Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
File: Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft (raw, json)
Hash identifier: MoFVOqWb+pJtFYsxE9aSBxJ3VaHK0+7z713xQLAozUc=
Subject key identifier: DA:87:29:06:36:C6:99:47:76:94:B3:E6:E4:D4:00:41:09:6A:7C:E8
Authority key identifier: 0E:1F:B7:0F:90:BA:2C:F0:58:C1:20:6D:EB:0E:F7:97:37:02:6E:90
Certificate issuer: /CN=0e1fb70f90ba2cf058c1206deb0ef79737026e90
Certificate serial: 019F18300F462957E75CD7588DDCC99DF68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh-3D5C6LPBYwSBt6w73lzcCbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
Manifest number: 0A6C
Signing time: Tue 30 Jun 2026 11:00:30 +0000
Manifest this update: Tue 30 Jun 2026 11:00:30 +0000
Manifest next update: Wed 01 Jul 2026 11:00:30 +0000
Files and hashes: 1: Dh-3D5C6LPBYwSBt6w73lzcCbpA.crl (hash: 38UTA9e4uOhVTe2k8tH5vPuij6fC7DHq4Nxtf2H00fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh-3D5C6LPBYwSBt6w73lzcCbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:0f:46:29:57:e7:5c:d7:58:8d:dc:c9:9d:f6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1fb70f90ba2cf058c1206deb0ef79737026e90
Validity
Not Before: Jun 30 11:00:30 2026 GMT
Not After : Jul 1 11:00:30 2026 GMT
Subject: CN=da87290636c699477694b3e6e4d40041096a7ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:81:f8:34:08:91:68:18:7c:83:9b:a6:75:
e5:e9:c1:2d:a6:29:4f:05:48:f0:95:71:29:1d:11:
4f:a4:0d:fb:3f:b2:15:f1:75:38:8f:e2:e5:d0:bc:
52:39:02:04:cf:0e:90:01:94:43:3e:d0:0d:0c:b1:
00:84:0a:f0:68:df:8c:97:3f:c3:b6:5d:74:b0:5f:
86:20:37:f0:49:f2:39:dc:1d:e9:e5:e8:6f:af:ac:
62:15:c2:28:5f:9e:3f:bf:87:6c:0a:01:c6:5a:b2:
22:a9:96:cf:2a:bd:d8:00:59:d2:a8:c3:db:73:17:
86:1e:36:3b:14:e1:59:37:c0:bc:e2:57:73:c3:6e:
7f:c7:34:5b:58:f0:fa:b9:9a:e2:89:e3:f9:07:2c:
db:aa:60:11:24:7e:14:5d:33:e5:59:ce:b8:58:de:
22:e6:3d:c0:0d:1d:b7:5b:34:0e:e8:99:8a:ce:b0:
92:6a:84:f4:79:32:32:fd:8a:0e:4c:9f:b4:bd:ed:
26:e7:f4:8c:5e:47:d3:7d:3c:ad:f2:88:bc:12:ac:
1a:df:04:b3:6d:d4:08:da:6d:86:1e:e1:73:70:86:
91:cf:8f:23:d6:17:22:f8:23:aa:6f:34:f9:04:1d:
87:65:08:9d:2a:cb:15:04:0a:8c:97:de:d5:c7:06:
b8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:87:29:06:36:C6:99:47:76:94:B3:E6:E4:D4:00:41:09:6A:7C:E8
X509v3 Authority Key Identifier:
keyid:0E:1F:B7:0F:90:BA:2C:F0:58:C1:20:6D:EB:0E:F7:97:37:02:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh-3D5C6LPBYwSBt6w73lzcCbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:35:60:cc:05:1b:9d:e8:60:d7:2b:4e:95:e3:e4:26:4a:33:
73:d4:47:59:dd:8f:98:06:65:f3:b0:4b:97:9f:53:e8:8b:3d:
c9:0c:81:63:8c:48:75:1c:7e:b3:0b:f7:1a:2a:87:a4:9a:0f:
a3:c4:d7:29:1f:ba:4f:a8:46:85:d9:40:81:95:1e:c3:32:21:
67:3f:84:59:d0:70:4e:ce:19:ee:50:85:63:a2:a6:97:d5:16:
10:bc:7f:7d:ee:1b:e0:e4:92:86:aa:0a:cd:b6:b6:8b:f3:b6:
7d:9e:12:bc:d5:9b:12:74:98:a3:8e:67:b0:14:d3:1e:90:8b:
32:23:ac:db:45:f1:9e:33:f6:63:08:4c:38:c0:db:f4:e8:07:
85:3b:ca:98:a2:4e:f3:c6:73:1f:9d:2b:4c:b5:fa:5c:d5:12:
7a:fd:67:da:9c:b5:ae:e2:62:c3:2e:22:c3:61:a2:17:c5:a5:
0d:e8:7d:f8:47:11:53:03:9d:53:8b:ac:aa:97:c4:13:0e:1b:
89:58:d1:f1:9b:1c:e1:f8:d9:62:7d:29:bb:f6:db:f5:15:f2:
16:c5:93:ec:08:4f:55:04:ed:f6:49:b9:e6:bc:7b:c9:43:81:
03:c0:46:d9:3b:48:bb:f2:6d:c0:a2:40:e0:68:84:f7:18:87:
00:3a:72:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:40 2026 by rpki-client