Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
File: Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft (raw, json)
Hash identifier: 4v8Q1OoTL8CPs6YolJlNEw/s22qpOC0Tde0/5FtrTGI=
Subject key identifier: 5A:88:5C:A3:05:69:39:1E:49:C7:3F:B5:CD:38:37:45:8D:F5:64:D9
Authority key identifier: 0E:1F:B7:0F:90:BA:2C:F0:58:C1:20:6D:EB:0E:F7:97:37:02:6E:90
Certificate issuer: /CN=0e1fb70f90ba2cf058c1206deb0ef79737026e90
Certificate serial: 019D3752A114DFA63C805F62AE0371C432A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh-3D5C6LPBYwSBt6w73lzcCbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
Manifest number: 0973
Signing time: Sun 29 Mar 2026 02:00:55 +0000
Manifest this update: Sun 29 Mar 2026 02:00:55 +0000
Manifest next update: Mon 30 Mar 2026 02:00:55 +0000
Files and hashes: 1: Dh-3D5C6LPBYwSBt6w73lzcCbpA.crl (hash: Lt7Jzu64kR66kI14AcegbDbH59FjuJc7pLeDRxJ4TGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh-3D5C6LPBYwSBt6w73lzcCbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:a1:14:df:a6:3c:80:5f:62:ae:03:71:c4:32:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1fb70f90ba2cf058c1206deb0ef79737026e90
Validity
Not Before: Mar 29 02:00:55 2026 GMT
Not After : Mar 30 02:00:55 2026 GMT
Subject: CN=5a885ca30569391e49c73fb5cd3837458df564d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:d3:29:30:99:39:3d:63:09:46:01:af:1f:
dd:f6:6e:73:fe:41:28:a0:4b:51:e0:af:c1:c4:8e:
39:c1:cc:7b:b3:a0:ea:18:71:f0:b0:90:e5:0c:df:
80:f5:9d:82:6f:b4:89:10:cd:85:97:4f:22:94:e9:
70:b7:09:c8:68:62:89:a0:14:91:6c:f7:33:d5:71:
2a:eb:4b:f4:6d:39:24:34:3e:62:f6:2c:75:6b:1e:
d6:02:f5:bf:0c:b5:40:08:de:5d:9b:80:58:c1:4e:
93:c1:41:e8:74:2d:84:09:a6:41:f0:5b:fa:55:54:
96:95:65:8e:32:76:b8:84:2f:0b:35:86:66:f6:1f:
d0:65:a5:03:bd:73:dc:e6:b4:d4:da:25:1e:ab:4b:
89:c3:00:e9:c1:ac:01:79:7b:5d:0f:e6:07:9f:94:
7e:21:fd:e5:c6:69:fb:3f:38:aa:b5:3e:b0:83:16:
6a:26:2c:c7:3f:d5:cf:21:4e:c7:29:79:71:dc:24:
3e:75:92:b7:b9:2f:72:0b:7d:35:65:5d:a8:4b:67:
7f:ef:83:cd:78:dd:7f:24:ef:a2:0b:04:2c:1a:6c:
c7:1d:84:20:62:9b:57:7f:b8:98:e3:87:17:4b:e9:
53:79:bd:75:fd:75:ab:6c:d0:a1:ea:06:31:cf:cf:
37:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:88:5C:A3:05:69:39:1E:49:C7:3F:B5:CD:38:37:45:8D:F5:64:D9
X509v3 Authority Key Identifier:
keyid:0E:1F:B7:0F:90:BA:2C:F0:58:C1:20:6D:EB:0E:F7:97:37:02:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh-3D5C6LPBYwSBt6w73lzcCbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c5:01:34:5e:8a:bd:5a:fc:f3:d5:70:37:b5:0d:37:79:ef:
f6:55:3e:a9:8f:d9:53:85:76:1f:fe:75:9a:a6:27:e5:e9:a0:
6c:05:39:90:fd:63:45:f8:2a:eb:91:d6:8c:84:9a:40:7f:c2:
dd:9b:00:63:17:f6:a1:32:85:31:7a:d0:d0:37:f6:d2:45:7a:
24:55:50:f1:38:73:95:57:c1:1c:ab:b4:2b:56:8e:82:3f:a6:
cf:8b:c9:3a:6b:1b:35:78:32:d0:5b:ff:3b:d7:10:65:f9:42:
c8:a2:52:8f:1e:93:e1:33:8a:c1:dc:55:9b:00:c6:be:53:b3:
ce:05:80:c2:73:4c:c4:57:d9:41:2a:1f:b4:02:41:24:f2:ee:
52:dd:4d:92:4b:b8:48:16:f0:12:3c:23:76:ac:23:87:89:df:
9b:bf:15:c3:6e:69:67:94:fe:9d:40:79:4b:0f:7b:45:50:b7:
3b:60:09:a5:d0:06:e1:ed:87:e8:c0:d4:20:c2:db:34:54:8c:
79:22:cc:fb:64:40:fd:48:57:14:b9:fb:2a:0f:3d:80:e8:ec:
53:18:6e:ae:0f:0b:d1:58:c5:4b:43:c5:48:06:e4:b3:1f:d5:
15:5a:ad:ea:ea:99:ed:f5:e6:5e:9e:be:3e:5a:af:c5:a8:35:
8a:b2:d4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:45 2026 by rpki-client