Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier: RSOiP7R34JCciSqAIy0BINjnocbnabwWNUR5/7Nt1do=
Subject key identifier: 2F:B9:F0:A4:B4:6F:4A:43:B0:C0:0D:14:82:29:1F:FD:6C:2A:69:82
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial: 019D38D39CC62127FFB681906FB877F69924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number: 0C7A
Signing time: Sun 29 Mar 2026 09:01:25 +0000
Manifest this update: Sun 29 Mar 2026 09:01:25 +0000
Manifest next update: Mon 30 Mar 2026 09:01:25 +0000
Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: FY6eh9BaXAj7HZMDpaPS4gZoFmltoxc6YqBJAo9bPDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9c:c6:21:27:ff:b6:81:90:6f:b8:77:f6:99:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
Validity
Not Before: Mar 29 09:01:25 2026 GMT
Not After : Mar 30 09:01:25 2026 GMT
Subject: CN=2fb9f0a4b46f4a43b0c00d1482291ffd6c2a6982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:6e:31:2d:7a:ba:fa:de:2d:6f:6c:0a:98:
d4:6a:3f:65:97:7b:9a:73:fa:51:9c:e9:a2:07:8a:
2d:08:df:c3:43:fd:6a:b8:59:0f:f6:32:41:94:af:
59:92:06:d2:8e:c8:4f:fd:ee:93:f0:a9:cf:fd:2d:
99:5f:6c:f8:e2:ff:ce:78:a3:82:a5:59:df:37:e1:
52:73:a8:34:9f:76:2f:05:ff:43:63:f1:5e:1c:22:
c5:bc:e4:6e:68:ec:82:c6:63:59:e3:97:6e:9b:ae:
bc:6b:d2:e7:9e:27:a7:54:08:0c:c6:50:a2:76:21:
a1:94:bd:8d:19:05:9c:bc:dc:47:fb:ad:ad:67:7f:
fc:a5:9f:0a:17:c0:98:97:5c:61:44:59:14:90:9d:
b8:3d:73:2c:fa:89:87:b2:88:30:c5:15:ec:ad:72:
17:6a:ee:14:fd:ee:fe:c3:f6:c1:48:57:cd:aa:00:
33:01:ca:b7:10:3e:1c:84:00:b2:46:01:74:0a:e6:
4e:d5:6f:3a:d8:09:87:60:d0:18:0f:ba:e4:e3:8e:
72:78:10:2e:59:17:29:a5:64:33:94:63:0c:fd:db:
4d:8d:e8:0a:bb:70:3f:f9:51:1b:65:7f:2a:7a:ec:
bc:f1:87:4d:7c:42:97:c2:88:72:bc:ce:a0:d1:51:
3c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B9:F0:A4:B4:6F:4A:43:B0:C0:0D:14:82:29:1F:FD:6C:2A:69:82
X509v3 Authority Key Identifier:
keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:43:f9:6c:eb:d2:d8:5b:92:af:ee:23:94:84:c7:eb:58:72:
9c:cc:e7:e7:1e:96:f2:09:6b:ce:bb:7f:4e:35:c1:13:13:01:
3b:e2:f2:93:76:9a:34:1a:ae:9c:d4:0b:6a:08:e1:de:a1:dc:
65:e5:7d:90:e5:4a:c9:9f:50:03:26:06:b9:b5:b3:2a:55:a8:
53:eb:7e:76:f4:2f:fd:25:8c:f2:41:ae:65:40:b7:c2:4a:3c:
6a:05:95:a0:0c:27:a4:94:71:84:f9:1d:02:b1:95:24:4d:27:
f9:14:ed:5a:1b:6b:22:fb:1f:90:36:bf:1c:ea:43:cc:65:07:
04:f9:46:82:cd:e1:d9:64:87:c0:31:82:3d:96:22:c4:9d:af:
e7:a0:0d:69:08:0c:de:81:f6:3a:ad:a7:8e:4c:0c:5c:e2:26:
70:c5:0e:43:ac:92:b0:b7:5c:a5:87:5c:af:8f:f9:ff:af:1a:
44:c0:f9:1b:0a:cc:07:b0:1d:b6:f7:a4:93:15:25:c2:09:51:
5c:91:87:a7:28:f4:fa:e5:7d:24:dd:cd:07:8f:08:3b:6f:11:
6c:d1:6c:99:63:2c:a6:c5:5c:e3:d7:5d:f7:41:3f:79:b1:ac:
77:95:89:07:23:fb:08:28:54:ca:65:7e:bb:67:d6:ea:18:9e:
77:3a:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:00 2026 by rpki-client