Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
File: d6W3Uxx6reukfRwv65uee6qxu7c.mft (raw, json)
Hash identifier: +C8tnMJujLwvmk5DfMYYfL3tFntGIEmro14LKAezU2Q=
Subject key identifier: 7E:31:2F:52:FE:66:2D:9F:EF:4E:97:FA:4D:D0:53:F2:31:CC:92:9A
Authority key identifier: 77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7
Certificate issuer: /CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
Certificate serial: 019D3865577C648058F54332D45D35E24E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:00:58 +0000
Manifest this update: Sun 29 Mar 2026 07:00:58 +0000
Manifest next update: Mon 30 Mar 2026 07:00:58 +0000
Files and hashes: 1: d6W3Uxx6reukfRwv65uee6qxu7c.crl (hash: 0ThZ1f2yeHnY9qYD6XZUNZU2OeuzKeE7FPHmH/hG32s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:57:7c:64:80:58:f5:43:32:d4:5d:35:e2:4e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a5b7531c7aadeba47d1c2feb9b9e7baab1bbb7
Validity
Not Before: Mar 29 07:00:58 2026 GMT
Not After : Mar 30 07:00:58 2026 GMT
Subject: CN=7e312f52fe662d9fef4e97fa4dd053f231cc929a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:78:f1:2c:25:24:5e:a3:d5:72:a2:f5:ff:
d8:70:a8:4b:44:95:69:b6:9f:98:f8:30:dc:de:8f:
44:48:65:1c:11:7c:0f:df:14:93:55:fe:63:bf:34:
b4:d6:3c:2a:0b:93:8f:85:dd:ef:de:b9:31:e6:d3:
81:52:0c:45:09:e8:de:e2:01:ef:f6:5f:66:c2:10:
69:61:fe:ef:10:16:1d:2b:ae:bc:f6:aa:7b:a4:c3:
fc:62:0d:87:d7:ef:f5:81:94:20:7c:9b:b3:79:be:
4f:9a:88:2d:e0:58:c3:2a:6d:df:2b:e2:d2:24:d8:
8d:52:31:f6:f7:db:9b:c2:ae:07:8b:e6:4f:54:e0:
e6:e8:69:80:0f:38:2d:69:81:a4:17:96:ca:f8:5e:
3f:0a:2e:ca:40:5c:11:e2:88:10:dc:07:f7:ff:b5:
77:d5:5e:41:10:91:41:0a:c5:31:da:40:22:9d:7c:
96:84:a8:f2:63:93:62:6b:1e:8c:bf:7d:3a:b5:33:
b3:dc:92:f2:99:45:25:77:bb:09:0e:0b:0b:05:ad:
5a:4c:15:05:97:3f:b9:9d:e7:a6:53:66:fb:b9:3b:
2b:0e:2f:df:56:5e:91:5c:d4:92:89:85:bf:1a:8f:
1c:1d:34:de:5f:4b:c3:2f:c1:6d:05:02:28:3a:cd:
80:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:31:2F:52:FE:66:2D:9F:EF:4E:97:FA:4D:D0:53:F2:31:CC:92:9A
X509v3 Authority Key Identifier:
keyid:77:A5:B7:53:1C:7A:AD:EB:A4:7D:1C:2F:EB:9B:9E:7B:AA:B1:BB:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6W3Uxx6reukfRwv65uee6qxu7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3dd37d-6b0b-4f1f-b0fb-93238fcd1622/1/d6W3Uxx6reukfRwv65uee6qxu7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d0:64:4a:f2:b2:a9:95:23:a1:0b:1b:1c:63:ac:18:3c:ce:
67:24:b6:af:cc:b0:c8:53:ce:63:60:28:a1:e2:36:d7:cd:f9:
6a:54:86:18:f8:44:85:9f:4c:9f:8a:4b:36:8a:f3:b9:c2:fe:
1d:a9:ea:84:81:24:20:2b:1f:98:ee:a8:bf:a6:76:47:0e:bb:
a7:40:d8:7e:6f:fe:d1:8c:e9:a8:bf:5b:94:91:9c:5f:0c:26:
d5:71:f1:ec:45:5a:48:b8:a3:c0:b7:06:8b:2a:cb:ba:5f:5c:
1e:2b:79:4f:2f:57:49:e7:84:1a:9c:ca:ce:c5:4b:20:21:80:
de:3e:49:b6:fb:49:11:1d:3f:da:bf:93:7d:00:e7:4c:73:99:
3d:5a:4f:20:86:cd:20:c3:00:76:63:64:63:d0:21:71:01:95:
44:28:2a:7f:de:62:8b:61:90:db:f6:62:b4:73:c2:25:f3:c4:
a0:75:bc:a5:0c:38:c5:53:00:47:2e:f1:7b:02:f1:59:ea:32:
3d:df:d8:e5:5b:4b:42:d8:59:b7:8c:8f:0d:9b:ec:d2:c5:75:
bd:d4:bd:c1:54:c9:2a:37:51:6c:e5:f8:75:f3:f7:93:97:f2:
94:54:23:b4:96:d1:6c:7c:57:5d:7d:ce:ae:b4:ea:f4:15:5c:
5a:78:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:06 2026 by rpki-client