Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
File: dCadQgSZl1rpNPNM45WTgRTJuns.mft (raw, json)
Hash identifier: oVhO2PC4AbfoABqHqzw4JSHv7vrjxeZqPSWYIvAVG0s=
Subject key identifier: 3B:90:AD:69:F8:09:36:25:14:E8:84:15:26:B3:0C:B8:5F:08:FA:1E
Authority key identifier: 74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B
Certificate issuer: /CN=74269d420499975ae934f34ce395938114c9ba7b
Certificate serial: 019D38660754324697CBD68685E6C1AEC48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
Manifest number: 13E3
Signing time: Sun 29 Mar 2026 07:01:43 +0000
Manifest this update: Sun 29 Mar 2026 07:01:43 +0000
Manifest next update: Mon 30 Mar 2026 07:01:43 +0000
Files and hashes: 1: dCadQgSZl1rpNPNM45WTgRTJuns.crl (hash: jHii3Mapwe9GT8UkQbpZd5Ny9TRM2tv1i3uXEybtJEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:07:54:32:46:97:cb:d6:86:85:e6:c1:ae:c4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74269d420499975ae934f34ce395938114c9ba7b
Validity
Not Before: Mar 29 07:01:43 2026 GMT
Not After : Mar 30 07:01:43 2026 GMT
Subject: CN=3b90ad69f809362514e8841526b30cb85f08fa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:ae:e4:4f:c6:cb:f4:44:d5:60:0d:b2:ce:
11:0a:8a:00:51:0e:97:0d:65:62:33:cc:4e:10:11:
ff:cf:25:89:58:70:02:f9:78:0a:fa:ae:f7:66:95:
db:3e:0f:56:a6:58:0f:19:5b:7f:1f:76:22:3a:85:
38:e5:33:b6:e9:94:de:19:15:a3:32:c0:9e:0d:c6:
a3:33:4d:22:40:a4:a3:df:93:65:c4:a7:45:c1:5e:
51:35:c0:08:6b:44:9a:63:f2:4c:9f:e2:71:53:ef:
ec:ba:fd:69:ee:2e:74:48:0b:a4:f0:9c:ce:08:9b:
23:d0:3c:28:b6:1c:3b:45:40:9a:db:86:ad:ac:23:
d6:95:51:ee:bc:61:34:8d:f3:53:6d:dc:4d:90:51:
aa:07:21:7b:13:95:b2:d8:e1:86:06:89:9b:0e:03:
12:50:99:8b:b7:a6:94:a7:0e:6d:53:8e:f7:ae:4f:
73:34:7d:e1:93:6f:79:7b:10:72:a1:06:4a:3d:95:
4a:fe:1e:e3:57:b8:8c:f7:a7:43:f9:14:e9:30:10:
8b:f1:04:f8:f8:53:84:6a:94:d5:28:02:09:0d:54:
a4:e0:a5:9c:33:2a:b4:ab:2d:68:42:a9:05:73:31:
c7:d0:73:54:dd:ce:52:ac:ac:4e:3a:24:30:63:c1:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:90:AD:69:F8:09:36:25:14:E8:84:15:26:B3:0C:B8:5F:08:FA:1E
X509v3 Authority Key Identifier:
keyid:74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:67:c8:9e:f0:c5:b4:8a:10:b3:67:27:52:73:90:13:0c:70:
2a:80:f0:c1:16:3c:fd:5e:92:82:90:fe:f8:8e:d5:55:1a:a3:
a0:4f:00:17:03:5f:0c:a6:77:7a:9a:3a:bd:6a:cd:41:37:14:
36:72:54:fb:46:70:ad:58:d8:3c:80:fb:65:92:dc:e7:3e:5d:
85:fc:d4:28:d3:f2:91:4c:b9:53:5b:d2:6f:95:86:39:1e:39:
b7:3f:9a:8f:6d:15:de:dc:0f:bb:91:3a:0d:6e:a4:69:79:69:
60:93:6b:31:a5:22:8b:7e:d6:66:21:69:61:59:dc:01:f6:90:
ae:ac:22:26:3c:66:a1:82:ab:76:de:81:0d:80:c9:1e:1f:7f:
76:4b:b5:74:5b:1c:a4:ff:83:33:77:21:92:44:98:62:c1:e7:
6a:0f:32:6f:af:c1:ea:a6:85:c5:a1:fe:e1:23:99:0c:4b:a7:
95:fa:f4:3d:5d:86:60:42:0a:4f:6f:19:b5:96:4c:61:09:c2:
bc:52:4d:07:7e:12:7f:91:b6:c9:30:7a:2f:43:38:6c:bb:b2:
4a:71:76:a2:4e:61:9f:32:fe:2a:9e:19:1d:c6:8e:24:9a:85:
e9:9f:2a:ae:c5:c6:b2:0f:03:05:7d:f3:39:0a:7f:60:aa:42:
c6:90:cb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:36 2026 by rpki-client