Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
File: dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft (raw, json)
Hash identifier: JmQqFmZo8fMl9RhpCxlsb5l3fK2vkD0xtXG4GaPmr8k=
Subject key identifier: C9:4B:DF:84:A6:EC:72:FC:AA:9A:30:04:52:18:64:CD:02:34:71:71
Authority key identifier: 74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
Certificate issuer: /CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Certificate serial: 019D38D3A9503E1E5763A1720197288D5BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
Manifest number: 1066
Signing time: Sun 29 Mar 2026 09:01:28 +0000
Manifest this update: Sun 29 Mar 2026 09:01:28 +0000
Manifest next update: Mon 30 Mar 2026 09:01:28 +0000
Files and hashes: 1: dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl (hash: ke4PcFPF/RzEBC4UiT5TXkfl9jyZUP+vlLNKeqCDExA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a9:50:3e:1e:57:63:a1:72:01:97:28:8d:5b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Validity
Not Before: Mar 29 09:01:28 2026 GMT
Not After : Mar 30 09:01:28 2026 GMT
Subject: CN=c94bdf84a6ec72fcaa9a3004521864cd02347171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6f:f6:34:82:eb:26:f2:2d:9d:b8:4f:00:0a:
8d:59:56:31:69:72:f0:cf:b2:9a:b7:a9:17:1e:1f:
7b:c9:02:df:9b:99:83:26:b9:65:47:a6:df:2f:0e:
b7:4f:b2:b9:76:a2:63:4a:59:a4:09:0a:6f:6d:55:
a8:f4:c4:94:a2:3e:1e:b6:58:fb:f5:64:1d:c7:ce:
c7:3f:2d:f2:8d:40:86:47:8f:93:a8:9e:e7:6c:2d:
ab:d3:79:cf:df:b7:92:9f:cb:54:10:31:e6:50:63:
bb:f6:11:5f:9d:c3:84:e6:bb:58:b5:36:77:fa:77:
d1:d0:c5:9c:b3:30:16:5b:eb:24:53:d8:89:f6:56:
05:8e:51:0e:89:a1:7c:f3:e6:c0:19:4c:e8:08:9a:
b1:9d:3a:1c:2f:46:4b:e7:93:7c:a1:3d:f1:4c:1c:
d0:04:66:b0:49:b7:26:54:ca:71:51:e6:41:e6:19:
9f:5d:0c:8e:b3:87:eb:85:36:f3:25:17:ba:92:ed:
1c:1d:00:b8:04:e3:42:66:9f:a1:fc:b9:d0:95:2e:
da:5f:40:68:bd:68:6e:f9:8a:2c:db:22:fc:2c:5c:
69:06:53:be:81:d6:58:29:61:2c:98:80:9c:a1:98:
f8:8a:fc:1a:d6:d6:42:61:a0:10:10:82:0c:dc:c6:
5e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4B:DF:84:A6:EC:72:FC:AA:9A:30:04:52:18:64:CD:02:34:71:71
X509v3 Authority Key Identifier:
keyid:74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:68:a6:9f:31:bd:a8:16:68:4c:f9:b0:5e:dc:07:b1:c6:9a:
9f:f4:f6:09:43:1c:35:8b:7b:b3:26:a8:fe:e5:29:89:8a:31:
a0:d7:cc:3d:83:9a:59:b2:d9:53:92:93:0e:bc:c7:24:11:8f:
78:6a:a2:de:c0:2b:aa:d0:d1:8c:0c:51:89:da:a6:0f:25:ea:
cd:49:7a:9d:22:64:56:ea:10:12:0c:c7:9c:1b:e1:0d:8a:20:
a5:3c:19:1c:c5:0f:2d:a9:53:ce:69:48:1a:86:2b:a2:d7:6e:
80:55:12:ea:58:9f:c8:e8:ac:ac:21:89:e2:2e:da:32:49:f1:
99:18:6e:26:3d:fc:f9:d0:a2:b3:79:ba:61:8e:f3:63:55:01:
56:47:f4:11:7b:b9:a1:0f:b5:31:ce:20:15:6f:e1:75:f8:10:
8d:74:9f:f8:d3:0c:3b:ea:0b:94:bb:8c:32:f7:6e:5c:67:4a:
69:b2:18:93:a6:b5:51:61:2f:4e:6f:c1:d2:43:63:0d:25:34:
a9:1c:4f:96:80:e2:5a:04:7c:d1:a5:5c:28:f7:b9:88:84:f1:
90:54:0f:d3:5d:3b:b3:f8:94:78:04:c4:4f:4e:82:01:7b:98:
4d:30:9d:5e:de:b2:0b:3f:ed:b5:04:17:5c:9b:56:be:8f:9e:
0a:fd:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:45 2026 by rpki-client