Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
File: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft (raw, json)
Hash identifier: tEC63I6huVgHxN+tjXzm+CuFLvgcrnmBYxRKaLmmHWY=
Subject key identifier: D4:C4:B4:17:BF:46:7D:D8:DF:A6:48:6C:F3:89:3F:48:2A:C1:84:A7
Authority key identifier: 0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
Certificate issuer: /CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Certificate serial: 019D382E833683B02576533CA0513257738A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
Manifest number: 0D9A
Signing time: Sun 29 Mar 2026 06:01:05 +0000
Manifest this update: Sun 29 Mar 2026 06:01:05 +0000
Manifest next update: Mon 30 Mar 2026 06:01:05 +0000
Files and hashes: 1: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl (hash: AelOw3y99S7BhKmJfygUkMdg93W0mrF+gaBFyaupxM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:83:36:83:b0:25:76:53:3c:a0:51:32:57:73:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Validity
Not Before: Mar 29 06:01:05 2026 GMT
Not After : Mar 30 06:01:05 2026 GMT
Subject: CN=d4c4b417bf467dd8dfa6486cf3893f482ac184a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cf:9c:53:30:c2:fa:a4:2a:3a:01:6b:2e:59:
7c:44:97:2a:58:f8:00:db:6b:75:88:11:f1:93:ef:
be:cd:94:bb:0d:0b:26:85:96:75:b8:a9:c2:12:fa:
68:40:dc:9d:11:f2:dd:2d:cd:c0:19:b2:1d:85:94:
6a:b4:8a:9e:fd:cd:a8:e1:61:97:61:ce:dd:65:ce:
9a:7f:c3:78:17:19:83:04:f4:86:f9:7a:6a:83:f8:
ef:0f:9d:6f:37:07:2e:23:28:6e:bb:3f:d1:c5:09:
9c:a8:d0:65:05:d6:3e:fc:57:54:1b:ca:7d:10:bb:
45:37:09:17:6c:44:ca:db:d5:a2:6c:fe:53:d9:a1:
3c:b2:f0:d7:5d:a4:11:d4:64:c5:fa:5d:39:50:99:
86:82:16:55:85:49:86:70:c8:7e:a0:28:71:93:5f:
cb:73:1a:9c:d6:bd:e3:6e:38:ee:79:25:8f:ea:62:
b3:a2:6d:da:b4:7c:6b:03:4e:61:49:07:0b:ea:80:
df:fa:4b:a4:bb:14:d1:4d:89:9b:c0:7d:8c:e0:01:
d7:4e:6e:3d:e6:58:51:75:a7:75:82:a9:11:e9:bf:
5d:9e:ea:bc:6a:f0:39:42:69:8e:1c:90:07:3c:a6:
89:10:c1:24:94:02:9f:91:72:d4:e9:c7:f9:8a:1a:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C4:B4:17:BF:46:7D:D8:DF:A6:48:6C:F3:89:3F:48:2A:C1:84:A7
X509v3 Authority Key Identifier:
keyid:0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bd:30:50:c9:6b:e8:6f:bc:1f:06:2c:af:91:0b:63:24:be:
4d:4a:b9:03:6d:44:62:a8:59:aa:34:75:68:5c:b9:88:04:fe:
6b:6e:07:4e:7f:b4:08:f6:b9:31:b6:f0:46:57:d8:95:21:6d:
fc:44:00:c3:a5:fe:e8:b9:f1:ed:6f:9c:11:28:bd:37:78:a7:
60:84:1f:86:59:52:20:77:17:66:59:9b:77:73:ef:33:a6:8c:
73:cf:38:f4:06:cc:9e:65:12:e5:ed:99:ff:10:0f:05:19:ac:
4b:aa:41:74:ac:3d:9b:5a:fe:5c:ca:17:3f:be:58:ee:89:44:
b4:53:e7:14:03:d7:39:df:dd:46:cb:5f:48:80:7b:4c:ef:a7:
08:9f:6a:0b:63:96:e1:ca:ba:e4:06:67:6d:c3:c3:c5:70:b0:
a3:cb:5e:76:fb:d0:1e:53:f0:ca:72:27:80:e6:fa:89:35:d5:
32:ce:68:0a:72:19:60:ca:4f:1a:6f:59:5d:93:a9:6b:37:c3:
52:0b:39:25:4c:89:6f:78:c3:04:70:28:e6:ec:65:7b:d6:20:
8a:f8:72:11:df:fb:a1:c2:bf:48:bc:1e:ab:12:af:70:60:fd:
09:f0:76:0e:7a:c6:98:ea:0e:2c:27:40:0e:2a:45:68:45:19:
04:30:3f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:44 2026 by rpki-client