Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier: sfVlHE/bggtODIM/8Y2UOBfEkALv89ezyLydQn68RG8=
Subject key identifier: A7:90:C2:0F:0A:ED:A1:D9:EE:A4:31:DF:59:46:7E:6A:EB:87:1E:8B
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer: /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial: 019D37C10E1FBA806807D6B0F2C632FC9594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 04:01:31 +0000
Manifest this update: Sun 29 Mar 2026 04:01:31 +0000
Manifest next update: Mon 30 Mar 2026 04:01:31 +0000
Files and hashes: 1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: MG3XspoKkjt83sIs9mommR6lA1ZagHZ1FZmSOYfBRBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:0e:1f:ba:80:68:07:d6:b0:f2:c6:32:fc:95:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Validity
Not Before: Mar 29 04:01:31 2026 GMT
Not After : Mar 30 04:01:31 2026 GMT
Subject: CN=a790c20f0aeda1d9eea431df59467e6aeb871e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:fb:f7:fe:3c:6a:69:99:a2:45:cc:df:40:
c0:51:e6:9a:5c:a9:cd:76:b8:17:e5:d0:31:f3:a9:
f2:69:ca:f2:9e:8b:8c:0d:d1:80:88:56:a2:42:db:
7b:67:05:99:3e:f5:0f:3e:ce:cc:ed:56:88:87:70:
b3:c6:6e:15:da:c0:3c:f2:6d:b2:5e:f2:26:cc:54:
00:8a:9e:ae:d2:be:5c:c3:4c:be:99:5d:57:a8:d7:
2a:e1:17:77:57:69:d8:97:36:06:ec:f0:25:f4:47:
d0:db:05:86:b1:7f:7c:80:3b:05:f7:56:58:6f:20:
db:cb:82:0d:c7:5b:0b:a9:e5:6b:6c:c8:e4:84:a7:
52:32:ed:6c:48:c0:23:5a:2a:b8:e9:04:f3:76:32:
7d:98:31:38:58:1d:d3:fe:a7:00:ed:30:a8:a6:1e:
ba:e5:76:e5:7a:de:34:6b:b9:6a:cd:3f:b6:95:35:
a2:d5:9f:71:6a:ae:40:ea:1a:ac:2e:c5:fe:8e:7e:
4a:7c:8d:f4:c1:ed:84:31:76:e0:c4:04:50:ed:b0:
12:46:05:83:19:31:46:93:d9:44:42:a9:17:6e:9f:
e2:44:3f:63:dd:03:08:59:6b:59:07:5c:9d:f9:1b:
51:dd:fc:d1:30:4e:c0:b0:3a:82:bc:b7:82:fd:4b:
85:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:90:C2:0F:0A:ED:A1:D9:EE:A4:31:DF:59:46:7E:6A:EB:87:1E:8B
X509v3 Authority Key Identifier:
keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a8:82:ed:7a:fb:cf:7c:6d:98:23:c4:13:b0:48:07:6e:1e:
cc:f5:94:26:ae:4b:d2:58:f0:29:54:87:c7:f7:0f:44:91:aa:
50:59:c7:d1:f2:ef:83:9f:b5:06:95:9e:8a:6c:1e:65:e9:c4:
4d:de:15:c1:50:80:74:fb:63:66:75:3c:d0:8b:57:fa:cc:d1:
7b:3b:07:d7:47:d9:a9:01:3c:75:7b:06:51:66:0a:61:78:d9:
32:67:29:2f:cf:66:6c:ba:fa:fd:70:bf:36:6b:49:4c:b7:c7:
86:fa:48:50:97:e5:e3:da:6e:3d:ae:34:28:1e:8c:77:36:84:
17:f3:43:aa:29:ce:7b:fa:a7:0b:1a:ef:fd:6e:ec:57:de:c7:
08:14:c0:6c:62:69:61:16:1f:dc:e0:86:24:ef:45:28:f7:26:
ad:5a:8e:34:11:94:18:2d:6d:d7:7d:82:2e:77:01:07:26:9d:
77:a3:69:14:6f:cd:d8:e9:98:7f:9d:2d:c6:34:34:21:4a:12:
64:3d:ee:cd:9f:cc:50:f8:44:a8:d0:f9:ef:4a:aa:7b:d7:f1:
11:5c:bf:8f:32:ea:41:20:54:5d:ec:91:c8:a7:95:e3:48:72:
52:90:b2:4f:a0:4c:90:72:60:04:cb:05:31:0c:45:51:d0:74:
2c:d4:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:16 2026 by rpki-client