Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
File: dpcDbZO0rGcPD_xakM6ral-LwpU.mft (raw, json)
Hash identifier: MqHyn9vh+B/gSYC0Ce89AvOHYQ73PUDzVZSpbcGMwn4=
Subject key identifier: 52:F2:0B:82:3D:AF:A0:DB:29:6D:DD:5D:AF:84:59:B0:59:87:50:EC
Authority key identifier: 76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95
Certificate issuer: /CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
Certificate serial: 019D3865F5F10067DCC18C9F672C79346CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
Manifest number: 10AD
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: dpcDbZO0rGcPD_xakM6ral-LwpU.crl (hash: C/pUiGJc9+Smz0Z5GJpWKF9Nw+YsJD4Gm+MnF9lOtJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f5:f1:00:67:dc:c1:8c:9f:67:2c:79:34:6c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=52f20b823dafa0db296ddd5daf8459b0598750ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:81:90:08:7a:cb:c8:c9:68:95:82:a8:45:
d5:5c:4c:db:37:a5:19:3a:de:77:21:7d:9f:6f:f4:
9a:95:5c:e8:e9:0d:81:43:9e:8d:81:ed:78:e1:50:
55:c4:87:4e:c7:76:a4:d3:a3:85:d6:77:8c:2b:7b:
b2:44:d0:36:c1:19:88:d5:ab:25:4c:c9:e6:60:bb:
c0:54:41:d5:30:68:82:d6:c8:cd:e5:2f:a8:49:1d:
fa:46:55:c6:26:19:41:f5:8d:1d:ed:75:15:3f:3a:
fe:cd:67:d4:15:c6:9c:b3:ff:3c:39:dd:fb:60:cd:
58:6e:30:f8:7e:ec:da:fa:44:6a:46:6a:b0:71:4a:
ea:39:22:eb:f4:c7:b2:f6:85:1b:1a:94:e2:6e:d2:
c0:6a:28:90:c6:27:81:a4:8f:0b:c4:55:12:fc:f4:
41:74:27:c1:73:63:00:46:df:db:d7:b8:a2:de:21:
96:fe:e1:3c:a0:0e:42:f7:23:b8:52:a0:2d:7a:e7:
df:36:3b:2a:b5:b9:8d:bd:2d:21:f2:69:6f:d4:bb:
03:4f:70:1f:ea:34:42:45:ac:19:33:36:db:0c:85:
46:37:1a:b3:a4:ec:af:20:1d:ac:d9:92:a7:86:b9:
72:e7:0e:4d:be:e4:1b:1d:8e:ad:f3:83:27:49:8a:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F2:0B:82:3D:AF:A0:DB:29:6D:DD:5D:AF:84:59:B0:59:87:50:EC
X509v3 Authority Key Identifier:
keyid:76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5a:6f:38:7b:ce:a6:74:49:3c:3a:d6:ff:8e:5f:d3:f2:e8:
91:76:48:4e:6c:28:fa:12:8c:9f:12:8f:82:14:d0:9d:ef:45:
df:ce:06:aa:d9:1d:b1:cf:ba:22:2e:de:29:ce:1c:eb:be:e6:
ad:0b:bc:b1:73:21:ae:60:48:62:4b:6b:74:8f:a9:65:35:2a:
6a:e7:b5:37:27:01:6f:52:43:a5:2e:58:3e:f1:19:36:0e:05:
11:27:d4:4b:6a:76:4b:71:61:51:81:46:c0:24:3e:38:d5:22:
94:67:85:d1:69:b9:25:75:21:77:db:d1:84:31:cb:36:4a:a2:
ce:0b:c9:6a:5b:d1:ab:56:84:ab:b1:4d:84:c1:67:d9:4a:c3:
37:ba:12:bf:1c:75:8b:37:34:67:3e:9b:c3:77:fe:c4:f6:05:
c4:c2:7b:cc:66:2c:33:df:9c:ef:d1:fe:43:c4:40:d1:30:0c:
90:9e:3f:d1:08:1b:6a:c5:41:58:09:78:1b:35:97:ab:a6:df:
c4:60:71:ca:22:e2:ab:d0:a8:46:f8:30:bf:01:2c:77:8a:6a:
2c:93:d8:8b:43:08:64:4e:5a:26:df:bc:76:f1:1b:d3:d2:c3:
e6:5a:b8:52:d4:8c:b6:0f:bf:31:ad:5f:1f:9c:ec:39:01:04:
e4:b3:bc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:24 2026 by rpki-client