Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
File: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft (raw, json)
Hash identifier: gaGqVMTc8Nnn+/fSvfARaLGRc9IidmnAlHJ13f9m29k=
Subject key identifier: F0:BA:99:81:85:51:16:5A:AD:A2:6F:A7:DA:DE:AA:19:2C:53:E7:17
Authority key identifier: 0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
Certificate issuer: /CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Certificate serial: 019D382DE467EFD4D9C152AA63AF1D8204DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 06:00:24 +0000
Manifest this update: Sun 29 Mar 2026 06:00:24 +0000
Manifest next update: Mon 30 Mar 2026 06:00:24 +0000
Files and hashes: 1: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl (hash: pVkoOtZRLjJeUs/2PwqT6W8KuoSA/AfAZyX53yStRKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e4:67:ef:d4:d9:c1:52:aa:63:af:1d:82:04:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Validity
Not Before: Mar 29 06:00:24 2026 GMT
Not After : Mar 30 06:00:24 2026 GMT
Subject: CN=f0ba99818551165aada26fa7dadeaa192c53e717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b6:dd:f3:e9:b1:13:3d:eb:27:24:0b:76:b2:
08:25:33:06:d0:d8:ce:98:1f:a1:16:90:5c:27:1a:
10:43:88:f2:f3:60:82:ea:b1:ff:d7:77:8b:03:79:
ee:ee:a6:83:d5:75:54:8b:c6:3d:a3:cb:42:18:e2:
d6:d6:90:5a:d3:57:52:ef:e2:e2:be:e0:1a:d8:2b:
d6:7f:31:a8:ac:9b:8e:48:22:7e:6c:73:25:d6:d9:
1b:af:b3:4f:54:3e:ce:9d:35:2e:b5:b0:ce:a6:c7:
32:d0:57:f9:ec:ab:9c:6e:f7:52:c4:d3:e1:d4:2a:
89:d8:f8:1f:73:08:41:24:84:e1:39:b4:c0:88:70:
da:42:f4:8b:a9:36:24:af:2f:50:a1:c1:b6:7c:2f:
c8:fe:be:09:ef:6e:fd:64:0f:96:23:70:b8:87:53:
1f:f7:81:d9:51:0b:7c:16:e5:48:e7:bb:8f:d3:c9:
86:a8:be:9f:50:19:b1:e1:43:ce:99:5b:55:4b:1c:
25:21:24:75:43:43:80:f4:f3:0b:eb:9c:67:79:d1:
ac:b6:09:17:02:5e:7b:36:c0:16:07:20:52:1f:53:
14:b8:3f:03:44:6d:32:29:fe:e3:6b:52:9f:8c:10:
c0:72:d2:a1:6e:35:c2:9d:65:ac:f6:ef:49:3b:2a:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BA:99:81:85:51:16:5A:AD:A2:6F:A7:DA:DE:AA:19:2C:53:E7:17
X509v3 Authority Key Identifier:
keyid:0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1a:a4:bc:c7:8e:93:e5:88:6b:dd:46:06:7f:86:44:fc:6c:
dc:3c:60:d5:c9:ea:d1:7e:32:40:7d:6f:84:ac:86:74:ef:89:
f2:73:d9:ab:2f:5f:d5:5b:7c:3e:ae:23:c9:76:3d:af:f7:fe:
b7:83:63:50:d2:31:3d:89:20:bc:19:a0:67:6d:6c:d1:d4:69:
27:d4:6a:89:bc:0c:29:89:d3:cd:49:c8:23:66:dc:c7:42:a1:
e7:73:66:ec:72:7c:cb:1f:97:20:5e:4f:39:43:6e:9f:17:48:
e5:7e:53:bc:a2:70:51:a2:d2:b1:d6:a1:11:b1:96:5e:2a:52:
44:3f:0f:5c:27:30:d0:cf:36:41:ff:f6:1f:d1:fe:07:68:c2:
4b:6e:cf:f9:ee:0c:56:a2:35:19:c5:86:7e:b2:b2:ae:df:69:
c2:3a:5b:63:4d:3f:55:f2:b9:58:72:b8:f3:6a:2e:d7:b2:57:
fd:a9:65:70:fb:c7:8e:85:cd:d9:ca:b9:e4:c1:1e:8f:9e:94:
c3:9b:f8:ce:8c:20:a0:cd:0b:52:b1:48:20:c8:e7:47:ec:6b:
27:79:cf:66:12:73:2a:73:89:f9:fc:26:82:5e:50:76:94:ee:
b7:24:f4:3c:65:fa:64:47:80:f1:04:a7:bc:bd:68:7e:24:48:
e0:65:f6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:03 2026 by rpki-client