Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
File: dPYRYnGtLREZYKLZYaqcFi-VgKY.mft (raw, json)
Hash identifier: znO9dywpAGxgABR4VRxR87D9DYQmh9pcpXwhkoMq2bU=
Subject key identifier: 53:04:B3:64:72:C5:99:FE:9A:15:7D:32:3B:1E:73:3A:28:4C:6B:82
Authority key identifier: 74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
Certificate issuer: /CN=74f6116271ad2d111960a2d961aa9c162f9580a6
Certificate serial: 019D3866492AA6847833F3589C4F8B53B433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
Manifest number: 1287
Signing time: Sun 29 Mar 2026 07:02:00 +0000
Manifest this update: Sun 29 Mar 2026 07:02:00 +0000
Manifest next update: Mon 30 Mar 2026 07:02:00 +0000
Files and hashes: 1: dPYRYnGtLREZYKLZYaqcFi-VgKY.crl (hash: +hjGKQ+/sA0eAxmDx8NUCpEZc0Ms7Xzt4dNLHjKNGW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:49:2a:a6:84:78:33:f3:58:9c:4f:8b:53:b4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f6116271ad2d111960a2d961aa9c162f9580a6
Validity
Not Before: Mar 29 07:02:00 2026 GMT
Not After : Mar 30 07:02:00 2026 GMT
Subject: CN=5304b36472c599fe9a157d323b1e733a284c6b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:c8:1c:4a:a2:e1:7c:28:7b:2b:de:54:a7:
9b:45:8a:83:01:51:2d:37:2d:55:15:14:96:b6:9c:
74:91:75:1a:e2:ad:45:a6:00:85:47:5f:b9:fe:3e:
17:51:36:9f:07:d8:f2:ea:85:ec:f5:c8:d7:e9:d3:
48:29:53:7a:2a:72:86:a6:c3:0a:35:19:ca:4c:8a:
84:6b:b7:0a:86:f3:2b:23:e7:81:2a:a2:db:d3:65:
11:89:4a:a7:a6:bd:3c:ce:63:1b:c7:de:fb:8c:42:
cc:74:98:16:35:3b:36:2d:d4:a9:ce:c5:ff:2b:3f:
7a:b1:0e:91:08:8c:84:c9:05:f9:b5:3e:64:4c:bb:
eb:2d:c7:80:35:5d:22:8b:62:a6:a2:47:45:34:46:
06:52:d6:5a:22:d1:a8:dd:d6:7b:c1:27:f3:98:1d:
24:e3:8d:2a:11:1a:d0:c8:fe:58:45:66:fd:05:15:
20:ba:a8:f6:4f:6d:18:ca:3a:e0:06:6e:c3:56:00:
97:fa:be:f4:37:a7:b7:f9:a2:4c:0a:09:90:18:24:
c9:61:2f:30:d8:01:53:cf:33:84:32:6e:59:17:89:
ca:c6:1a:50:4b:89:b5:bd:4a:1b:a5:71:66:ba:ac:
80:42:36:2b:a9:47:8a:1e:6f:74:36:67:bf:8c:11:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:04:B3:64:72:C5:99:FE:9A:15:7D:32:3B:1E:73:3A:28:4C:6B:82
X509v3 Authority Key Identifier:
keyid:74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ec:c9:ec:ac:27:89:d5:81:6a:d3:67:f0:97:2e:7c:63:66:
ce:4e:e7:c7:db:12:e2:28:59:7f:6f:19:a6:cb:e9:02:cb:4b:
0f:76:71:f5:3f:39:03:46:8e:26:ae:a9:c7:a2:29:79:ec:ad:
c8:2f:66:04:0e:17:fa:57:1d:90:31:72:29:7f:82:ee:ef:90:
91:6d:03:1e:e1:4a:9c:4d:ea:13:20:32:a0:4f:71:ab:d6:3c:
49:5e:6f:88:91:ac:8c:23:4a:af:47:ab:2e:46:e6:a0:7d:30:
4d:0e:fa:97:3e:2a:0f:b5:b6:29:5a:04:43:3d:6e:e8:7e:1c:
a1:eb:00:1d:a7:dc:f7:44:1d:b8:fc:93:fa:1c:5b:ba:bb:d4:
f5:c2:dc:9b:7f:dc:70:00:2c:cf:2c:05:d8:de:03:61:00:a6:
42:14:85:e8:fa:18:31:89:db:c5:00:ca:d6:0c:e5:6a:d1:e3:
76:0d:08:cd:32:91:66:5e:ab:33:6e:a8:14:86:fd:92:d4:70:
e9:3f:29:a2:88:a4:02:77:50:b3:72:28:d7:f0:80:f3:64:9f:
54:d3:07:6d:25:37:ed:67:35:ec:37:0a:e9:82:cc:20:9d:cc:
fe:18:08:02:a8:3f:42:37:8a:19:a9:16:72:64:36:70:0e:99:
11:e4:05:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:19 2026 by rpki-client