Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
File: dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft (raw, json)
Hash identifier: pyR8HAxXOSkcbGx1zsCyOkg76mA6ClTCogE2R6cN6b8=
Subject key identifier: 36:21:1E:A0:7A:F7:4A:10:87:7F:4D:6A:DF:12:3A:EF:3C:2A:1D:7C
Authority key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
Certificate issuer: /CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Certificate serial: 019D39AF030EAB397D5EC619E276C848312A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 13:01:04 +0000
Manifest this update: Sun 29 Mar 2026 13:01:04 +0000
Manifest next update: Mon 30 Mar 2026 13:01:04 +0000
Files and hashes: 1: dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl (hash: ZKKs7NuPVwGf9JsS1gfUHeYQa4jsrBUN/ZUV43i5NB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:03:0e:ab:39:7d:5e:c6:19:e2:76:c8:48:31:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Validity
Not Before: Mar 29 13:01:04 2026 GMT
Not After : Mar 30 13:01:04 2026 GMT
Subject: CN=36211ea07af74a10877f4d6adf123aef3c2a1d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:3a:e9:fe:5d:f2:0e:43:dc:53:d6:24:5c:
25:c1:38:b7:19:88:ba:a5:d3:86:e7:71:4d:12:27:
52:47:c3:c4:b7:ef:f4:0c:18:63:9c:31:8c:1a:d7:
97:0f:b8:af:56:60:ac:6d:cb:c9:3c:70:65:22:04:
b8:19:49:42:16:a9:7f:e3:17:77:e2:3a:78:70:a5:
35:28:12:2a:56:9d:25:6b:c2:7f:4e:14:ac:11:98:
2a:f2:f2:f6:70:fd:86:84:84:a3:e1:c1:4f:2b:10:
c6:3c:94:1f:cc:3f:ce:bf:e1:f2:a0:5a:7a:16:d7:
49:04:64:10:4b:36:f0:9a:ec:e5:d2:10:79:a5:14:
66:36:48:7c:a6:78:1e:d4:97:1a:f9:fc:a8:13:81:
42:62:c5:37:d8:22:a3:08:35:dd:ae:18:d0:d7:7c:
8a:3e:a6:50:a3:08:34:9d:56:a1:cc:44:6d:38:a8:
a4:9c:3e:05:e3:a0:dc:0d:fb:71:38:74:a0:cd:ed:
fd:77:b6:9c:9e:71:91:dc:af:2e:53:7a:df:20:3a:
f9:89:93:37:45:ee:04:39:c1:16:13:e4:2e:12:78:
77:0d:b0:a3:ee:de:5e:09:1e:7c:c0:9b:b5:d2:13:
d5:c0:a8:d7:e5:9c:c9:bb:b5:1d:53:78:8f:12:78:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:21:1E:A0:7A:F7:4A:10:87:7F:4D:6A:DF:12:3A:EF:3C:2A:1D:7C
X509v3 Authority Key Identifier:
keyid:75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ef:e8:a9:63:ed:16:36:85:28:31:64:61:6d:27:f8:38:69:
7d:c1:66:f8:43:55:f8:69:6c:1f:34:f6:08:23:16:b5:5d:6d:
e4:6e:fb:1a:37:91:dc:41:87:e1:de:b0:0b:ff:7f:15:a9:4f:
ac:b1:7c:c5:52:7a:19:27:ee:2b:7a:4a:75:33:a5:80:9c:37:
c4:27:4a:a7:c5:c9:f1:3f:52:ee:ae:b8:c1:22:56:33:c0:9d:
68:bd:24:17:cf:c0:47:d0:0c:55:ab:36:b3:53:e0:cf:16:1a:
4c:bb:07:1e:c3:7c:f9:90:4c:6f:d5:4e:b8:e9:8b:bf:27:7d:
cd:93:66:a0:9a:03:ef:f7:b9:80:fc:58:18:b8:ac:22:f7:a4:
fa:f5:a1:8a:27:3a:63:12:c6:b5:0e:40:66:d6:0c:12:02:0c:
4e:d4:45:62:1f:69:18:2e:5b:02:29:00:10:3d:36:09:53:3a:
d4:70:c1:05:02:b3:d6:11:25:a0:35:3d:1a:00:09:b9:54:d7:
9b:ac:2e:77:76:17:3d:70:cc:66:5a:b5:0a:f8:c7:71:f5:8e:
03:56:04:84:da:e2:fb:ed:9a:7b:fe:5d:74:07:9d:ce:92:0b:
ac:9b:80:2c:71:bd:7c:66:d4:66:30:ee:b4:77:a1:cf:62:d9:
64:37:d5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:16 2026 by rpki-client