Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
File: DZxWoYyYei0aLnBEt-MbMhv3rBY.mft (raw, json)
Hash identifier: LMnc02aazOVVCq9Ad9/DCOKmZ46ifuPkbsfadvzeI3o=
Subject key identifier: 71:74:C7:16:51:52:0F:81:22:01:EB:34:C0:25:5A:FD:21:E8:2C:9B
Authority key identifier: 0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
Certificate issuer: /CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Certificate serial: 01A13DB7D98AA40B9126DD8AE5AC5ECC614E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
Manifest number: 0C35
Signing time: Thu 15 Oct 2026 04:00:21 +0000
Manifest this update: Thu 15 Oct 2026 04:00:21 +0000
Manifest next update: Fri 16 Oct 2026 04:00:21 +0000
Files and hashes: 1: DZxWoYyYei0aLnBEt-MbMhv3rBY.crl (hash: vhidDaaC3GoB3cYzSvRv4ojd/jyBhZEFnf6tTe0yRcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:d9:8a:a4:0b:91:26:dd:8a:e5:ac:5e:cc:61:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Validity
Not Before: Oct 15 04:00:21 2026 GMT
Not After : Oct 16 04:00:21 2026 GMT
Subject: CN=7174c71651520f812201eb34c0255afd21e82c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:86:9e:97:34:2a:38:24:f8:02:f6:20:68:
5d:53:7c:54:d7:a6:e3:33:97:53:03:72:e2:44:dc:
42:33:c2:e2:a4:df:35:55:60:3e:09:56:83:c0:72:
00:aa:90:1a:39:48:7a:07:9c:0b:ce:d9:d3:cf:ce:
82:44:6f:41:e4:9f:e4:ec:4f:d5:5e:f5:6c:42:2e:
90:0c:0d:47:97:46:a3:c3:5a:5e:05:36:b3:80:4f:
03:d9:4b:42:47:37:44:76:fc:75:4f:de:96:7b:75:
a3:c3:60:17:9f:34:6f:32:7f:ca:67:9a:57:60:d7:
db:50:25:6f:07:14:47:b8:08:0b:7d:cb:76:5e:0c:
1a:64:55:b4:c2:76:99:4a:89:b6:c1:a0:9a:40:18:
f6:ae:09:68:7b:d9:5c:df:45:34:47:54:08:ea:c6:
fa:91:34:15:d5:6c:c9:a0:b5:82:f2:c3:fb:83:5c:
b7:3f:00:b8:c2:5a:89:f4:34:4e:0e:27:eb:0e:70:
ec:5b:1e:dd:8c:15:78:ac:e2:ba:0a:94:54:a3:fd:
e6:2f:3d:a7:c9:51:7e:ce:3a:86:65:2a:d1:4f:76:
bf:da:3a:a3:00:b9:47:e5:92:8b:3e:72:0f:b1:ce:
08:9f:6a:61:dc:53:04:bd:47:68:7d:d6:1f:2c:1d:
66:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:74:C7:16:51:52:0F:81:22:01:EB:34:C0:25:5A:FD:21:E8:2C:9B
X509v3 Authority Key Identifier:
keyid:0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:31:47:8e:0d:d5:8a:9f:0c:f8:ce:4a:6c:5f:d6:78:80:ab:
6e:e6:05:c6:07:b6:7d:7f:0c:80:2b:2f:ff:40:4a:27:09:33:
d2:3d:32:c2:93:9b:f6:6b:e8:51:64:60:41:19:d3:bc:2e:d7:
24:19:78:0c:09:b7:cb:65:5d:1b:70:e9:c7:0d:15:45:63:49:
ed:0c:03:3e:60:a8:8f:38:b1:a8:56:a3:6a:d1:ea:8d:23:4e:
b1:f6:0c:2a:0c:7d:57:bb:4e:8e:4e:91:1c:72:30:cf:be:da:
93:4c:4b:3e:12:ad:d9:a2:6f:71:7a:d6:92:13:b1:62:e7:e1:
32:1c:c4:62:a5:4d:00:0f:5b:49:9d:f6:7d:f1:2d:ab:89:cb:
4d:2c:79:03:25:7e:d8:99:39:9d:99:f0:ee:89:23:68:6f:02:
48:66:c1:62:c7:d2:27:9b:e5:b9:fa:63:dc:ac:21:d4:83:e0:
3a:9e:ce:79:9d:6e:bc:00:a3:98:24:ca:02:e7:e3:5e:5f:10:
87:ad:8e:9e:7e:8e:d0:36:ba:06:ef:b9:ff:d9:ce:98:5d:fa:
35:5e:a4:79:12:67:73:94:25:ab:09:56:d3:59:6f:c5:63:81:
09:63:89:85:e4:f0:0c:42:c6:34:20:1d:f5:d8:f7:aa:0a:67:
89:94:77:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:43 2026 by rpki-client