Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
File: Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft (raw, json)
Hash identifier: /Sdyq2OkFMHGYJE6FZMMJogcrfHH1yoFGd3jo4DBQ10=
Subject key identifier: 63:F7:43:56:94:09:BB:C9:1D:8E:C8:34:DA:9A:3B:26:8E:1A:C6:FE
Authority key identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
Certificate issuer: /CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Certificate serial: 019E303B58DDDB7BDBAE7BF92BA2984566A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
Manifest number: 190C
Signing time: Sat 16 May 2026 10:00:56 +0000
Manifest this update: Sat 16 May 2026 10:00:56 +0000
Manifest next update: Sun 17 May 2026 10:00:56 +0000
Files and hashes: 1: Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl (hash: f3Kg/kbCQIa5IZ3uuaeJLXswfzfCDlU8A64WUlibp+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:58:dd:db:7b:db:ae:7b:f9:2b:a2:98:45:66:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Validity
Not Before: May 16 10:00:56 2026 GMT
Not After : May 17 10:00:56 2026 GMT
Subject: CN=63f743569409bbc91d8ec834da9a3b268e1ac6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:61:73:31:96:ab:2a:b4:b2:a2:f0:6f:5f:2e:
de:80:25:47:24:cd:b9:fb:3d:08:1b:ac:9c:10:91:
55:49:e9:2a:88:6a:80:28:4e:64:c6:b3:df:38:cc:
1a:d9:6c:cb:49:33:bf:82:aa:0f:d1:60:0a:f9:8f:
84:29:05:b3:3f:06:3c:ed:c0:83:39:0b:55:9f:e9:
b3:39:a0:8d:58:23:b7:3a:40:64:8f:8e:b8:38:9f:
ab:3a:d6:83:f2:6f:2b:b1:d8:53:50:bd:aa:b7:5b:
28:1e:7b:cc:70:21:67:21:f2:d7:97:ad:90:a4:59:
a2:35:01:9b:18:bf:1d:fa:c3:87:de:75:e4:43:c7:
97:07:12:90:2f:38:1d:59:60:cf:dd:29:97:de:8b:
62:a1:36:6e:75:06:a2:f3:fd:f9:1f:67:58:88:3d:
3d:68:e8:7b:25:19:3e:09:76:78:07:29:66:f5:67:
5f:2f:6f:5e:66:74:be:06:9e:7c:de:87:f8:ac:3f:
01:e2:b8:52:b7:c2:d4:fa:8c:0f:96:e8:76:f8:65:
6f:27:32:dd:49:c1:c7:64:11:34:49:14:9d:6d:8d:
02:be:b9:15:a8:17:43:94:70:49:8b:54:2a:35:31:
10:80:ef:ac:e0:0d:ee:72:3a:b5:c9:9c:96:51:20:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F7:43:56:94:09:BB:C9:1D:8E:C8:34:DA:9A:3B:26:8E:1A:C6:FE
X509v3 Authority Key Identifier:
keyid:0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:89:65:cb:69:d5:de:e4:11:38:70:d9:9c:30:7a:90:14:de:
3c:d7:ee:1b:76:df:55:65:fb:87:17:16:c0:ce:bd:e0:3f:0c:
7a:3b:3b:9d:22:2e:b5:51:6a:98:14:68:26:65:c0:44:b6:8c:
c0:0a:08:dd:2f:9a:ad:e2:e8:46:9f:cd:7d:28:92:70:f4:d2:
72:f8:d2:e3:0d:9e:7b:26:e8:b1:66:25:ce:d6:77:a1:df:4b:
e4:65:c4:5e:a1:f4:ca:02:fd:45:26:08:66:fe:d1:38:fd:a4:
a0:66:a3:4f:b3:60:02:8f:5b:92:1f:01:75:41:60:3c:ca:ff:
ba:47:0b:2d:44:78:16:a7:5d:64:60:bc:3e:ae:a1:d1:7c:25:
49:91:ed:7f:d1:9b:92:e6:63:dc:28:1a:0b:f3:5a:14:cc:29:
68:92:58:8c:ae:00:90:88:90:d4:4e:de:0a:f4:7d:d8:b1:2b:
0c:51:72:8d:17:2f:43:42:50:12:71:d9:c1:fd:10:1c:09:a4:
6e:0a:2b:0a:41:18:0d:d6:e3:53:21:f7:13:3d:01:bc:96:df:
8a:c4:94:27:75:69:bc:43:13:30:a2:31:3a:76:be:b1:0c:e5:
87:b4:b3:a3:c2:2c:ef:74:7a:93:05:90:aa:9e:52:f8:a6:cd:
56:93:f9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:14 2026 by rpki-client