Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
File: dJFafoze18DuIhnnMMGYy7eLxfI.mft (raw, json)
Hash identifier: pWqEmXg9/8vb9HoztYGQBMuYOyGdthsRZOYcE0ys/LI=
Subject key identifier: 0D:A3:D1:BE:FE:6D:D5:9C:C9:25:C4:6A:DE:45:41:D0:64:14:7D:28
Authority key identifier: 74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2
Certificate issuer: /CN=74915a7e8cded7c0ee2219e730c198cbb78bc5f2
Certificate serial: 019D389BFF25D835C66B6DAE83DF4B721CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
Manifest number: 03F1
Signing time: Sun 29 Mar 2026 08:00:40 +0000
Manifest this update: Sun 29 Mar 2026 08:00:40 +0000
Manifest next update: Mon 30 Mar 2026 08:00:40 +0000
Files and hashes: 1: dJFafoze18DuIhnnMMGYy7eLxfI.crl (hash: kYhaoy1BmRfibyoZGMM5zN7FO9cuzqG2/Mdy5wTCdZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ff:25:d8:35:c6:6b:6d:ae:83:df:4b:72:1c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74915a7e8cded7c0ee2219e730c198cbb78bc5f2
Validity
Not Before: Mar 29 08:00:40 2026 GMT
Not After : Mar 30 08:00:40 2026 GMT
Subject: CN=0da3d1befe6dd59cc925c46ade4541d064147d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ce:40:e7:23:31:84:71:cd:31:53:52:17:12:
67:cb:ba:b1:e7:5d:1e:00:c9:90:7b:24:74:01:d8:
83:b6:68:96:06:09:61:29:1a:da:36:8e:e4:b2:08:
cf:ef:58:3c:e8:7a:bb:3e:c1:6e:71:8b:e1:e3:17:
f9:e5:16:db:7a:b0:ac:08:8e:1a:f3:07:38:7f:1a:
0e:63:c9:2e:22:06:70:f4:c7:a2:33:3d:1d:0a:45:
3c:63:20:b4:15:3b:b2:8e:58:63:9a:84:62:6a:40:
43:46:e8:7f:ab:f6:2f:61:e3:8c:b7:94:44:d1:df:
89:1d:8b:cc:f7:f5:09:f4:26:13:d3:2b:3b:77:32:
79:1c:5a:77:82:9f:77:ef:63:5b:94:2c:c8:04:eb:
11:49:41:ca:52:7b:a9:2e:5a:a0:5d:ef:e3:5f:e4:
45:e8:be:f5:8f:5e:39:55:c9:29:6b:47:2a:9a:f8:
c4:1a:ee:41:c8:bd:8a:57:3f:85:f2:01:13:5c:98:
be:56:a1:9f:8d:c3:a1:d7:94:67:f9:0a:3e:e3:6d:
fc:3f:f8:7a:f8:7c:4d:cf:2d:85:0e:a6:10:74:d0:
9e:54:2d:16:fe:70:a8:44:0e:87:5a:04:50:1e:35:
d2:aa:b4:1e:f6:8d:7b:4d:c1:4a:77:c1:9d:14:6a:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A3:D1:BE:FE:6D:D5:9C:C9:25:C4:6A:DE:45:41:D0:64:14:7D:28
X509v3 Authority Key Identifier:
keyid:74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:08:a9:bb:ec:50:75:30:2a:a9:16:50:63:d2:cf:09:fc:20:
8b:a2:91:11:ec:d4:d8:d0:86:72:57:2e:e4:bb:d7:e9:ff:88:
f0:58:1c:35:50:f3:4b:14:1e:03:0a:74:42:92:ca:10:c3:4d:
39:39:66:ba:98:f6:83:4e:84:8c:94:17:18:c8:13:26:f9:28:
c3:cd:e9:73:ec:62:fc:77:21:5b:a5:ff:5b:27:d9:e2:b4:d0:
a7:3c:b7:09:89:7f:02:7f:a0:78:ad:4f:89:80:b2:59:03:08:
63:f8:8b:e9:10:8c:76:3d:07:4c:6b:3a:9d:2c:78:8d:cf:87:
99:52:a4:38:32:8d:6d:eb:7f:9d:b7:81:ff:90:74:d8:74:e6:
55:81:41:d0:0e:04:4e:6a:3f:cf:5b:13:08:0c:c1:3c:dd:a3:
1e:66:ce:9f:d5:a3:b0:3b:04:98:38:66:bf:83:39:f0:70:58:
ec:50:2a:08:04:29:bd:dd:79:d9:3d:2c:b3:53:ab:de:76:b1:
d3:92:e9:05:79:38:53:a8:60:ad:9a:0c:74:80:94:74:46:4e:
f8:a0:04:78:b3:49:b0:ed:f6:e7:44:72:9e:fc:de:c8:48:94:
87:ea:3e:43:c4:ff:58:ba:0d:91:7a:f5:95:f6:1e:ea:12:eb:
ac:fc:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:34 2026 by rpki-client