Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft
File: dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft (raw, json)
Hash identifier: 7Cy79eh9TfOsUQdK5UV0FnFzPzpPd2mmbdlBsTEChI4=
Subject key identifier: 25:4E:5D:89:05:5C:66:D1:F2:92:70:BE:40:38:D4:FF:BE:24:D4:8D
Authority key identifier: 75:38:C4:79:0D:6D:D9:3B:93:0E:5C:DD:20:F5:03:E2:02:91:F7:B4
Certificate issuer: /CN=7538c4790d6dd93b930e5cdd20f503e20291f7b4
Certificate serial: 019D3A1C51306186AF1EFB25C904A1210D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft
Manifest number: 023A
Signing time: Sun 29 Mar 2026 15:00:27 +0000
Manifest this update: Sun 29 Mar 2026 15:00:27 +0000
Manifest next update: Mon 30 Mar 2026 15:00:27 +0000
Files and hashes: 1: dTjEeQ1t2TuTDlzdIPUD4gKR97Q.crl (hash: 9WS0FywfJWI2SziXkcv1ywAJTlBIx+Jns3QU6vlG0VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:51:30:61:86:af:1e:fb:25:c9:04:a1:21:0d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7538c4790d6dd93b930e5cdd20f503e20291f7b4
Validity
Not Before: Mar 29 15:00:27 2026 GMT
Not After : Mar 30 15:00:27 2026 GMT
Subject: CN=254e5d89055c66d1f29270be4038d4ffbe24d48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:87:57:2c:1e:c8:4b:cb:99:48:4f:86:ee:f9:
9d:3d:c5:de:76:67:62:56:56:1a:06:03:07:cd:08:
a6:bd:b2:92:e7:46:cf:55:86:f2:71:25:a2:04:5d:
d1:ff:44:df:e8:63:79:62:66:e9:d7:9e:24:44:92:
12:85:75:41:d1:63:11:b3:16:99:27:3b:16:f3:30:
bf:2e:3a:9a:0e:97:11:cd:a4:88:32:7b:14:92:c3:
9e:de:bc:6f:dc:c0:72:cb:b3:3d:19:07:f1:32:2b:
d2:67:d3:c6:fb:3e:bd:98:ec:01:c2:3c:1f:15:47:
19:ab:76:6a:2a:b3:5b:51:46:15:e2:35:2e:46:7a:
fd:af:a7:19:d5:12:5a:c2:42:95:80:ee:db:13:a9:
73:5f:97:29:a6:9c:4e:08:98:d1:27:9b:0f:59:db:
1f:44:f8:89:67:c9:af:f3:7b:2f:20:c8:b7:da:4b:
10:7c:37:b3:51:10:3e:10:8b:a6:9a:b9:c7:8e:b8:
b6:95:08:25:14:16:6f:4c:59:15:f6:f8:7b:21:60:
a0:a8:3d:15:8b:09:6f:30:c1:7c:b9:cb:29:b7:49:
7b:46:93:ac:e0:0e:75:41:bd:f8:70:c8:69:19:9d:
81:19:a0:17:df:b7:78:38:b8:bf:ac:20:85:0a:9f:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4E:5D:89:05:5C:66:D1:F2:92:70:BE:40:38:D4:FF:BE:24:D4:8D
X509v3 Authority Key Identifier:
keyid:75:38:C4:79:0D:6D:D9:3B:93:0E:5C:DD:20:F5:03:E2:02:91:F7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0a:02:e9:e5:d7:bb:c8:6f:3d:3b:24:cb:82:5d:d2:b9:8c:
3c:12:93:a5:fa:49:d1:18:99:f0:3b:4f:25:ef:2a:ef:e3:43:
ba:52:c0:b4:5d:74:01:ea:3c:9e:01:a6:f7:7c:87:cc:6a:e5:
54:33:f0:a1:f0:1d:c6:a1:4c:6a:f9:5f:d0:84:8d:b6:1c:dd:
60:45:17:15:4d:3c:c6:34:26:9b:d3:39:15:c8:ee:d7:9d:ed:
a4:6d:7f:d4:0a:d5:c1:4c:8c:5d:c5:4e:39:bf:49:9b:9b:bd:
87:98:14:e9:15:49:c6:2a:7e:b1:71:e3:25:d9:95:f5:c0:a5:
16:35:0c:d6:40:11:1c:11:bd:36:f9:84:d3:11:79:f8:bc:a1:
29:3b:b8:16:23:8f:10:3e:64:b5:61:7e:89:d4:eb:b5:08:cf:
14:ac:d0:f6:c9:f6:46:f9:65:d2:d1:79:4a:67:15:07:47:91:
d6:68:40:7f:af:1a:17:81:a6:fc:f2:9c:d5:ad:6a:4e:8c:90:
3a:c0:30:34:cf:fd:a6:e9:01:16:5d:a3:cd:3a:d9:6d:68:ac:
5d:71:3e:2d:56:4f:df:8c:87:30:f4:f8:56:65:7b:f8:03:2a:
c3:ac:c1:73:fd:03:8c:e2:84:d4:6d:80:78:b1:e6:fe:8b:a0:
7d:a6:f1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:00 2026 by rpki-client