Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
File: dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft (raw, json)
Hash identifier: MT85+0fSQPP+YEEjncqC8FDrDBiWnE/RWV8xdxioElw=
Subject key identifier: F9:BD:FE:CF:8D:B0:E6:E4:52:68:F1:4C:C0:76:C8:5C:32:B2:89:A9
Authority key identifier: 74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
Certificate issuer: /CN=742e571d0006fe7f660b0308ccc61a1699e34917
Certificate serial: 019D3865D4F1277EE207CA2FC63924F65CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:30 +0000
Manifest this update: Sun 29 Mar 2026 07:01:30 +0000
Manifest next update: Mon 30 Mar 2026 07:01:30 +0000
Files and hashes: 1: dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl (hash: 626Gu0AExOEF1icOnceYvg8d7WKll9AJv7E6hUYhrzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d4:f1:27:7e:e2:07:ca:2f:c6:39:24:f6:5c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e571d0006fe7f660b0308ccc61a1699e34917
Validity
Not Before: Mar 29 07:01:30 2026 GMT
Not After : Mar 30 07:01:30 2026 GMT
Subject: CN=f9bdfecf8db0e6e45268f14cc076c85c32b289a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:b4:94:e8:29:2d:46:cd:08:c7:bc:2e:d4:
b4:58:dd:70:10:89:1a:98:1c:e9:cb:04:ff:b4:06:
68:5e:4c:c3:6c:f6:28:3e:67:e5:87:d0:35:98:ae:
17:cb:3a:0a:0e:29:aa:86:cb:4b:96:e5:7e:21:59:
a3:e1:c4:cb:bf:00:56:b2:83:5b:8d:c6:41:69:11:
64:94:48:c9:4c:d3:de:ce:a3:48:9d:5b:aa:0a:bd:
23:90:8e:2f:ea:fb:77:68:bf:55:4e:2b:68:e2:91:
4c:6e:76:ae:24:a1:3d:96:44:ad:0f:94:16:8f:b4:
53:93:b9:21:0a:fc:07:7a:df:a9:5b:17:10:4e:2d:
45:15:af:b6:df:47:e7:3b:8b:35:8c:f6:d7:6b:17:
fb:49:c9:52:2a:44:26:db:49:5b:ed:f8:7b:e3:78:
ba:68:78:04:b6:df:c1:d2:d6:d1:8b:91:56:8f:2c:
f7:3d:0b:47:40:25:18:01:22:67:e3:c5:f9:5e:71:
a1:a6:c6:9c:ee:2e:4d:93:d8:13:50:3a:15:f4:79:
ef:bd:08:ba:46:b1:6a:a5:7e:8c:cd:29:0b:03:92:
7c:e4:26:cc:75:a7:38:0b:ed:e9:31:a5:9d:e6:86:
e4:85:6e:80:4c:d7:3f:b9:e0:ef:c7:23:7e:19:b4:
09:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BD:FE:CF:8D:B0:E6:E4:52:68:F1:4C:C0:76:C8:5C:32:B2:89:A9
X509v3 Authority Key Identifier:
keyid:74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e8:84:ac:c1:04:7d:e4:50:ae:88:17:6c:08:ef:1d:85:e6:
de:2d:4f:89:c5:78:6c:5c:3c:40:47:d6:d3:93:af:29:ff:fa:
d6:75:85:28:01:ed:b4:0f:79:c9:ae:df:4b:f7:6f:59:72:ba:
4c:09:59:26:58:ce:85:0e:bd:fd:81:8a:1e:40:16:6e:d5:e0:
c3:6f:e2:2c:29:60:e3:51:f0:1f:5c:65:2f:8c:59:6d:66:6d:
aa:d0:a5:22:3f:6c:68:d1:ad:bb:e8:8d:b3:34:c4:ec:d0:e1:
64:47:71:b8:24:18:91:97:54:d1:2f:3d:cd:df:01:51:8b:90:
4b:1b:a4:af:ed:9a:14:2c:79:18:43:a5:22:dd:17:e9:58:d7:
c7:d1:7e:8c:37:92:d4:7a:26:9b:e1:c5:ef:95:d5:1d:68:7f:
68:4d:f8:8c:82:a3:5b:20:bc:76:f3:c1:03:26:27:18:28:74:
0f:fc:c5:d0:3f:55:e1:56:6e:f2:ba:2e:41:36:da:40:23:94:
22:37:a8:d6:61:1a:34:6f:5b:cd:dc:66:f7:df:96:3b:03:5e:
18:37:d7:79:64:27:e3:89:df:d6:2b:99:f4:d3:8e:35:20:f6:
39:66:b8:47:4a:39:f7:58:e7:7e:6d:76:cd:8c:e1:29:b7:31:
18:fd:ae:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:34 2026 by rpki-client