Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
File: Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft (raw, json)
Hash identifier: FoGxZTe9JJn3J6w/nzZckH32uSGa/c+w4x4WBqZnVcw=
Subject key identifier: 13:BC:26:80:B5:5C:86:41:19:80:04:BF:CD:89:07:F0:93:56:57:CD
Authority key identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
Certificate issuer: /CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Certificate serial: 01A001A61D24ABAF3B7AB02CEA326F2EB459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 19:00:58 +0000
Manifest this update: Fri 14 Aug 2026 19:00:58 +0000
Manifest next update: Sat 15 Aug 2026 19:00:58 +0000
Files and hashes: 1: Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl (hash: GYBQ9jInT2+7IIJEf/Q1lqdNwMasuiiKKAyOcnKtHaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:1d:24:ab:af:3b:7a:b0:2c:ea:32:6f:2e:b4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Validity
Not Before: Aug 14 19:00:58 2026 GMT
Not After : Aug 15 19:00:58 2026 GMT
Subject: CN=13bc2680b55c8641198004bfcd8907f0935657cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:06:d1:57:6c:75:39:a5:c8:36:a2:ac:ae:
1b:5c:c2:0e:e0:ff:cb:76:be:80:04:cd:23:93:f6:
29:c1:f2:70:19:45:cc:12:82:b7:9e:48:71:f7:a1:
2d:66:82:03:ad:90:c1:73:63:14:a5:bf:e3:c4:e2:
88:53:8a:d4:30:be:8b:8c:59:e6:37:23:91:15:44:
fe:da:80:90:7c:60:42:69:81:5c:60:ec:32:d5:de:
1f:9d:ff:6c:ee:6f:f6:da:7d:c1:83:45:42:05:87:
9e:36:10:ea:16:28:50:0a:4b:69:98:83:d3:21:49:
81:ea:19:0d:34:41:7f:19:40:28:49:b9:f4:47:f5:
be:69:cd:fc:e1:d1:b1:f5:c9:2d:a5:80:38:3b:ef:
b2:0e:b9:07:1d:27:f7:93:d9:bf:94:79:f3:63:bd:
b8:d6:30:c6:e9:4d:56:8b:4b:8d:3c:aa:e7:01:55:
57:3b:59:16:d4:f4:53:b2:a5:74:26:22:b4:95:23:
0c:31:29:a7:44:79:72:db:51:1d:19:32:c8:5f:69:
26:a8:b3:8d:f6:0d:1f:e7:14:4e:9c:03:6e:03:34:
98:56:ec:b6:3e:42:bd:d1:9d:59:af:b5:10:87:80:
3d:f5:c2:bd:bf:ca:c4:bc:cf:ff:29:7d:d8:dd:87:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BC:26:80:B5:5C:86:41:19:80:04:BF:CD:89:07:F0:93:56:57:CD
X509v3 Authority Key Identifier:
keyid:0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:25:cc:e9:45:03:6f:0d:0b:96:d1:be:1e:cf:16:55:1d:9a:
84:4f:f3:41:c0:25:35:b3:d9:36:71:b1:90:6a:67:44:27:33:
c1:4c:7f:fb:dc:39:32:9a:d8:60:45:5b:09:a1:31:0d:5b:8d:
a8:58:cc:d3:ea:6e:5a:4c:fb:aa:58:7d:38:56:e0:31:db:c5:
8a:e5:b6:e3:ab:58:a2:02:e4:3f:fa:e0:e0:e7:85:0a:74:05:
25:38:52:84:33:ca:ec:d3:2b:18:28:46:44:6b:43:16:29:19:
8a:26:e7:f2:ca:1c:4f:25:e7:ff:be:49:09:43:4a:26:19:3d:
57:45:04:a0:f5:ad:81:3d:0d:61:09:4e:70:20:a4:a0:7c:00:
71:69:16:73:2b:63:aa:39:97:be:e2:fa:35:e6:ed:a4:b2:ef:
8a:f7:28:67:e5:be:c2:1a:12:e2:d9:61:7f:38:67:0e:41:4c:
03:63:da:4a:c7:a1:a8:5a:56:1e:46:67:ec:dc:f7:b3:bc:0e:
59:70:61:f8:89:c8:99:2e:87:77:d2:7b:f4:0b:71:16:60:d9:
3c:9b:a5:80:09:57:ea:73:82:e2:e3:e6:27:ec:ec:c6:7b:3f:
16:1f:0f:88:8c:0b:50:56:9b:c4:27:19:2c:eb:db:93:24:1e:
64:7d:43:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:32:56 2026 by rpki-client