Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
File: dM1ajbKkgrSTFrdXO4pPh09uuxU.mft (raw, json)
Hash identifier: 6CGc19bezakiQ+ZHjFAxutxBZwHVIv3BxGN/CVLfvPc=
Subject key identifier: 51:89:1E:F6:86:D6:D5:A5:05:A1:22:8C:94:D2:34:9A:11:95:37:49
Authority key identifier: 74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
Certificate issuer: /CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Certificate serial: 019D382E8403FF0C0897E7A42EF978847765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 06:01:05 +0000
Manifest this update: Sun 29 Mar 2026 06:01:05 +0000
Manifest next update: Mon 30 Mar 2026 06:01:05 +0000
Files and hashes: 1: dM1ajbKkgrSTFrdXO4pPh09uuxU.crl (hash: VWxRG4axkpB2LJq4TRjpAQx25u620oPMZ71vqC6AMr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:84:03:ff:0c:08:97:e7:a4:2e:f9:78:84:77:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Validity
Not Before: Mar 29 06:01:05 2026 GMT
Not After : Mar 30 06:01:05 2026 GMT
Subject: CN=51891ef686d6d5a505a1228c94d2349a11953749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:89:f0:4d:22:75:a4:68:c9:f8:d9:6c:8a:
80:e3:f5:c4:d4:6d:a5:2f:cd:e6:86:3c:e2:7b:da:
1c:03:96:87:30:6b:68:55:74:a4:8a:da:84:a0:65:
d4:6a:b0:c3:0c:e9:66:c0:dd:ad:74:28:1b:c6:8e:
c4:5f:85:ed:c1:84:48:5c:87:81:0a:3b:45:18:7c:
86:c8:35:04:30:4f:61:79:63:69:4f:0c:e4:27:70:
be:87:41:e9:fc:bc:c2:71:a0:fc:b3:a4:43:2c:67:
21:12:29:94:23:13:79:ed:50:b1:da:3b:7c:2c:87:
c2:6f:2f:a8:12:7e:35:fb:40:d2:8e:f0:03:52:33:
20:fe:5e:91:ba:32:3c:9c:61:fa:27:d2:a9:b7:48:
56:7b:0f:45:ba:5e:dc:cb:48:5f:dd:c5:33:a1:db:
f3:d6:b2:13:fe:01:e5:a3:67:83:55:0e:cb:2b:59:
39:77:75:b6:71:f2:95:b1:f4:84:3b:2a:a1:29:bd:
9a:b0:26:e7:be:29:6d:a0:40:fe:1c:94:d0:fc:c0:
df:7e:ae:d3:61:fd:e6:78:c7:e4:4d:2b:90:ef:ce:
5f:66:51:5e:eb:59:a1:9b:bb:dc:34:59:ec:f2:72:
e0:74:c1:2c:08:3d:82:35:19:38:2f:8b:1e:93:7b:
96:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:89:1E:F6:86:D6:D5:A5:05:A1:22:8C:94:D2:34:9A:11:95:37:49
X509v3 Authority Key Identifier:
keyid:74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:8d:3e:22:d9:ba:19:4b:00:34:35:2c:1f:3a:87:15:46:a2:
cc:09:32:0e:dd:33:4c:9d:b5:82:2e:85:bb:fe:ef:72:8f:b0:
b6:ec:72:0e:fd:5b:dd:f0:cb:db:c8:1c:d3:a9:50:4c:4f:50:
00:51:82:5b:92:b1:ed:53:1b:79:77:61:68:84:18:09:3d:d1:
94:e4:6e:98:07:3b:2d:8d:1b:be:9d:46:6b:8f:c3:02:90:ff:
4b:b9:15:09:5e:89:57:f1:30:bb:ad:3b:61:0b:8c:b4:8c:7b:
30:af:6e:f5:23:a6:88:c9:eb:00:42:b5:80:15:e8:95:f7:e8:
7f:38:38:b9:5b:db:f0:f7:1c:c2:cc:b9:f2:3b:07:f1:70:b4:
d9:bb:71:e2:54:fa:29:be:51:fd:71:0a:54:4c:64:e9:83:b7:
dc:9e:ea:76:fd:a1:db:92:e5:45:57:9c:bc:a8:13:6a:28:7e:
65:d6:ed:91:23:4a:da:af:10:1a:aa:61:d7:4a:14:e6:c9:7d:
43:29:71:d2:7d:30:0d:72:b7:71:c8:aa:ed:a6:0d:5a:63:f4:
75:ac:75:8d:84:a1:da:17:89:f1:f7:fb:bf:9c:c3:85:29:9f:
a5:c9:58:71:eb:5c:5a:59:02:ed:7c:cd:90:0c:3c:36:c4:8b:
b4:7e:f7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:11 2026 by rpki-client