Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File: DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier: FKKljztlkD5U8PsvcZknICgrt6UJQw1psr3lsvh0B6A=
Subject key identifier: 3B:D7:EF:29:DC:D8:86:1E:0F:C6:3D:40:28:57:B1:E1:58:78:C5:5D
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer: /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial: 01A13FA74C53E4A461F7171566076890CEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number: 0886
Signing time: Thu 15 Oct 2026 13:01:30 +0000
Manifest this update: Thu 15 Oct 2026 13:01:30 +0000
Manifest next update: Fri 16 Oct 2026 13:01:30 +0000
Files and hashes: 1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: y0j3nYdNWFWrY91Sd0f6YU+V+hwg/VxKT0GSF/WrOEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:4c:53:e4:a4:61:f7:17:15:66:07:68:90:ce:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Validity
Not Before: Oct 15 13:01:30 2026 GMT
Not After : Oct 16 13:01:30 2026 GMT
Subject: CN=3bd7ef29dcd8861e0fc63d402857b1e15878c55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:6d:8c:21:fc:92:24:08:01:1a:15:fd:53:
e4:a5:89:6d:36:b2:62:df:67:a8:6d:ed:c7:cc:2e:
82:65:72:c3:70:ed:5a:4f:32:a3:06:a6:15:33:a1:
ab:2d:46:0e:6c:68:5b:c0:38:2b:87:84:7f:b3:85:
63:42:55:69:2b:8c:9e:13:37:70:77:5d:15:20:37:
8e:8f:70:1a:51:a1:90:57:d0:4b:16:42:1c:b6:6e:
70:e5:11:a0:ef:95:c9:6e:85:2d:c3:a7:73:58:16:
d9:1d:fe:8c:47:bf:06:d5:c7:b6:65:2f:e2:8b:1a:
00:62:6b:d3:59:41:8a:f3:9c:10:fd:05:3e:7b:5f:
4e:6c:0e:c3:32:13:64:86:14:b0:fb:23:44:d8:d7:
e9:d8:5a:72:8f:ce:4d:00:46:98:39:ce:1a:56:04:
bd:c5:6f:b5:72:2e:59:91:e5:70:8b:26:1f:d0:c8:
4b:1b:78:b9:03:e9:8b:f8:a8:59:1f:16:f9:d8:8f:
93:af:b2:bb:97:f3:06:36:c1:00:a1:13:0b:54:5c:
26:1d:c7:c8:ff:fe:03:79:f1:84:e6:ce:04:39:24:
02:11:de:0e:b7:9c:0c:0b:79:66:76:38:89:81:c7:
25:d6:34:47:2f:aa:92:27:77:91:8a:8d:8b:9b:48:
aa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D7:EF:29:DC:D8:86:1E:0F:C6:3D:40:28:57:B1:E1:58:78:C5:5D
X509v3 Authority Key Identifier:
keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:69:c8:60:ce:4d:62:1e:e5:85:17:4a:4a:dc:cd:39:91:de:
a6:74:4b:36:e3:f5:31:a7:d7:38:b5:e0:86:22:b4:36:df:2d:
1e:1a:cb:b8:5c:8d:79:87:0d:77:12:5f:42:cd:b0:4e:0d:aa:
97:6c:66:bd:b2:7c:3e:f3:ec:90:be:63:a7:c2:fd:2a:5a:9d:
d7:84:59:51:f6:f8:29:10:b3:19:c4:f3:ff:66:16:ea:b7:fb:
8b:af:e7:86:66:49:08:18:ee:4c:39:56:d8:71:24:af:af:cf:
b6:9b:91:19:8f:60:c0:0d:07:1d:0b:8a:67:3b:6d:66:37:52:
63:a3:0c:8e:a4:9e:41:13:16:b8:a9:fc:e0:c6:a8:7d:ee:d6:
3c:3f:e9:28:a7:83:72:8f:5d:3e:6d:3e:8c:ad:90:7b:82:50:
8c:64:bf:bb:13:d5:fc:c3:5c:ca:78:54:4c:09:f9:27:5e:fe:
0d:d2:b1:a2:af:e2:cb:cc:c7:c8:65:eb:9d:75:8c:97:a9:82:
13:02:38:ed:77:70:32:74:79:82:fb:b3:a3:4b:ee:fa:9d:36:
5f:06:c5:27:13:9a:01:b3:3c:41:f0:90:29:59:69:61:ed:7d:
c7:80:16:3d:dc:3f:7d:e1:3f:3f:4e:89:41:7b:f9:cf:1f:df:
fa:80:e3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:14:32 2026 by rpki-client