Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File: DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier: gIwJYkqDdygS4OoOQGDzdZ54nrYm87TKsicCcNJE+QM=
Subject key identifier: FC:48:23:F5:F0:E9:6F:05:2E:B1:79:47:2D:38:64:FA:09:E8:FA:7F
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer: /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial: 019EBE7FA53DF60147E794640414CFBE677F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number: 1957
Signing time: Sat 13 Jun 2026 01:01:36 +0000
Manifest this update: Sat 13 Jun 2026 01:01:36 +0000
Manifest next update: Sun 14 Jun 2026 01:01:36 +0000
Files and hashes: 1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: 4ilk6AXxdxTgt915Vj6EsPiEaOnUoU83RAxkGu69EKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:a5:3d:f6:01:47:e7:94:64:04:14:cf:be:67:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Validity
Not Before: Jun 13 01:01:36 2026 GMT
Not After : Jun 14 01:01:36 2026 GMT
Subject: CN=fc4823f5f0e96f052eb179472d3864fa09e8fa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:61:c7:a6:64:a0:16:be:bc:65:8f:78:44:
3f:f0:e3:eb:c7:ed:04:2b:98:27:49:f5:c6:46:49:
cd:aa:5b:45:bd:06:23:45:65:a6:7b:f1:90:ba:ea:
cd:31:f8:03:fd:a2:10:4c:2b:d4:77:48:a5:58:8d:
9a:9c:fe:20:cf:0c:80:a3:0c:8d:19:b8:8b:a8:7c:
05:f5:41:8e:45:50:6d:a2:f7:2a:15:e6:3b:d8:72:
54:02:da:87:cf:d9:ad:cb:81:d4:83:f4:03:d1:2f:
80:08:4c:d5:41:e6:79:2c:7c:c1:fc:47:17:8c:49:
d2:83:ba:7c:60:35:ba:cd:68:9d:38:a3:b1:dd:e1:
70:e5:d2:53:44:20:34:14:93:fa:c8:fe:51:d8:6f:
cc:03:60:00:32:36:c7:d9:5c:6b:57:33:b7:a1:74:
95:1a:25:0a:d8:d8:d5:7e:4e:e5:18:cc:b4:80:79:
ca:f0:84:87:7d:09:74:47:c5:9e:3f:e4:78:76:a4:
41:7d:c1:93:6c:65:6d:16:e4:3c:a0:77:1e:b0:53:
4b:9b:40:b3:8c:a9:1b:fd:c9:23:36:18:2d:04:52:
80:90:7f:d1:43:86:ec:8c:6b:db:42:c9:ef:90:fe:
18:79:5b:8c:1b:e5:a0:a3:81:f3:dd:fe:52:30:94:
31:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:48:23:F5:F0:E9:6F:05:2E:B1:79:47:2D:38:64:FA:09:E8:FA:7F
X509v3 Authority Key Identifier:
keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:45:aa:33:dc:25:4f:56:63:bf:9d:cb:5b:e9:51:28:e2:b0:
b5:c8:a0:02:38:d7:1d:3e:23:9e:a7:af:7a:5d:9c:58:d1:01:
27:68:f2:29:01:38:34:63:dc:45:24:3b:36:1f:c0:9e:77:29:
6f:0f:ac:d6:57:64:c4:4d:d5:4c:b8:e7:65:cb:ae:70:55:ad:
e3:8b:90:ee:95:44:db:a3:85:69:46:25:1f:70:22:d5:9d:af:
3a:15:2f:80:72:1a:14:62:96:e5:8e:2a:b3:fb:07:85:a3:a7:
9e:ee:f9:1f:bf:54:3e:7b:81:e2:2e:ca:5a:3a:fc:54:4f:30:
79:17:41:27:c0:32:e0:9c:58:6b:ed:46:48:3f:35:a9:26:3d:
52:a7:7e:9c:91:8d:f8:1c:77:62:1a:51:2c:4c:9a:78:83:f6:
f6:c0:7b:be:40:90:15:84:9d:1c:43:9b:3b:bb:ce:82:3f:b5:
65:8c:3e:15:ce:f3:b9:7e:27:4d:ab:9b:ce:66:f8:91:ce:77:
a9:62:0c:0c:ab:3b:8a:04:1a:67:2a:39:36:06:af:ef:08:dc:
c2:37:9e:9a:b6:6f:ec:9b:8e:01:be:28:e0:39:a1:4a:53:18:
6f:cf:0a:67:95:e3:1c:fe:09:98:0d:ae:33:bf:66:67:69:36:
cb:4a:71:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:47 2026 by rpki-client