Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
File: DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft (raw, json)
Hash identifier: F0TYtC/kPGE/0mRsAEx1BYuEw+04spZw1W9p1A7nkSc=
Subject key identifier: C7:2F:73:40:31:0B:A3:75:BE:70:DA:B0:E3:7A:68:94:E3:B0:3D:06
Authority key identifier: 0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
Certificate issuer: /CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Certificate serial: 01A140BA1129144ADF13583970268DA998B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
Manifest number: 0ABF
Signing time: Thu 15 Oct 2026 18:01:38 +0000
Manifest this update: Thu 15 Oct 2026 18:01:38 +0000
Manifest next update: Fri 16 Oct 2026 18:01:38 +0000
Files and hashes: 1: DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl (hash: SKW+D+dmO0Xh+UwCml0WUdtVvAB+V7xBgX7CKvH4buo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:ba:11:29:14:4a:df:13:58:39:70:26:8d:a9:98:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Validity
Not Before: Oct 15 18:01:38 2026 GMT
Not After : Oct 16 18:01:38 2026 GMT
Subject: CN=c72f7340310ba375be70dab0e37a6894e3b03d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:f4:64:c2:15:8a:02:7c:78:45:b6:c7:85:
fb:7d:26:5a:01:e4:c1:68:c3:8b:99:2b:93:7b:71:
29:3a:bf:3e:8a:ef:c7:4d:66:83:d1:55:dd:cb:ef:
0b:cb:2c:52:83:c2:df:f6:b1:64:14:4e:ed:3e:67:
14:e8:e3:77:95:e9:10:bf:31:4e:c3:15:cd:ec:a0:
b2:16:82:5c:d5:10:25:5b:cc:4d:99:3a:71:2c:04:
6f:a2:fe:4b:24:e3:aa:de:c0:a3:0e:b1:72:d0:75:
08:64:69:7a:f6:53:b0:c1:3e:38:b8:f6:4a:17:40:
5e:25:91:d9:de:8f:6d:3a:e2:53:ba:f3:d2:32:73:
2e:d9:00:58:02:d5:06:96:09:89:f2:fb:88:4e:c2:
3c:b1:ed:f2:4e:39:15:74:04:3b:8c:71:f6:d0:9d:
ed:34:44:3a:55:7d:b6:8c:8a:9e:8f:d6:84:ef:57:
21:d2:43:ce:91:f8:b4:e2:cb:a5:ac:c0:58:d4:21:
18:34:15:77:fa:cc:76:6a:bc:a7:eb:0b:e1:fc:71:
08:59:63:7e:c6:98:cc:bc:7c:e6:b6:b5:4e:cf:16:
75:b2:26:78:04:f2:ee:9e:e4:63:55:57:ea:2a:7e:
17:29:03:99:8b:f4:d0:e9:29:91:f7:43:9d:26:12:
72:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2F:73:40:31:0B:A3:75:BE:70:DA:B0:E3:7A:68:94:E3:B0:3D:06
X509v3 Authority Key Identifier:
keyid:0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fb:3d:6e:d1:7e:b8:c7:e3:3c:78:b6:51:ec:22:33:25:c3:
3c:81:c2:cc:bc:c7:8b:72:fa:80:22:9e:07:3c:8c:30:b9:91:
8f:48:8a:e8:bc:50:6a:c7:2f:74:0f:4a:ca:f4:b0:09:88:14:
91:07:04:54:78:9e:23:dd:d5:0f:85:92:e8:d9:17:4b:b2:db:
8c:c9:91:9d:03:b8:3a:c6:c6:ef:92:c0:bc:5b:89:f8:87:fb:
a2:14:55:02:74:90:84:c6:d3:94:83:df:64:4b:ad:23:47:81:
ba:e2:d9:d5:38:54:3e:da:3f:e8:9e:4e:61:a7:91:e3:dd:46:
90:4f:ff:4b:58:c8:90:23:b3:06:cb:2b:30:37:d2:b4:96:1f:
2c:11:90:c0:02:8e:94:47:4c:e5:4a:80:60:de:bb:b3:65:20:
2e:8f:5d:17:78:82:a9:8f:9e:1f:a6:a0:f1:cb:f7:1f:dd:02:
da:46:8e:1d:4b:89:18:e1:ff:aa:33:29:7d:0a:ef:9b:d9:22:
81:9c:39:4c:14:bb:97:68:6e:69:0c:3b:76:e0:41:f3:24:13:
14:1f:2f:23:7e:3a:0f:49:ce:04:8c:24:fa:6a:6d:3a:3d:c9:
f2:ab:c2:a4:4e:d0:f4:b9:68:70:0c:3b:06:52:df:1b:dd:34:
03:22:5b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:27 2026 by rpki-client