
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
File: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft (raw, json)
Hash identifier: wJS9dCg/u9w89HjBhew4t1GMoJlWN1A2YZi0a6Ms9X8=
Subject key identifier: CE:04:6A:68:0E:80:E1:EB:5D:75:BC:F9:97:30:BC:D1:CE:92:BF:11
Authority key identifier: 0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5
Certificate issuer: /CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
Certificate serial: 01A1423A9750CCD68FAFF683F1014F615905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
Manifest number: 1AA3
Signing time: Fri 16 Oct 2026 01:01:38 +0000
Manifest this update: Fri 16 Oct 2026 01:01:38 +0000
Manifest next update: Sat 17 Oct 2026 01:01:38 +0000
Files and hashes: 1: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl (hash: 1j2xYIeQuVyfOdtqChzSpR41GDN8bpi75Qm2tDGRkvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:3a:97:50:cc:d6:8f:af:f6:83:f1:01:4f:61:59:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
Validity
Not Before: Oct 16 01:01:38 2026 GMT
Not After : Oct 17 01:01:38 2026 GMT
Subject: CN=ce046a680e80e1eb5d75bcf99730bcd1ce92bf11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:a8:6e:e3:f8:ed:32:3c:68:f0:f2:40:4f:
32:13:61:2d:2b:ef:64:63:09:ff:0f:9c:cb:17:23:
4f:05:b3:03:c6:0b:e8:5e:ba:25:25:a1:a2:60:80:
a2:60:fb:5e:3f:18:0a:93:73:19:18:b1:db:d7:e2:
98:48:48:4f:f3:d6:7f:8b:ca:3d:53:43:81:a5:c4:
af:8e:4d:f6:a0:92:ae:d1:d5:5c:89:58:e0:6b:00:
e3:28:63:cf:61:68:8a:ef:d0:4c:dd:5b:13:9d:f6:
4a:4a:e1:f9:8e:55:ad:69:3a:79:3c:3d:4e:fb:17:
22:71:1d:5c:b9:7c:5a:fc:65:2b:7d:3c:59:4c:4b:
87:d5:92:9e:44:ef:f0:96:33:fc:60:7a:9a:4a:c4:
aa:f8:2c:f6:7d:aa:5b:d2:5f:ac:fa:d0:ff:53:8f:
ce:a5:f8:2d:7e:53:f1:d2:df:60:ee:d2:61:c5:26:
81:ec:c6:cb:86:32:ab:8e:12:43:95:ad:5a:8e:de:
47:d1:de:dd:61:85:95:18:e6:3b:20:f6:91:4d:c8:
64:ce:2f:c2:a4:e8:4e:5c:8d:05:50:03:da:c1:f5:
bb:db:39:50:c8:30:31:3c:9a:f1:de:1e:ff:99:01:
3e:8d:bf:02:93:38:86:24:2f:22:32:b0:15:2e:de:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:04:6A:68:0E:80:E1:EB:5D:75:BC:F9:97:30:BC:D1:CE:92:BF:11
X509v3 Authority Key Identifier:
keyid:0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:70:9b:0d:9e:6e:d6:b0:c7:a5:aa:ed:27:9d:42:45:26:86:
28:3c:62:e1:28:7f:48:71:44:ee:92:47:aa:3e:83:67:c7:69:
2b:ac:ca:d6:13:41:82:13:f1:19:6e:e4:14:0c:29:57:be:0f:
5f:f7:33:a0:c8:91:aa:59:16:2b:38:b6:8a:ab:d1:18:11:c9:
35:0b:7f:45:06:56:4f:07:50:b2:58:f7:6c:92:b0:c5:b0:40:
ff:90:e5:a3:38:f7:c8:f4:81:dc:70:38:ac:83:27:bc:66:c4:
79:0f:05:c3:2e:11:72:38:8f:c7:53:45:df:52:b2:f6:f4:e2:
1b:d0:fa:56:40:41:64:c3:9f:a8:8e:df:eb:d2:4e:51:f2:ad:
e5:c2:ec:38:73:6a:e4:f5:4f:10:51:33:46:29:17:ab:21:b7:
0b:56:75:b2:c6:f4:5e:f6:78:ad:c9:82:01:e8:74:6a:2d:6a:
9f:fe:03:7b:a5:af:b5:e7:d8:2b:83:e1:4a:46:66:a2:46:21:
f0:9b:0b:f8:09:d2:76:24:c2:a6:bb:f3:3e:d3:59:31:c2:38:
4d:f4:73:c0:11:e3:91:19:62:59:e4:bf:6e:86:83:b6:a6:b0:
cb:5a:44:e9:d9:6d:f6:7c:2f:8b:77:f7:44:f7:ca:6c:d1:41:
0d:12:b4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 11:49:55 2026 by rpki-client