Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
File: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft (raw, json)
Hash identifier: eNpM/C1/1/VFjDQaCm5gtfJUk8YY2F6vLBYHeJMXwpA=
Subject key identifier: 67:79:1C:06:83:8E:EA:11:53:E2:0C:F5:3D:25:D1:90:08:B8:5A:B4
Authority key identifier: 0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
Certificate issuer: /CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Certificate serial: 019F190CD23AD4F7D4D102DD6C9235F4C0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
Manifest number: 1919
Signing time: Tue 30 Jun 2026 15:01:38 +0000
Manifest this update: Tue 30 Jun 2026 15:01:38 +0000
Manifest next update: Wed 01 Jul 2026 15:01:38 +0000
Files and hashes: 1: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl (hash: 5IQ5hgavZRSGbswn2/mWidB+RKj9rEbvXdQc1pybz+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:d2:3a:d4:f7:d4:d1:02:dd:6c:92:35:f4:c0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Validity
Not Before: Jun 30 15:01:38 2026 GMT
Not After : Jul 1 15:01:38 2026 GMT
Subject: CN=67791c06838eea1153e20cf53d25d19008b85ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:95:3e:13:5d:5f:6f:a7:19:6b:6a:d1:da:
14:6b:59:f6:97:26:a0:5f:f7:46:f3:97:b9:8d:3f:
8f:ce:6f:8f:09:09:a4:4b:8d:9d:b6:f5:da:6b:ad:
5f:b0:0b:2d:46:9c:64:e8:be:2e:8c:f8:43:04:a8:
b0:65:a0:56:f8:ca:d0:f1:93:39:96:39:b9:6d:7c:
ac:ad:f7:a8:50:dc:ee:ca:1c:a9:f0:1f:3f:a0:15:
de:9f:f1:8f:94:68:3f:1d:aa:96:be:df:a8:ba:5e:
63:4d:ec:a2:7e:75:b9:10:6a:84:2b:13:9c:06:f5:
44:72:b7:9d:43:60:73:e8:ba:51:c0:d0:3e:ad:e7:
3d:76:7e:a0:f0:91:80:77:81:a7:51:67:a1:a7:93:
31:45:f1:6e:87:f5:4b:b1:4c:ea:90:7e:c9:62:93:
fb:2b:d4:6d:3e:26:38:aa:0c:4c:1d:c2:b3:89:e7:
fb:7c:00:a5:05:93:f9:5d:18:85:df:1a:2b:a9:73:
c0:4b:52:ef:69:d1:f0:ae:0d:74:14:c8:56:fe:88:
55:98:f9:c5:05:96:87:00:df:e6:0f:4e:5d:88:8e:
ca:be:03:20:e4:dc:66:f1:18:ac:f3:69:56:a6:04:
ba:4c:b4:e5:73:9b:21:ef:55:dc:d7:2f:dd:38:ed:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:79:1C:06:83:8E:EA:11:53:E2:0C:F5:3D:25:D1:90:08:B8:5A:B4
X509v3 Authority Key Identifier:
keyid:0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1e:31:3a:8c:b7:bf:78:e6:3d:33:4a:38:b7:29:85:f5:a6:
79:68:eb:5b:f6:18:1d:36:bc:65:a5:a1:88:9c:87:ea:f8:70:
4c:ff:4b:4d:a7:19:5a:4a:9e:a0:20:c9:59:df:57:b9:30:d8:
9f:84:57:0d:57:bd:7e:dd:f0:1d:b1:c0:b8:df:2b:38:bd:88:
5b:72:41:8a:f8:09:b3:85:b3:70:88:4c:58:bb:37:a7:c1:42:
5f:ab:9d:d8:a1:35:74:49:06:27:c0:ea:29:7c:49:05:6f:aa:
8a:38:8b:14:2f:27:90:0d:d9:74:91:0a:16:2d:b7:5a:9c:da:
0f:8e:40:56:60:17:67:be:0f:7b:99:9f:51:5b:ab:56:ee:bf:
4b:ae:f6:4d:72:ef:af:0a:e8:cb:ba:5b:05:f3:cb:da:72:cc:
bb:f0:e8:5e:ad:c8:17:a9:88:ef:08:09:40:ed:6f:4f:e3:d5:
0e:dc:db:b2:5d:e6:ab:a7:b6:cd:c9:65:67:78:60:30:b9:11:
f5:b0:e1:71:fa:68:7f:ca:dd:3b:9a:85:5b:b5:fe:5c:5e:cd:
da:89:72:a5:d4:a1:e0:42:c4:96:01:35:b7:c6:75:2e:6d:4c:
e4:81:bd:71:b6:95:51:86:3e:b2:6a:15:12:c5:76:e1:65:e8:
9b:35:92:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:38:05 2026 by rpki-client