Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: ZRWiuDIxvAXkZCMr+83uzbAlUE/T03tndRbjAo4Fvkw=
Subject key identifier: 06:19:E8:7A:28:CB:2D:EE:4B:53:78:76:9A:25:98:64:D8:6F:F5:A0
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 019E2F977466476D50C43BDC989032087319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 190A
Signing time: Sat 16 May 2026 07:01:55 +0000
Manifest this update: Sat 16 May 2026 07:01:55 +0000
Manifest next update: Sun 17 May 2026 07:01:55 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: FE3iNbOaYvpwnNXxSEtL7edzYUgkB7azMqBn9asNA2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:74:66:47:6d:50:c4:3b:dc:98:90:32:08:73:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: May 16 07:01:55 2026 GMT
Not After : May 17 07:01:55 2026 GMT
Subject: CN=0619e87a28cb2dee4b5378769a259864d86ff5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:29:71:5f:af:fb:f2:82:82:02:1d:f5:82:02:
27:3d:63:d9:81:d4:78:95:ba:6d:c1:6d:d1:ee:37:
48:78:18:34:ac:6c:45:34:85:d0:26:e7:da:9a:62:
e3:b9:86:82:22:da:5f:1b:53:e7:09:66:96:f8:a0:
95:66:b6:43:d7:94:9f:98:9f:db:96:fa:86:06:60:
14:22:de:a4:12:91:5b:2e:1b:8e:39:9e:6f:3b:73:
f9:9b:04:50:ae:20:c8:c3:94:70:95:fd:46:40:9f:
6c:c2:1d:bb:63:d1:97:86:7a:b2:de:32:83:b6:9a:
1c:0a:54:e5:95:92:06:d5:3b:e2:70:cf:4f:03:f2:
aa:bc:f8:e8:e1:46:63:6c:27:b5:40:35:8a:90:72:
cd:f2:af:b6:b3:da:ea:e9:9e:cf:7e:71:0f:35:11:
40:6c:1c:fa:cd:6e:c4:8e:a5:1f:03:e6:d1:ef:2f:
92:8a:6d:34:5c:27:8b:db:18:f1:93:b7:d2:5b:ea:
60:dd:aa:9f:6c:06:b5:d1:61:08:84:04:25:44:31:
b1:19:d5:1a:6c:7a:f4:90:87:2b:53:6f:bc:0b:d6:
f8:16:20:4a:ee:fc:ce:bb:d8:1b:76:f3:53:49:33:
a0:14:c4:0d:c8:7b:64:8a:71:e5:2e:49:cb:9a:b7:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:19:E8:7A:28:CB:2D:EE:4B:53:78:76:9A:25:98:64:D8:6F:F5:A0
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ef:ef:c7:6d:1c:67:5b:32:cb:bb:77:ee:09:63:f6:e2:6d:
49:d1:c1:c5:71:bc:3d:50:b0:4c:a1:91:f1:a6:5f:dd:cf:2d:
ca:32:be:b5:69:c5:a7:b9:03:73:c5:de:43:b9:e5:63:78:59:
6a:fc:87:fb:04:78:31:cc:30:04:49:a3:bd:53:34:70:3c:07:
68:b9:91:54:8b:7f:36:a1:3a:c1:b3:3d:5f:c6:63:da:e9:a5:
0b:f2:19:33:eb:00:46:72:fd:38:3e:fb:a6:5b:e1:7e:2f:ef:
68:a9:38:fe:c6:09:0b:a0:62:6f:a5:85:fd:32:66:73:0d:eb:
b0:67:ce:39:e6:d6:ca:d1:1e:be:46:21:f0:eb:09:44:20:a0:
17:f8:01:f0:e1:97:72:f5:29:be:58:8e:26:4b:65:58:78:6d:
f0:43:6a:38:b0:e3:63:da:5a:6c:65:46:bf:db:ed:1d:98:b8:
76:35:5f:32:61:1c:a2:c6:2c:f9:de:87:36:7e:f6:2e:ea:d1:
96:2c:82:64:c6:18:32:c3:3e:90:e4:a9:d0:7f:cf:71:03:2a:
d5:74:d1:97:15:9b:31:6c:8e:07:ae:68:6c:ee:b5:64:cf:7a:
a2:b3:27:d1:6f:22:48:ce:e7:27:8f:4f:b3:d0:b5:53:0c:e2:
92:57:1a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:45 2026 by rpki-client