Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
File: DTr3NGYY2GMOAUanZREkQ-DCyP8.mft (raw, json)
Hash identifier: VJF8Twk8SoeqTMfQsWon2sMDbYLMDfZ5rqZT0IQtViU=
Subject key identifier: B4:E8:88:82:76:50:A5:3B:8D:04:9C:29:F7:AC:2D:11:F3:9B:C7:D7
Authority key identifier: 0D:3A:F7:34:66:18:D8:63:0E:01:46:A7:65:11:24:43:E0:C2:C8:FF
Certificate issuer: /CN=0d3af7346618d8630e0146a765112443e0c2c8ff
Certificate serial: 01A00100FA7AE8F6ACE506D305B697A9201F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
Manifest number: 0A93
Signing time: Fri 14 Aug 2026 16:00:36 +0000
Manifest this update: Fri 14 Aug 2026 16:00:36 +0000
Manifest next update: Sat 15 Aug 2026 16:00:36 +0000
Files and hashes: 1: DTr3NGYY2GMOAUanZREkQ-DCyP8.crl (hash: XXH3DCmJl039F/RgDOYyw7cdpXR5QZzOFZ9eTLKyGU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:fa:7a:e8:f6:ac:e5:06:d3:05:b6:97:a9:20:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3af7346618d8630e0146a765112443e0c2c8ff
Validity
Not Before: Aug 14 16:00:36 2026 GMT
Not After : Aug 15 16:00:36 2026 GMT
Subject: CN=b4e888827650a53b8d049c29f7ac2d11f39bc7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f7:3c:ee:ad:83:54:52:7e:f5:e0:7c:6a:02:
34:60:74:d8:5d:ce:19:81:ac:d7:7e:6b:55:33:5b:
85:cc:46:e7:45:31:f7:fc:d0:9c:76:50:e4:5f:e2:
aa:e9:82:38:dd:3f:25:87:66:ed:98:3a:75:12:03:
f1:ab:26:51:63:09:5b:1e:c3:a2:00:84:5f:99:8e:
8e:9c:a3:b1:06:9e:79:b3:4c:f0:88:ea:44:a8:d7:
fb:60:c5:28:33:85:a2:65:d3:77:c2:04:40:5a:7b:
9a:ee:b6:ad:00:ff:f0:4d:e5:3e:53:af:83:cb:2c:
13:18:d4:58:45:0a:4f:41:45:89:70:05:a5:e1:b7:
c2:9e:37:f8:d6:f9:bc:89:7b:40:6a:1a:b3:d2:7e:
b0:f8:e1:3e:e0:90:e8:d6:0e:03:19:73:98:1b:81:
d7:85:6f:5e:3d:0b:ff:b2:a6:a3:47:2b:66:53:2e:
5d:12:d2:23:b1:d0:7c:a2:1c:03:73:bf:45:8c:fb:
7c:87:0d:a3:7b:9d:70:ab:d1:78:23:27:bd:f1:87:
0e:79:b4:b3:5f:29:c9:5a:a6:0b:43:9f:f8:ee:b7:
4b:2b:3d:89:81:83:1a:17:94:3c:2a:3d:d8:64:aa:
bb:c6:ad:61:f7:b7:a4:28:06:22:bf:c5:46:5d:34:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E8:88:82:76:50:A5:3B:8D:04:9C:29:F7:AC:2D:11:F3:9B:C7:D7
X509v3 Authority Key Identifier:
keyid:0D:3A:F7:34:66:18:D8:63:0E:01:46:A7:65:11:24:43:E0:C2:C8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:39:32:f4:27:b5:56:e4:73:43:c1:32:a8:09:b2:6c:b5:e4:
64:8f:91:ef:f9:95:e2:6e:44:52:dd:df:3f:02:c2:21:d6:b9:
ae:a3:57:58:4e:70:d9:90:04:2a:f2:4f:83:7c:11:68:9a:07:
16:84:64:bf:38:af:d5:d7:13:ea:66:a0:06:a8:9d:e7:10:93:
af:15:48:e7:e3:e2:48:e3:0f:27:69:f7:ab:92:68:26:00:f3:
79:b9:c1:cb:44:3e:b4:51:97:90:86:07:ae:c4:28:45:24:69:
ff:c7:6a:a0:a8:75:b9:e6:72:df:b8:4c:2e:b6:a2:fc:68:50:
56:d3:16:24:16:ee:ef:86:52:f6:22:d6:35:38:12:c9:dc:56:
0d:ef:ca:ed:31:8c:dd:e2:2d:66:8b:b0:9c:e2:4d:67:0f:f8:
d7:2a:b4:ca:08:b0:cb:79:0d:41:7f:87:3b:56:84:0f:6b:71:
c5:24:4d:1d:e9:27:87:89:b2:8e:72:fe:87:a1:20:a6:99:06:
b8:4f:b8:27:b2:83:5f:3a:39:d4:bf:0b:d4:69:45:c2:8b:c1:
09:6b:62:44:e6:51:e9:7e:af:2a:bd:cb:f7:ab:5e:d3:9d:01:
5e:2b:eb:67:4a:c7:98:44:00:9e:10:59:aa:52:99:77:b2:a9:
bb:fc:64:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:19 2026 by rpki-client