:06:c1:24:ce:ef:da:55:6d:c7:
d0:9f:b9:ba:f6:8b:d3:23:3d:42:da:b0:f1:16:26:b3:9c:50:
bb:a7:76:72:7f:31:3b:a8:6d:3a:4f:95:b1:37:0c:8e:63:79:
0f:7c:3e:be:0b:03:b5:12:55:8b:65:cb:3b:73:b2:d9:d6:d4:
2a:59:4e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:09:05 2026 by rpki-client