Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
File: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft (raw, json)
Hash identifier: X/GASg+0Kyv4tegZSAUcu2XNKEVZ4V2JWkyJ9ydkvCM=
Subject key identifier: 11:80:0A:DE:FB:5D:D7:0F:49:3B:2A:48:D5:64:A5:A5:21:B3:B9:1B
Authority key identifier: 75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7
Certificate issuer: /CN=754c57866e97aadaad75decc69d0df072d506ee7
Certificate serial: 019D37C068921F74523E36AFC7F8BCC709E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
Manifest number: 036B
Signing time: Sun 29 Mar 2026 04:00:49 +0000
Manifest this update: Sun 29 Mar 2026 04:00:49 +0000
Manifest next update: Mon 30 Mar 2026 04:00:49 +0000
Files and hashes: 1: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl (hash: B+jzSmrnQncNautUIIPikX0jja0x/i+J+2rzZndwA5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:68:92:1f:74:52:3e:36:af:c7:f8:bc:c7:09:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754c57866e97aadaad75decc69d0df072d506ee7
Validity
Not Before: Mar 29 04:00:49 2026 GMT
Not After : Mar 30 04:00:49 2026 GMT
Subject: CN=11800adefb5dd70f493b2a48d564a5a521b3b91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:e0:d1:11:bb:87:5d:01:73:d6:2a:59:9d:
32:a4:38:89:d0:9a:67:e3:f9:5c:3b:41:d1:18:c4:
e9:1c:b5:d5:b2:74:3b:03:59:c2:73:6f:42:11:29:
18:8e:54:98:7b:89:23:a3:41:50:3e:53:9a:a9:62:
b1:01:bf:38:6f:94:2e:76:25:0f:4b:b6:63:0d:dd:
0c:b5:73:5b:73:0d:d8:4b:6a:57:7a:77:1e:87:06:
0d:5e:d2:92:a1:5e:e0:0f:92:60:44:b7:df:1f:97:
37:b4:55:67:1b:29:7c:ac:67:e6:87:ba:90:33:27:
a6:81:df:d5:25:47:a5:08:39:a4:02:1a:55:fa:b1:
80:f2:c9:90:42:f1:7a:a1:9b:93:d4:c2:3d:90:ed:
86:e8:8c:1c:72:81:f1:ab:3f:a1:78:18:06:77:3d:
3e:a2:cb:9b:82:fe:56:63:a8:58:73:07:66:14:43:
71:1e:30:27:43:a8:63:49:f3:0f:a2:94:e3:61:ce:
5a:af:09:da:6d:52:5f:9d:5e:3e:d2:58:83:4c:89:
96:d8:1e:ff:4a:1f:b0:5f:8a:16:f6:25:5b:7a:d6:
7d:26:1e:79:a1:fb:e1:d4:b2:04:c6:ee:02:27:66:
6c:32:af:80:72:9c:89:ef:99:0c:0a:ff:74:50:78:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:80:0A:DE:FB:5D:D7:0F:49:3B:2A:48:D5:64:A5:A5:21:B3:B9:1B
X509v3 Authority Key Identifier:
keyid:75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:51:f0:fa:b8:a9:c7:f0:36:87:62:e0:64:be:3e:9d:1b:2c:
9b:13:c8:a6:a8:3c:a3:61:66:41:3f:05:7a:0c:e3:32:88:ed:
64:93:19:0f:c3:91:d1:5b:e1:08:45:5e:57:2f:f1:7c:6b:7d:
72:f4:41:18:ec:6f:f7:60:d3:f5:37:6e:3a:fa:c8:9f:85:f6:
59:c9:15:3a:b5:bb:b9:0f:2a:9d:da:bc:62:7b:ce:37:a5:68:
55:d3:78:31:ca:d0:4b:e3:8c:13:1e:b4:58:d3:ba:11:20:f8:
e1:f9:64:4e:60:34:4a:91:ce:41:f2:03:90:91:a0:f0:26:09:
e2:b9:d9:d0:a4:d0:a1:4e:13:a6:2d:e5:87:bf:73:5a:ae:7f:
86:24:12:55:8e:3c:02:44:05:ab:2a:5f:10:69:26:d6:97:a7:
20:7c:2e:7e:80:8f:f0:47:7e:c5:dc:47:5d:81:52:eb:95:81:
5c:97:84:d3:f0:da:73:98:e8:8f:55:64:dc:1d:ee:2b:05:45:
37:7a:be:46:0e:84:53:f1:e7:26:64:6f:e8:10:02:92:6e:b6:
27:be:a8:e7:ca:b3:01:4f:66:15:60:19:e4:d7:e6:d0:54:cd:
f9:14:84:d0:18:54:ae:2e:72:20:9c:c8:24:92:c6:b1:1a:2c:
3b:13:d0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:31 2026 by rpki-client