Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft
File: DcGyhbbH8r8EyZjeiStDbxDTTcA.mft (raw, json)
Hash identifier: tELB11QqP6oiOA0yu4ALNK/LtvCdhYOhYW1SAX5mbc4=
Subject key identifier: A5:59:E7:0C:62:65:67:93:51:F7:71:AC:A9:EF:04:40:2C:58:95:A1
Authority key identifier: 0D:C1:B2:85:B6:C7:F2:BF:04:C9:98:DE:89:2B:43:6F:10:D3:4D:C0
Certificate issuer: /CN=0dc1b285b6c7f2bf04c998de892b436f10d34dc0
Certificate serial: 019D371BC58C7F2BEA464F83DA6128AF5AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft
Manifest number: 01C7
Signing time: Sun 29 Mar 2026 01:01:00 +0000
Manifest this update: Sun 29 Mar 2026 01:01:00 +0000
Manifest next update: Mon 30 Mar 2026 01:01:00 +0000
Files and hashes: 1: DcGyhbbH8r8EyZjeiStDbxDTTcA.crl (hash: QPVC6K6poFRRhSen1Ur5UHCZQfBKucwnimoZmJ0XRvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:c5:8c:7f:2b:ea:46:4f:83:da:61:28:af:5a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc1b285b6c7f2bf04c998de892b436f10d34dc0
Validity
Not Before: Mar 29 01:01:00 2026 GMT
Not After : Mar 30 01:01:00 2026 GMT
Subject: CN=a559e70c6265679351f771aca9ef04402c5895a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:51:1d:44:52:d7:88:21:8e:12:b3:41:7b:
fb:10:ce:f5:ab:10:f7:bb:c8:d5:3d:f9:fd:5d:94:
b3:e2:e0:c8:fd:ac:89:51:68:6d:09:bc:79:9a:cb:
52:91:39:36:96:06:a2:b7:a1:83:93:34:b7:81:b4:
b9:10:11:56:e5:82:99:be:0f:21:19:ca:88:97:89:
5c:4d:49:c2:af:3c:d2:e9:55:8f:72:c6:28:7b:ff:
92:ef:c7:33:50:1c:f5:51:98:69:30:2c:a2:93:f9:
f3:a8:fc:bc:e7:9d:94:1e:9d:9f:4b:fe:27:43:4f:
2e:29:3b:c0:1d:ec:1a:1d:2f:12:76:f0:c5:ab:32:
73:83:61:8a:6f:da:75:4d:e3:f8:5b:f5:70:75:74:
11:4e:82:c4:75:61:35:c7:f4:6a:1d:c7:3f:02:c5:
4e:90:bd:49:3d:96:8a:92:9a:c6:fb:bb:18:e7:ab:
30:ee:cc:54:a9:28:0f:26:61:34:b0:09:e8:1e:8c:
14:20:c0:8c:4e:5f:c5:e9:fd:69:12:c6:b9:a9:f4:
2c:cd:fc:dd:48:c7:9a:5f:04:66:06:8a:0a:bf:49:
29:2b:d6:ee:8b:a8:76:05:ba:8b:25:f6:b7:b9:3d:
51:fd:5e:af:d5:66:16:2e:74:ab:1b:08:a6:cb:3f:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:59:E7:0C:62:65:67:93:51:F7:71:AC:A9:EF:04:40:2C:58:95:A1
X509v3 Authority Key Identifier:
keyid:0D:C1:B2:85:B6:C7:F2:BF:04:C9:98:DE:89:2B:43:6F:10:D3:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2f:eb:f5:2d:b6:d3:94:f3:21:13:37:5f:32:46:62:50:6f:
e1:5a:e0:b4:e6:37:6a:a0:b4:7b:42:19:1b:b2:5f:fe:4a:ae:
58:06:b0:1c:db:a8:5d:7b:22:52:fb:5d:02:42:5f:81:55:ba:
34:49:3b:14:1b:2d:0c:2c:66:ee:67:6f:9d:d4:d0:bf:01:f7:
af:88:a4:58:9f:27:aa:56:d1:ab:00:3d:06:92:16:1a:3f:9d:
1b:f8:1f:9f:ca:1c:24:86:a9:ab:1f:2f:a0:dd:ce:f4:29:a4:
75:65:85:f6:92:12:21:15:db:1e:9e:96:fe:11:94:3f:6d:fb:
1b:6d:83:ae:58:8e:37:3b:08:be:22:d3:99:01:31:8d:f9:a9:
9a:ae:70:8c:d8:f0:ae:6c:c1:8b:9f:4b:1a:c6:4f:48:25:a7:
2f:9c:c7:4e:26:b9:48:3c:38:35:18:f7:59:df:e3:9a:d4:92:
c3:0d:54:dc:be:91:7d:c6:16:aa:64:e9:cb:a6:14:6a:7e:e8:
b3:f4:5a:b7:06:0f:96:30:5a:df:24:c9:09:9e:b2:c9:a0:d1:
79:29:16:ec:44:8d:55:a9:f0:96:2c:47:cf:f8:d6:62:fa:90:
d4:20:b1:34:7b:ef:55:89:64:71:17:06:6c:6c:b1:c0:de:87:
00:c3:2a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:19 2026 by rpki-client