Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
File: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft (raw, json)
Hash identifier: UuiiONwGuXH8cP7YfYH1j1q+h/zMbR/htKAIMzaGQXc=
Subject key identifier: 07:2F:E8:28:EF:58:30:9B:A5:B0:72:8A:A3:DB:1E:2C:20:CB:0F:85
Authority key identifier: F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
Certificate issuer: /CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Certificate serial: 019F17556B2DDF546CA2FDB6E6BDBCE01C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
Manifest number: 107A
Signing time: Tue 30 Jun 2026 07:01:41 +0000
Manifest this update: Tue 30 Jun 2026 07:01:41 +0000
Manifest next update: Wed 01 Jul 2026 07:01:41 +0000
Files and hashes: 1: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl (hash: LnYpYYlduu7aQUl5OQVUwUY3S6LSv5tEQBd/AiPGstI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:55:6b:2d:df:54:6c:a2:fd:b6:e6:bd:bc:e0:1c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Validity
Not Before: Jun 30 07:01:41 2026 GMT
Not After : Jul 1 07:01:41 2026 GMT
Subject: CN=072fe828ef58309ba5b0728aa3db1e2c20cb0f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b4:b2:59:25:48:f0:8e:1f:54:dd:9d:10:e7:
dd:53:14:d6:0c:8c:0c:82:af:f1:c2:00:36:c8:7a:
1d:68:88:40:5a:2e:2f:e9:4f:5d:89:e2:98:68:cb:
97:1d:56:51:79:50:26:f1:bc:62:fc:4e:2e:2c:e7:
cc:84:9d:2b:dd:a5:53:0d:aa:41:4f:dd:9c:29:f6:
d4:77:5e:67:15:ed:b4:0e:11:88:4f:b0:8a:78:6b:
4e:ec:54:9e:79:98:72:23:a3:ce:03:42:b7:3e:14:
cd:bc:d3:94:3c:82:95:e0:11:e9:26:ba:72:eb:95:
60:5c:5d:ab:c2:82:d2:5d:8d:ff:41:e7:5d:89:4e:
57:42:43:a6:91:1e:08:7e:ab:18:f3:d3:d8:d4:48:
30:db:95:95:74:32:ba:c8:d9:f3:63:c1:aa:f8:98:
1b:50:ff:ee:f8:df:31:d5:d0:54:6f:3b:32:e9:d8:
34:19:2d:7e:ce:9b:1d:bb:36:f0:8f:3a:44:f4:24:
7c:2b:bd:9d:0b:47:07:95:96:1d:f7:f6:82:e7:71:
b5:82:ce:16:df:26:26:fd:8b:66:70:ff:b5:d0:f8:
ca:88:67:2c:aa:a0:5e:69:8d:da:7c:c2:5f:39:c1:
9c:19:40:cf:cb:9b:b1:9e:eb:ca:e8:c4:b0:f8:ad:
c8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2F:E8:28:EF:58:30:9B:A5:B0:72:8A:A3:DB:1E:2C:20:CB:0F:85
X509v3 Authority Key Identifier:
keyid:F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a6:72:5e:92:f1:9d:ed:ed:89:ca:4a:62:66:9b:1d:34:c8:
b2:91:04:8c:9d:45:3d:12:c9:d0:53:76:47:53:58:d8:57:d0:
71:20:ac:ad:9a:aa:a5:cd:a2:0a:1d:0a:ab:c1:36:20:09:1a:
b3:98:81:81:bf:b9:f0:da:93:62:2f:42:a6:70:cd:26:d5:36:
68:30:3c:84:7e:2b:60:83:45:73:64:d7:47:e2:7c:a7:c4:06:
d0:52:d1:0d:4d:10:71:a8:5a:36:96:98:62:c0:07:36:48:54:
96:4e:8f:ed:9c:7c:05:95:10:9a:db:89:c6:d7:44:51:49:14:
71:cd:9b:31:62:54:16:b0:57:71:1e:9f:a4:df:86:2e:c6:21:
b3:5a:1e:31:4e:96:8d:1a:63:23:ec:00:a9:cc:39:01:58:02:
9d:8a:f7:ae:3e:0b:ce:70:10:ea:f0:3d:0a:b8:8b:f2:22:ca:
c2:8b:68:f1:45:50:4c:38:06:d7:3b:63:dd:8e:40:55:cd:f9:
c9:5a:bf:65:79:d8:bb:88:15:c5:ff:6e:60:4f:37:6e:d5:7e:
f2:c7:ff:3c:32:c8:b4:79:05:17:f1:5f:c1:19:9a:59:bc:58:
77:ae:72:82:8e:11:cc:0b:87:7b:80:00:66:76:35:d3:e5:0c:
d5:79:35:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:22 2026 by rpki-client