Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
File: 8DpbV31dnm0cX9O-1ADpacC-fDQ.mft (raw, json)
Hash identifier: I1m+oRvSyzbd86412IUoJxBSlLgybOYW6S6EKUccdRs=
Subject key identifier: DD:3C:8F:62:5C:90:8C:D8:A6:8B:4B:47:72:C7:2F:F7:24:67:DA:4D
Authority key identifier: F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
Certificate issuer: /CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Certificate serial: 019D394165FCA7F519994E4BFB00488A91DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 11:01:20 +0000
Manifest this update: Sun 29 Mar 2026 11:01:20 +0000
Manifest next update: Mon 30 Mar 2026 11:01:20 +0000
Files and hashes: 1: 8DpbV31dnm0cX9O-1ADpacC-fDQ.crl (hash: wCVGmGaxeO/IOArDaw2ee0aX9tP2tpjMpOp02RQa8/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:65:fc:a7:f5:19:99:4e:4b:fb:00:48:8a:91:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Validity
Not Before: Mar 29 11:01:20 2026 GMT
Not After : Mar 30 11:01:20 2026 GMT
Subject: CN=dd3c8f625c908cd8a68b4b4772c72ff72467da4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:bb:87:06:c2:de:ab:12:f6:56:68:6e:c3:
89:1e:a2:70:f2:17:ae:59:9b:bc:6d:c4:15:ba:7c:
ab:a7:e9:1e:5e:d7:36:db:65:47:4b:66:ba:3e:7c:
01:2a:f1:3b:bc:56:70:1d:15:e1:c3:ed:21:7f:66:
61:60:d7:e9:8a:a6:bb:78:cc:1d:36:fe:07:f8:43:
5f:02:46:c4:6a:9c:b9:3a:99:5f:d5:d1:af:54:c2:
e1:24:bd:47:8e:14:6a:70:d5:cc:97:59:7a:c7:b6:
64:64:1b:bd:49:40:32:60:df:c4:4c:75:ea:9a:c0:
82:07:04:71:aa:04:9a:7e:3c:e0:21:fe:62:35:67:
1d:a4:bb:ee:f7:25:b0:14:24:cc:f2:fc:44:99:ca:
ab:c0:b7:9f:80:e5:d7:5b:0e:27:f1:2e:2e:5b:0e:
a2:2d:a7:36:08:f1:57:8d:40:7c:87:08:a9:32:f3:
44:f9:22:03:87:fb:9a:71:ef:52:a3:24:86:55:f0:
71:28:74:84:87:b1:fb:fa:db:19:68:72:d9:b0:48:
91:cd:b1:3d:15:3b:a8:0c:89:c5:73:9a:41:97:b5:
e2:d5:f7:42:1b:b0:62:40:63:07:20:63:96:96:ba:
4c:77:b3:9f:f8:37:64:7b:5f:9f:a6:b4:e9:a6:a4:
8e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3C:8F:62:5C:90:8C:D8:A6:8B:4B:47:72:C7:2F:F7:24:67:DA:4D
X509v3 Authority Key Identifier:
keyid:F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:25:12:b6:4e:76:c1:6e:65:0b:e0:21:96:88:39:81:9c:53:
cb:e9:35:55:e7:09:d8:97:87:1a:41:9d:e2:0e:21:9b:90:05:
ea:57:2d:a1:9c:7a:78:be:53:10:ac:71:fb:26:ac:1a:53:57:
15:d6:b3:2e:60:93:a4:fa:a6:6b:9f:bd:eb:2a:32:45:7d:cf:
5e:e5:ec:c6:a4:7e:3e:83:10:85:9b:83:28:8b:1f:23:47:75:
47:af:b8:68:40:2d:29:8e:1c:cc:2c:35:81:8e:62:24:9b:ea:
5e:e9:1a:33:aa:e6:a7:8e:8f:c5:6c:73:3f:9b:32:72:fd:27:
98:83:b0:5a:c2:be:cf:d1:c7:da:0b:de:4e:8e:27:d3:d2:dc:
a4:0a:86:85:f5:55:16:c1:df:7b:0e:ae:69:da:99:c0:a4:12:
23:a7:e1:92:6d:f3:3a:58:00:72:f2:49:4a:c5:a2:2d:0e:16:
de:a7:f4:ec:0d:75:89:43:e6:c9:18:e6:e6:f9:9d:9d:a7:73:
3c:2f:c6:18:83:b3:18:07:70:c3:7d:d5:c8:63:39:fc:15:e0:
16:ae:1c:3a:52:12:19:d1:69:94:57:2c:83:ee:21:5a:b6:44:
c5:4a:e5:dd:ec:5f:3c:5e:86:55:04:87:ba:3e:e6:93:65:66:
ee:7b:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:59 2026 by rpki-client