Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
File: DcHMqlhPs5FOeS_VOQ47otMDM4w.mft (raw, json)
Hash identifier: z5fmMe65h5+eOBI0qNJpxue/aQ1tcVw/9dFwJVF9oqo=
Subject key identifier: 30:49:DA:72:73:6A:28:A2:11:90:7B:03:E9:E1:A8:D3:78:52:D1:22
Authority key identifier: 0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
Certificate issuer: /CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Certificate serial: 019D37C0626CFCBEB615271BEA3AA433A563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
Manifest number: 1254
Signing time: Sun 29 Mar 2026 04:00:48 +0000
Manifest this update: Sun 29 Mar 2026 04:00:48 +0000
Manifest next update: Mon 30 Mar 2026 04:00:48 +0000
Files and hashes: 1: DcHMqlhPs5FOeS_VOQ47otMDM4w.crl (hash: Idjih6hFP3GlPMoOmPQX1+Gj2gyHCnFlqvy+nVEd4Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:62:6c:fc:be:b6:15:27:1b:ea:3a:a4:33:a5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Validity
Not Before: Mar 29 04:00:48 2026 GMT
Not After : Mar 30 04:00:48 2026 GMT
Subject: CN=3049da72736a28a211907b03e9e1a8d37852d122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:14:45:ed:a2:a2:57:29:83:02:56:f8:6a:
e4:03:c2:3e:e6:3a:78:0e:03:41:db:d1:a2:8d:56:
25:b4:0a:d9:7f:3f:f0:d7:ef:77:e6:c9:57:5e:30:
b4:91:16:50:79:8e:96:d7:56:43:e0:27:ee:34:a3:
92:4b:4d:6b:98:c4:a3:12:d9:72:99:62:29:17:e1:
a3:59:97:d0:14:18:69:3f:df:b4:15:b5:2a:d1:6b:
67:78:d5:a1:bd:9a:6f:98:80:79:70:4a:91:36:96:
10:21:41:b4:f2:86:b9:30:11:2d:e5:bf:6d:c9:29:
59:04:f1:9d:30:b4:aa:bf:e5:1d:3f:f3:00:dd:0e:
e8:c5:58:fe:7b:95:94:58:fc:85:d3:7c:44:cc:2e:
2e:2e:5c:f4:a0:9b:f7:1a:92:ea:b1:48:18:ae:1f:
25:33:dd:cb:c4:69:ac:03:3e:98:db:4f:6c:2c:01:
91:ec:ae:7a:5b:7a:39:76:fc:d3:e2:01:2a:31:91:
58:a9:be:dd:e6:a9:3f:f7:27:18:42:70:d4:42:22:
f7:66:a3:ad:7e:76:c5:21:4a:6d:7d:d7:b5:1b:26:
ea:70:a5:67:4b:5c:b0:52:3d:7d:bd:9b:d0:1a:1c:
78:f4:fb:63:e4:49:66:df:b9:7b:34:ed:1d:e6:d6:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:49:DA:72:73:6A:28:A2:11:90:7B:03:E9:E1:A8:D3:78:52:D1:22
X509v3 Authority Key Identifier:
keyid:0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:48:e8:a4:28:4f:0a:87:75:f5:22:0d:89:4f:d6:b3:7d:00:
e3:90:ea:3a:d5:f4:b6:e0:10:ce:a9:d7:c0:f3:e9:7b:09:42:
d7:a9:e6:a7:cd:af:6e:e3:7b:94:2b:ea:a5:ef:8c:ff:f7:16:
54:cd:9c:b5:53:96:83:fe:ba:8d:8d:62:04:98:a3:86:ed:17:
a1:5b:7a:42:23:6a:4e:03:03:f8:69:6a:e7:d6:ed:ce:0a:4b:
e9:33:07:17:26:44:6a:f7:85:a8:ae:8b:1c:f7:01:1f:b3:f8:
1e:18:12:38:a7:d5:59:11:01:b8:81:01:66:8a:14:b0:9b:79:
4e:12:7c:9e:05:97:21:fb:1c:a3:5d:3e:49:ae:0f:4a:f1:d4:
2e:c4:8c:86:82:ea:1b:a0:84:f2:c6:1f:bc:2d:03:cb:df:53:
3f:11:6a:80:d9:56:6a:54:4b:71:a0:33:06:3b:1b:8b:c7:cf:
e0:9c:a5:b4:ec:6c:39:37:44:58:93:00:2f:85:5e:ff:fa:99:
63:55:84:c0:eb:62:94:7b:81:6b:0b:69:bb:49:57:05:ed:62:
37:61:f2:bb:37:08:5e:85:aa:89:1f:41:3d:47:46:82:a7:66:
c0:21:af:62:93:74:1d:b8:d3:15:fe:ad:8e:22:fe:ad:56:79:
d7:a2:f6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:40 2026 by rpki-client