Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
File: dQRxYHUyqMev1g1PMXqtxJDrogY.mft (raw, json)
Hash identifier: FlZh7D6EI17o/jMA6xLjwfYQLlWKcXeH/QH+N+QOnGM=
Subject key identifier: E2:3A:59:89:07:7D:BE:B5:8B:0E:00:A4:76:C0:6D:A1:C6:17:CD:03
Authority key identifier: 75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
Certificate issuer: /CN=750471607532a8c7afd60d4f317aadc490eba206
Certificate serial: 019D3865F2BC4423D14AAD69FF2B5A25ADCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:38 +0000
Manifest this update: Sun 29 Mar 2026 07:01:38 +0000
Manifest next update: Mon 30 Mar 2026 07:01:38 +0000
Files and hashes: 1: dQRxYHUyqMev1g1PMXqtxJDrogY.crl (hash: TLajNbp2R8R3c/t1yKoozJFGc4OY5NaOnXVipU7H8F0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f2:bc:44:23:d1:4a:ad:69:ff:2b:5a:25:ad:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750471607532a8c7afd60d4f317aadc490eba206
Validity
Not Before: Mar 29 07:01:38 2026 GMT
Not After : Mar 30 07:01:38 2026 GMT
Subject: CN=e23a5989077dbeb58b0e00a476c06da1c617cd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:93:5b:29:c8:d5:72:5e:37:e6:93:4a:1f:
5f:66:1b:08:f0:9a:d9:f9:27:9f:64:59:28:ca:f5:
60:43:73:9f:17:59:c5:ed:dc:b7:60:32:19:2e:f7:
d6:38:bf:85:b6:a3:32:c2:71:76:ea:1f:35:fa:26:
19:f4:a7:38:61:4d:91:60:33:a4:cf:b3:e4:89:7c:
00:ef:07:0c:57:58:33:cc:91:fe:f3:ef:95:f7:8b:
fc:fe:22:24:b7:59:bd:58:a0:84:d5:3d:cb:bf:06:
f1:54:3f:0f:dd:8f:32:3e:14:a0:03:b4:71:3d:25:
33:b3:94:2c:e2:28:7e:48:10:3a:67:37:84:97:81:
88:ae:7c:b1:36:f8:bd:81:f2:44:b9:26:a7:94:e7:
0f:83:01:8b:39:51:59:9b:ff:75:72:f2:8e:39:b4:
2a:e8:e8:fa:0f:61:2c:68:9e:4c:d1:44:56:bc:bf:
a3:50:34:29:bb:78:e8:10:ec:3e:4f:b1:9c:d8:55:
5d:ac:56:da:39:1b:1e:1d:06:94:80:0f:33:a5:45:
92:1d:73:03:a1:2d:cd:0d:6b:5a:1b:8a:03:35:8f:
04:08:54:68:75:6e:d3:0c:db:bf:b3:f8:ea:d9:9c:
6c:bf:0f:53:0e:8c:4a:a5:bc:40:37:1b:7f:e3:d1:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3A:59:89:07:7D:BE:B5:8B:0E:00:A4:76:C0:6D:A1:C6:17:CD:03
X509v3 Authority Key Identifier:
keyid:75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:82:66:94:76:6a:9a:72:f6:7f:8e:b9:e0:c3:0c:3f:d2:6e:
c7:f9:7d:87:33:49:e1:63:e4:a1:cb:47:37:ca:8a:aa:f5:75:
85:49:de:a7:86:42:ce:74:a2:2c:1b:3e:fb:44:eb:6e:f1:8a:
54:e7:11:dd:92:d7:dc:e2:0f:dd:2f:56:f3:79:a0:9a:51:7f:
e8:6c:d4:ed:f3:df:fa:44:b8:3b:7d:a6:bc:22:ee:75:ce:30:
10:a6:0f:05:2a:e2:7a:e3:77:e6:27:e8:da:49:ca:a5:0b:80:
ff:b6:2e:80:4d:25:e3:3d:0a:fe:26:fe:74:a6:ca:cb:83:0a:
28:87:76:56:42:e5:c2:ac:41:b4:74:01:fd:5a:82:ae:82:9d:
1e:ae:89:b2:f3:db:49:b9:0e:d1:1c:56:80:aa:a7:ba:c0:88:
c7:6a:2b:2a:60:01:b5:79:09:02:67:f1:6e:a5:97:57:b1:f6:
e7:3a:67:18:b0:53:b1:be:fb:7b:38:d7:8b:db:a4:c6:2e:84:
6e:72:44:58:a5:2a:e0:be:14:e3:34:c0:9e:74:ce:10:d5:00:
bb:09:9d:f2:41:d6:1c:b2:2f:31:89:5b:ec:d3:88:14:84:5a:
88:fe:c8:60:e1:16:04:df:e7:ff:68:08:a0:a0:af:56:23:2d:
0b:87:4b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:39 2026 by rpki-client