Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
File: dlIO_x7h4o493PuJ58tvfYmnfJw.mft (raw, json)
Hash identifier: sLGTK0/fksb1DHzGo9hYFQP5xqswNmkN0tSv0Cg9dvY=
Subject key identifier: 5B:4A:B0:62:CC:1E:98:72:49:D2:CB:3E:EA:01:8B:BD:E1:79:FA:25
Authority key identifier: 76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
Certificate issuer: /CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Certificate serial: 019D389BDA0A11DBFF491F00BC8AB44E04E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
Manifest number: 041B
Signing time: Sun 29 Mar 2026 08:00:31 +0000
Manifest this update: Sun 29 Mar 2026 08:00:31 +0000
Manifest next update: Mon 30 Mar 2026 08:00:31 +0000
Files and hashes: 1: dlIO_x7h4o493PuJ58tvfYmnfJw.crl (hash: PHPkMLkm/7JGPQaXy4i3/qk6BHlD36rg2K7svI93N3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:da:0a:11:db:ff:49:1f:00:bc:8a:b4:4e:04:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Validity
Not Before: Mar 29 08:00:31 2026 GMT
Not After : Mar 30 08:00:31 2026 GMT
Subject: CN=5b4ab062cc1e987249d2cb3eea018bbde179fa25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:7e:a4:89:1f:1a:dc:eb:4d:71:27:5f:09:
3d:8b:29:46:f2:da:c2:fd:b2:b1:a0:94:ab:a2:3d:
94:1c:de:f0:29:99:33:ca:49:5f:3b:cf:24:54:be:
a3:77:97:bb:be:e1:9f:76:a8:53:de:82:ab:10:76:
21:e9:d2:d8:d4:cb:d9:13:7b:a5:93:97:05:23:f1:
0e:3e:08:48:14:8b:47:82:03:9f:61:26:ba:e0:57:
64:62:38:ec:52:c2:c3:bd:02:47:82:23:8b:0c:ee:
6f:db:66:7d:ed:1f:e4:ae:d5:ca:e1:3b:eb:0d:20:
5a:41:96:33:ca:58:41:3a:e6:a8:f9:1f:50:98:77:
97:60:b3:bd:0c:ab:3c:7d:3f:10:ff:25:99:56:7d:
f9:b5:7f:3f:23:e9:ae:73:f3:d4:51:51:a0:93:f4:
23:aa:ba:8e:4d:b0:4c:07:fd:57:38:4c:4a:97:42:
7a:e2:a6:5b:12:4f:2a:63:99:df:f9:08:b3:b5:8a:
bf:82:d5:53:60:15:81:82:df:9a:2b:25:d5:e6:05:
c4:0b:ae:bc:31:c4:d2:a0:e0:8c:4d:84:b7:fc:a9:
05:e0:56:d6:90:6b:fa:9f:4c:8e:03:cc:65:be:34:
61:43:3c:7f:70:1b:c5:0b:e7:59:11:66:30:0e:44:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4A:B0:62:CC:1E:98:72:49:D2:CB:3E:EA:01:8B:BD:E1:79:FA:25
X509v3 Authority Key Identifier:
keyid:76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:60:fa:dd:ce:19:3a:04:a8:e6:2e:7d:ab:e7:6e:33:9e:e2:
10:d3:09:5d:1c:54:45:42:00:9b:5e:47:8c:86:a1:a2:05:df:
66:b2:f6:7f:b4:a8:db:6b:47:46:d7:1d:b3:4a:39:ea:57:d5:
5e:16:e0:53:06:b9:2b:7f:08:58:00:d8:55:69:89:ed:ee:7f:
d8:fc:39:a6:7c:13:a5:cc:e8:59:6a:2a:67:ee:2a:ee:b1:0b:
7a:48:8f:f7:d0:f7:73:34:e7:75:2e:0c:0d:8a:8b:14:21:7b:
f7:e5:bc:0d:e4:a0:88:85:2e:cc:0e:c0:04:13:3e:46:42:e7:
cc:bc:e5:da:3d:43:0a:8e:b8:bb:3d:38:de:27:a8:60:9c:ca:
d3:e4:ce:86:8d:6a:13:a0:f4:c7:35:38:47:33:b5:fd:8e:31:
e1:88:21:fa:ff:97:71:2a:e2:27:0a:90:1d:b2:2b:b9:05:3c:
58:62:50:e2:c6:7f:fe:ae:af:9d:5e:1b:95:8e:4e:a6:9b:e7:
4a:75:e2:bf:90:07:80:a1:22:de:bd:2a:c5:69:04:4e:c1:d3:
53:7d:ea:79:3f:01:4d:e0:09:97:1b:cf:84:77:1c:05:a0:13:
17:6f:84:be:cc:71:2d:a8:9f:d3:e4:98:4d:e3:e7:83:38:17:
c1:7d:6d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:03 2026 by rpki-client