Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: BFeb/dy6dJpAlwYpAIzabSl8A/zV5iX7//PIfV70sPA=
Subject key identifier: 65:73:8E:7E:7D:34:BF:C0:B2:1E:59:53:EB:48:87:CA:78:02:9B:87
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 019F1943E085AF7010F5D716FF84E5B1B0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 1983
Signing time: Tue 30 Jun 2026 16:01:46 +0000
Manifest this update: Tue 30 Jun 2026 16:01:46 +0000
Manifest next update: Wed 01 Jul 2026 16:01:46 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: 27Ihv5xEMMs3Jz11rzQHTqyfwTETaZXRv1ApYZTya6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:e0:85:af:70:10:f5:d7:16:ff:84:e5:b1:b0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Jun 30 16:01:46 2026 GMT
Not After : Jul 1 16:01:46 2026 GMT
Subject: CN=65738e7e7d34bfc0b21e5953eb4887ca78029b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:64:27:25:5f:9b:78:63:a7:98:17:bb:5a:13:
92:1b:71:a2:d2:60:84:1b:34:09:69:59:84:8d:97:
a8:6c:e6:c4:eb:04:9b:d3:f2:86:43:a9:15:4f:91:
54:96:80:23:48:89:b7:76:4e:8d:8d:8c:ac:b7:86:
02:8d:69:dd:9f:24:28:8c:6b:c0:4e:f8:1b:a9:87:
38:da:4a:93:d7:ba:40:7e:63:b3:55:2c:b9:97:4a:
b4:18:7d:b5:fe:a9:17:f4:c2:69:65:37:d7:a4:47:
eb:f9:75:cb:92:52:ee:f7:d8:22:68:87:9f:b8:05:
1d:e9:0e:e7:98:91:dd:4c:2d:ca:57:35:5f:42:a5:
ad:a6:24:e7:d1:5a:58:14:50:6b:e0:e5:e6:26:a4:
15:1e:99:7f:87:a4:7d:a8:f4:9d:1d:db:8c:d8:f6:
31:28:ef:83:1c:6d:0a:14:a6:2a:55:14:ff:ae:b9:
7f:41:46:12:6a:2d:db:c1:57:fa:81:09:94:cc:bd:
cf:15:fa:75:1b:a5:5c:8d:e8:ea:41:18:55:91:b7:
72:c0:f2:75:a2:18:9b:d4:1e:13:f8:4e:dc:4b:13:
2b:bf:14:94:52:c1:6d:2b:40:e1:b9:4b:5f:4b:f1:
f6:f5:8e:ed:29:d2:98:d7:74:d1:ed:3d:7d:d6:45:
54:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:73:8E:7E:7D:34:BF:C0:B2:1E:59:53:EB:48:87:CA:78:02:9B:87
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:61:c0:ff:6d:f9:bc:72:42:29:02:79:50:cf:f8:15:c5:e4:
86:a0:a9:ba:e1:cb:e0:fa:f0:03:e4:b6:ce:90:06:fe:ac:eb:
00:d7:36:18:b3:b0:95:45:a9:db:b6:73:a9:8b:c2:2a:55:f2:
cd:83:b2:83:98:e2:7c:af:45:8c:2c:c1:86:53:4b:ae:a1:b5:
fd:a0:f9:fa:07:2e:fa:38:b7:f9:75:51:d9:63:5d:cd:15:f7:
ca:bc:45:31:2e:73:79:03:25:5d:14:f9:e0:34:c5:ae:05:3d:
10:df:0d:b9:d4:bb:d9:8a:ca:7f:f0:c5:36:4b:f9:55:c7:5c:
98:37:53:70:61:02:4b:05:37:de:d9:5c:ea:b7:8f:a9:d4:ce:
18:d5:7d:8c:20:7f:0d:cf:ec:6d:95:ac:b8:3b:78:d4:db:6f:
86:de:fc:8c:ef:e1:3a:62:46:87:ba:23:89:56:1d:4b:3f:4f:
01:d5:78:65:37:46:ff:07:1d:8b:17:d8:b2:a7:16:19:14:b5:
fa:50:5f:7d:ca:ca:aa:20:14:b5:5b:fc:09:b4:ed:21:44:8e:
d6:a6:a1:42:ac:77:c2:b1:26:e1:b4:b5:1b:8d:55:df:90:b0:
0c:ed:2c:78:d5:a8:04:08:a7:be:6b:93:7e:b8:df:a3:dc:14:
62:3e:22:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:12 2026 by rpki-client