Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
File: dGMPFkhbT5M4X5So7HEArUjF_FA.mft (raw, json)
Hash identifier: 3c4tZ2UbC0xttLgdLi28kfLkPPMWcefq4Etd4irz5Hs=
Subject key identifier: 5C:30:B0:C5:27:90:B6:A2:33:90:71:93:FB:66:63:B8:F2:2D:7F:4C
Authority key identifier: 74:63:0F:16:48:5B:4F:93:38:5F:94:A8:EC:71:00:AD:48:C5:FC:50
Certificate issuer: /CN=74630f16485b4f93385f94a8ec7100ad48c5fc50
Certificate serial: 019D382E3A6C5B59DD856CD558C68A8A9D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGMPFkhbT5M4X5So7HEArUjF_FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
Manifest number: 0FC7
Signing time: Sun 29 Mar 2026 06:00:46 +0000
Manifest this update: Sun 29 Mar 2026 06:00:46 +0000
Manifest next update: Mon 30 Mar 2026 06:00:46 +0000
Files and hashes: 1: dGMPFkhbT5M4X5So7HEArUjF_FA.crl (hash: yVKDY9+3PlcwLfbF1Un9IHgwKQIP/0KCVfyuEWYCSpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGMPFkhbT5M4X5So7HEArUjF_FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:3a:6c:5b:59:dd:85:6c:d5:58:c6:8a:8a:9d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74630f16485b4f93385f94a8ec7100ad48c5fc50
Validity
Not Before: Mar 29 06:00:46 2026 GMT
Not After : Mar 30 06:00:46 2026 GMT
Subject: CN=5c30b0c52790b6a233907193fb6663b8f22d7f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:48:e5:95:77:97:6d:50:10:01:e7:94:7d:
b6:da:f1:89:1f:04:e5:28:41:6b:b3:f9:9d:e8:64:
c5:34:66:53:54:79:f9:f1:e0:02:bf:08:e4:70:cf:
89:62:10:83:fd:2f:15:fd:2d:48:54:41:62:b2:07:
64:b5:07:23:8e:eb:94:78:f2:03:c1:c8:a3:1d:f1:
a4:5a:6a:49:b4:51:62:62:1e:07:34:6b:4f:87:31:
b0:f9:40:9c:b2:88:34:0e:41:8a:7b:13:ed:4d:9d:
36:08:c1:d6:2f:be:30:c6:d9:f6:91:6b:a7:7d:5e:
2c:91:cb:95:c7:d7:31:89:33:2c:19:4c:44:2c:6a:
b6:84:a3:d7:12:29:ac:31:df:26:1d:3e:d9:d9:5e:
08:b2:d4:5d:c3:2f:d5:2f:ee:c4:82:da:b5:6a:b7:
ff:c5:92:f7:ed:a2:f1:eb:81:ad:60:b6:30:9b:b6:
43:d2:19:65:95:72:1b:f8:09:7c:03:54:50:a3:28:
41:00:ad:cb:ff:d6:a3:1e:94:05:7a:8f:9f:1f:72:
1d:97:82:60:a6:ac:13:98:a9:be:8d:51:5a:76:8d:
0d:c9:13:8c:c5:8f:30:c4:5d:5e:18:5f:2d:15:43:
e3:93:95:56:f8:d9:01:88:c6:e5:b5:df:05:be:01:
25:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:30:B0:C5:27:90:B6:A2:33:90:71:93:FB:66:63:B8:F2:2D:7F:4C
X509v3 Authority Key Identifier:
keyid:74:63:0F:16:48:5B:4F:93:38:5F:94:A8:EC:71:00:AD:48:C5:FC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMPFkhbT5M4X5So7HEArUjF_FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c0:2f:de:73:39:8c:b6:7d:7d:02:9f:2d:57:03:b4:3e:6f:
0b:6c:75:65:9a:25:4e:65:5b:73:72:e1:d5:6a:9c:6c:51:42:
6d:35:6a:f0:d4:95:c8:71:d0:e0:c2:11:ab:fb:58:f5:8b:9d:
0b:61:74:df:35:61:a9:4d:37:20:5d:d1:7c:d0:40:f0:18:f8:
12:c9:a5:3b:b8:79:e7:ea:53:00:df:e9:d8:fd:c1:17:ff:3d:
34:53:1c:17:c1:66:89:a7:48:73:ce:55:ae:1c:b8:1b:51:a9:
53:66:dd:1e:89:fa:08:8f:df:cd:22:ce:ca:cb:d0:43:03:67:
81:3f:fd:a0:63:46:b4:e5:e4:b0:ab:02:9e:42:aa:b6:7c:d2:
4e:9a:da:1b:d8:92:6f:5f:f7:1b:1d:60:3d:40:90:90:35:76:
f4:e7:14:9a:1f:11:9d:6c:0c:15:18:39:5b:12:49:90:cb:d4:
8c:71:b9:46:d7:ce:82:7c:ee:21:70:89:01:6c:2b:82:10:78:
cb:60:54:54:1e:19:25:7a:bf:77:cd:8c:5d:46:99:c0:cb:84:
d2:1b:81:e1:64:d5:0f:fc:27:35:76:6a:0d:36:81:af:06:03:
df:73:d9:c8:06:9c:44:d0:f8:aa:8b:c7:57:a5:84:ce:b4:22:
9d:3e:80:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:43 2026 by rpki-client