Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
File: dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json)
Hash identifier: AolmIwfieoP+RBQOBgRLsLdkSTtg7N5gk5w0ibrhWyw=
Subject key identifier: 7F:6F:38:1A:31:07:75:E4:CE:19:56:F5:DF:75:CC:95:4E:47:1E:04
Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
Certificate issuer: /CN=75caa7991288876680d7ac90a8569f3fc20387fa
Certificate serial: 019D38D2FF95514A1D4B3469F7390971887D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:00:45 +0000
Manifest this update: Sun 29 Mar 2026 09:00:45 +0000
Manifest next update: Mon 30 Mar 2026 09:00:45 +0000
Files and hashes: 1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: 4kUgtphGkAwx5FT//3ZHNxytgr8skxvkUI6VermBvsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ff:95:51:4a:1d:4b:34:69:f7:39:09:71:88:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa
Validity
Not Before: Mar 29 09:00:45 2026 GMT
Not After : Mar 30 09:00:45 2026 GMT
Subject: CN=7f6f381a310775e4ce1956f5df75cc954e471e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:ba:53:94:d8:61:e4:c8:ab:d0:56:bc:7f:
5f:8a:78:40:a9:23:67:60:31:87:a0:14:f0:23:1f:
ba:cd:aa:18:f3:81:99:97:a1:83:a2:70:10:7f:a4:
3f:77:f5:1d:53:45:3e:d5:31:a8:8d:a9:92:2c:fa:
17:df:62:ca:04:29:63:94:c3:e9:d6:8a:79:82:d5:
50:53:58:50:d4:05:e3:b0:4e:ce:06:a1:d4:77:f6:
60:cf:82:63:34:c6:82:6f:8e:17:cb:dd:74:f8:10:
ff:e1:ce:b9:3f:57:0e:f2:67:6b:5c:54:b2:e4:a8:
93:ff:2d:bb:f8:dc:c4:d3:34:82:5b:90:8c:0f:1e:
2a:4c:a7:e6:f8:6d:0b:69:52:4e:46:9d:35:40:e6:
90:2b:2d:c9:d1:d8:70:32:cc:56:28:34:89:77:61:
8b:eb:a5:13:76:f3:50:a8:8e:2d:da:78:db:cf:b1:
7f:ec:a1:94:cd:5a:d3:5a:8d:f9:d1:04:5c:be:8f:
6c:cd:98:dd:0a:35:2e:1e:eb:62:c9:35:72:a4:cc:
63:66:ee:73:4b:f6:f0:82:e5:2e:5f:c1:e5:e1:76:
17:1a:db:e7:0c:c0:de:41:2b:72:d4:97:12:a5:6c:
bf:e6:e2:29:d7:4f:d2:e8:27:4d:5f:a8:20:64:5e:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6F:38:1A:31:07:75:E4:CE:19:56:F5:DF:75:CC:95:4E:47:1E:04
X509v3 Authority Key Identifier:
keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d1:96:5e:03:e3:cc:71:1c:b3:13:68:bb:30:8b:19:9f:9c:
3d:39:e0:b8:67:59:1b:da:06:00:9d:9d:e2:99:11:95:5d:06:
2c:aa:41:00:fd:99:6a:7a:e3:ce:8c:2e:61:66:b0:19:8c:95:
ef:f1:11:e3:96:d3:86:a5:7e:ca:bc:40:8f:09:76:d2:fa:11:
dd:46:65:e5:0b:b1:7c:24:52:ed:92:25:5a:b7:f5:16:b7:a7:
0e:fa:f1:19:6e:5f:1d:1e:1b:1b:85:d8:80:d8:64:e5:dc:0e:
91:1a:db:2e:0c:02:99:5f:36:e6:f2:f6:0c:90:37:cd:5c:52:
cf:5f:7a:2a:46:c5:a5:49:14:bd:84:ec:22:77:8f:29:18:4d:
a3:4c:0e:d7:5d:81:30:0c:3d:84:0e:20:6f:bf:12:e9:00:de:
6e:97:52:b7:bd:cc:42:65:f7:f7:f6:46:2b:3f:57:6a:88:b2:
80:79:ef:fb:43:06:f3:82:56:83:b7:07:f5:f2:1d:92:0e:2b:
8f:e8:be:8b:94:8d:70:34:9e:df:fa:cb:d7:04:37:c9:87:c5:
90:a7:b5:a6:0c:f0:b4:c9:3d:72:95:96:67:e4:79:99:7f:a3:
00:95:6e:56:bc:e0:fb:f0:7f:49:ae:b0:e2:10:4c:f7:c6:55:
5e:15:13:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:05 2026 by rpki-client