Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
File: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft (raw, json)
Hash identifier: 7K9EagBhO6N0Qvodln6SA53vFtfVHCHoYdsJzgTBun4=
Subject key identifier: 9B:CA:33:BF:BB:76:58:03:17:58:91:2F:0C:7B:2C:B0:DB:F6:7F:93
Authority key identifier: 0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33
Certificate issuer: /CN=0ccc36028d005810caba24614bd60731dd495033
Certificate serial: 019D39AEC4A75557AF398865B45611457B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
Manifest number: 0401
Signing time: Sun 29 Mar 2026 13:00:48 +0000
Manifest this update: Sun 29 Mar 2026 13:00:48 +0000
Manifest next update: Mon 30 Mar 2026 13:00:48 +0000
Files and hashes: 1: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl (hash: r6ljM1jJXrVjlRYRJvbojfZ6C08AlzZAPUVTga2fFE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:c4:a7:55:57:af:39:88:65:b4:56:11:45:7b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ccc36028d005810caba24614bd60731dd495033
Validity
Not Before: Mar 29 13:00:48 2026 GMT
Not After : Mar 30 13:00:48 2026 GMT
Subject: CN=9bca33bfbb7658031758912f0c7b2cb0dbf67f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f7:b7:9d:6c:9f:21:41:35:87:f8:70:1c:bb:
92:d9:11:d7:a8:f2:25:b5:6a:89:e8:ae:4b:98:fa:
93:31:25:ec:26:8c:89:9e:a6:77:27:6f:ee:47:26:
26:2d:7f:13:bd:ed:6e:83:70:6a:0c:17:a8:69:9e:
f0:72:fd:6a:48:c8:11:a6:ce:49:30:70:f9:20:4d:
c2:35:45:6e:e7:cf:51:8a:35:c7:89:6e:4f:6c:33:
bf:53:85:e8:44:d3:49:ea:b6:39:85:af:be:1a:9a:
9e:c8:6f:ff:65:54:26:a2:b6:f5:25:c9:44:cd:1f:
19:cd:74:04:46:d5:29:09:47:ba:9e:9b:01:71:d3:
d9:af:ba:74:0e:ad:51:e2:1c:45:a1:3f:4d:ac:b6:
96:22:7c:51:05:11:75:56:ce:c9:68:60:89:c6:ab:
fa:70:cd:19:28:e6:09:4d:3b:07:3e:64:96:bf:9d:
8a:c7:2d:bb:26:b5:24:a7:9c:ac:10:60:43:05:ed:
80:ca:37:c2:8a:b4:2e:78:59:86:8c:aa:2e:08:ef:
17:36:de:9c:c6:4a:01:7a:6b:67:71:4c:84:04:e0:
56:6e:26:c6:af:b1:25:07:66:1b:84:f2:38:83:1c:
e9:6f:e5:f1:23:d5:79:1b:5f:38:c2:01:1a:b0:19:
2f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CA:33:BF:BB:76:58:03:17:58:91:2F:0C:7B:2C:B0:DB:F6:7F:93
X509v3 Authority Key Identifier:
keyid:0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6c:1c:ac:0d:37:fd:fa:97:f6:16:05:10:2b:4c:d9:b6:34:
e0:3f:b0:58:48:56:21:77:8b:ca:0a:96:f6:f0:25:b5:66:70:
79:d1:40:67:4c:1e:bb:b0:75:88:ad:77:22:f5:ce:b0:96:4e:
98:34:b9:a0:98:08:1a:42:35:45:63:78:20:fe:a5:5b:88:07:
fb:af:3e:b3:25:fd:6f:f9:e2:b0:76:d1:6f:39:cb:d0:43:b9:
f7:e6:e5:45:9b:ab:37:07:73:b0:dd:7a:d8:12:b5:ab:40:74:
7f:21:69:68:a2:f9:e2:0e:ec:fe:23:a6:eb:81:7e:b0:5e:77:
67:6d:53:c5:f1:22:bb:e4:05:6a:88:1a:c4:69:43:d9:88:45:
35:eb:2d:12:75:d5:84:e7:26:8c:c5:85:d8:a0:72:87:ea:bd:
8a:4e:c3:e4:8f:2f:21:57:23:5e:a1:10:66:90:b7:d5:1b:be:
45:12:cd:b0:a2:1f:27:0a:c7:3e:7c:ef:31:3a:18:df:6b:1a:
fd:5b:1d:d7:9d:12:91:ab:1a:f0:90:2c:5e:99:27:bd:76:19:
52:2c:dc:78:88:a1:cf:1f:18:58:00:2e:f7:b0:34:12:91:71:
ff:8b:0c:03:ae:ee:10:39:0b:78:db:10:82:19:fb:63:d7:bb:
1d:c7:87:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:26 2026 by rpki-client