Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
File: DcHMqlhPs5FOeS_VOQ47otMDM4w.mft (raw, json)
Hash identifier: JApbK3lYqvQisWqF138v7t93kSw2a+s7Irwc7Nfo3ok=
Subject key identifier: BD:20:F4:CE:C3:CF:05:85:0F:AD:41:FB:FB:C2:96:93:BD:5F:04:C9
Authority key identifier: 0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
Certificate issuer: /CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Certificate serial: 01A0005CA911FE2400939A335E7BA47CA082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
Manifest number: 13C5
Signing time: Fri 14 Aug 2026 13:01:07 +0000
Manifest this update: Fri 14 Aug 2026 13:01:07 +0000
Manifest next update: Sat 15 Aug 2026 13:01:07 +0000
Files and hashes: 1: DcHMqlhPs5FOeS_VOQ47otMDM4w.crl (hash: NX/rfd7xZTDtqSMUV3UMZK4zfWIgMi1eO9gLASajYpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:a9:11:fe:24:00:93:9a:33:5e:7b:a4:7c:a0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Validity
Not Before: Aug 14 13:01:07 2026 GMT
Not After : Aug 15 13:01:07 2026 GMT
Subject: CN=bd20f4cec3cf05850fad41fbfbc29693bd5f04c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:b7:54:f6:31:a2:b4:47:a7:a7:0c:16:1e:
c9:ea:57:94:b9:4a:3c:70:d5:1f:33:7f:3d:db:c9:
e0:d0:d9:c0:03:69:5c:7e:2b:2a:42:b4:cd:a6:a5:
f2:30:bb:f5:14:91:19:99:19:1e:b4:a3:6b:05:0f:
43:e5:59:8c:18:7e:2b:1d:76:72:a8:48:42:b1:f1:
ec:9a:15:19:2c:98:84:3a:05:5a:e4:4e:8d:53:f6:
fb:64:32:b6:89:17:be:33:cd:bc:33:6d:38:cb:60:
cf:2d:28:59:f7:cd:6e:28:ba:92:b2:5c:65:a7:22:
ad:f1:a8:23:3f:9c:a4:03:c4:0c:00:20:33:08:28:
be:54:47:ea:b9:2c:49:b8:4a:24:69:cd:d2:21:56:
d1:8b:c0:af:ed:9b:7e:f1:26:8d:be:a5:22:17:28:
75:14:02:9b:8d:28:1b:46:2b:bd:d1:d8:99:79:5f:
43:b8:d9:8d:a4:93:48:d0:18:a1:a1:40:f5:85:4c:
20:f8:7a:3b:50:ca:83:c9:d4:d0:a9:c6:2b:85:4b:
53:5d:b3:4b:ed:fb:cf:37:e1:d7:b9:ac:dd:0e:9a:
cd:ca:d8:19:b1:10:fd:13:f0:ce:1f:3e:e6:f2:f2:
69:ff:09:ad:f1:a7:b4:2d:52:ff:c2:bf:d8:48:6a:
f8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:20:F4:CE:C3:CF:05:85:0F:AD:41:FB:FB:C2:96:93:BD:5F:04:C9
X509v3 Authority Key Identifier:
keyid:0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e2:74:dc:62:be:b1:ab:b8:05:21:ee:0c:97:bf:80:45:22:
59:cb:de:30:fc:c1:1b:2b:ea:52:7a:81:73:23:0e:18:b6:23:
40:4a:ed:53:35:64:8b:af:c2:63:c4:fc:43:ac:38:05:2b:cb:
00:11:e8:39:0b:ff:2c:a6:03:03:d9:6b:de:0a:1c:8d:bd:84:
37:c3:1f:97:4f:4b:e4:7e:a4:51:ed:66:aa:15:3f:58:a9:83:
92:20:22:41:8e:fb:c8:e6:e1:41:c8:b3:a6:24:02:32:83:fc:
62:4f:e6:71:24:4b:4c:75:49:07:04:28:f9:4b:dc:43:c8:d2:
68:6e:05:36:f7:93:43:da:28:60:d9:00:4a:e8:c9:19:b7:bf:
c4:e1:f2:e0:2b:73:73:3f:c6:ac:3e:76:2b:61:b9:5a:4b:a4:
9f:b7:d2:9f:b7:3f:6a:ad:54:c1:6b:2e:21:a0:11:2e:f5:69:
c0:ba:af:b6:e8:f3:19:69:64:2e:88:fa:45:d5:cc:47:06:ff:
6f:cb:23:91:0a:4d:fa:1d:09:46:8f:08:25:43:42:e5:5b:cf:
b5:5c:08:78:1a:fe:a9:74:1c:14:ab:f2:f9:b0:9b:5f:a7:53:
2d:43:72:f5:7a:ae:e6:b4:83:64:b4:14:b4:7f:71:4f:50:24:
7f:b5:fb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:00 2026 by rpki-client