Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
File: DZxWoYyYei0aLnBEt-MbMhv3rBY.mft (raw, json)
Hash identifier: WTgXVT28mi9hf+6PJDaO0EL6FivKCbhr0A9ZQ5nH6dQ=
Subject key identifier: 6E:31:2D:F2:87:CF:FE:20:8E:D3:DB:D6:1A:6F:2D:00:01:78:40:8A
Authority key identifier: 0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
Certificate issuer: /CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Certificate serial: 019D3865CB5B6AF26F8E6A9F52D429D0F69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
Manifest number: 0A20
Signing time: Sun 29 Mar 2026 07:01:28 +0000
Manifest this update: Sun 29 Mar 2026 07:01:28 +0000
Manifest next update: Mon 30 Mar 2026 07:01:28 +0000
Files and hashes: 1: DZxWoYyYei0aLnBEt-MbMhv3rBY.crl (hash: CmserLrUZJBdHmQ9HJU1hcj4A9qYD8pA3KF9uT9I7Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:cb:5b:6a:f2:6f:8e:6a:9f:52:d4:29:d0:f6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Validity
Not Before: Mar 29 07:01:28 2026 GMT
Not After : Mar 30 07:01:28 2026 GMT
Subject: CN=6e312df287cffe208ed3dbd61a6f2d000178408a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:ea:f9:c2:b5:99:2b:bd:ad:41:7c:8e:fa:
3e:14:4f:fc:2e:1d:f2:32:a1:88:42:19:b7:56:82:
d1:ea:69:0f:cf:f8:cf:0c:b7:cc:7b:dd:0e:d3:75:
ff:76:7b:93:66:2b:8b:a6:d1:6d:d9:77:cb:80:52:
d4:e6:07:04:27:af:cd:f2:2e:aa:89:32:92:ff:35:
6e:ab:20:e9:40:15:d5:dc:db:ab:d0:2d:1f:75:6e:
3b:18:78:a4:0c:58:66:7b:ea:7b:d6:74:82:23:2c:
67:26:45:59:a7:39:ce:8a:d4:f7:9d:0c:56:cd:84:
25:3a:ab:60:ae:00:7d:64:ab:91:c3:2f:6b:c0:a9:
38:1c:ac:d6:2d:82:1a:04:67:b5:ed:65:48:fe:43:
26:dd:fb:e7:0c:f6:d8:45:9b:9b:12:78:8e:5a:5b:
fb:e0:fc:f7:d2:a3:b6:11:08:25:c4:29:5c:5e:f0:
a5:f4:1c:89:5f:da:74:c4:23:4b:fa:7b:2b:45:b2:
f9:98:a8:15:d0:8c:49:fa:82:92:30:fe:6c:47:fd:
c2:6c:06:db:f5:ad:f0:0a:4f:d8:6e:80:bd:a6:7e:
3c:b8:d2:f6:cd:13:af:a9:97:41:31:16:76:6f:99:
a6:b0:f2:ec:30:06:00:40:bc:46:16:46:1e:51:94:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:31:2D:F2:87:CF:FE:20:8E:D3:DB:D6:1A:6F:2D:00:01:78:40:8A
X509v3 Authority Key Identifier:
keyid:0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b1:c1:88:b2:84:ce:37:3c:5f:4b:ed:a0:f6:48:52:71:26:
4b:0f:87:ad:92:86:a7:4c:75:0d:31:21:5b:cf:db:4f:ba:ee:
1d:57:28:f2:70:ee:0d:9d:66:35:b4:2a:df:ba:5d:15:52:61:
ec:dd:22:35:ab:78:5d:3b:c7:7d:6a:a2:58:2c:93:bc:0a:e6:
54:32:cd:6e:0e:bf:74:4d:cc:cb:77:89:d1:de:ce:54:24:90:
e8:79:2a:82:34:e7:0b:e9:4e:36:35:f6:07:09:82:60:6b:8c:
a4:b3:fa:0a:57:16:36:48:ff:46:0c:92:3e:b7:31:00:68:63:
14:b6:90:6d:aa:0f:5e:6d:1e:3e:ab:e0:c1:d1:60:7b:93:bc:
2d:05:97:8d:c4:0b:8a:c9:53:c2:84:df:5b:fe:82:1a:a0:1b:
e6:35:75:4c:e2:33:2d:5b:c6:17:a0:d1:7e:b0:90:02:ec:d1:
84:a3:92:3b:f3:59:9c:34:8b:53:c7:4b:41:8e:6c:98:71:9b:
d8:5e:ce:bc:9d:2b:0c:f8:1f:2f:c5:c8:e9:95:72:6c:94:d6:
59:a5:2f:64:78:af:4e:f4:35:f7:47:66:ea:1b:38:55:d9:8b:
e6:ba:9c:67:9e:c5:40:5a:98:51:77:e8:37:93:24:8a:af:cf:
9c:8f:80:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:18 2026 by rpki-client