Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File: DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier: DoxTsD6jKdb/Y/6vFdzaoHdrEFbFBtjXt/t2O5WU+q4=
Subject key identifier: 51:C7:56:EA:6F:73:2E:18:56:CF:EB:22:73:9C:44:A1:52:96:CF:61
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer: /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial: 019F175492A0BD8D7D6014719A4AC7D4A38B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number: 1985
Signing time: Tue 30 Jun 2026 07:00:46 +0000
Manifest this update: Tue 30 Jun 2026 07:00:46 +0000
Manifest next update: Wed 01 Jul 2026 07:00:46 +0000
Files and hashes: 1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: C+CV32z+FVE1fTXz9ig+bFbOc4SsCR6s40TvHOlfSM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:54:92:a0:bd:8d:7d:60:14:71:9a:4a:c7:d4:a3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Validity
Not Before: Jun 30 07:00:46 2026 GMT
Not After : Jul 1 07:00:46 2026 GMT
Subject: CN=51c756ea6f732e1856cfeb22739c44a15296cf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:cc:77:de:f5:27:2d:54:51:47:7b:52:36:
7e:54:18:cc:f3:a3:e4:0a:58:45:9f:b4:0d:6c:19:
5c:be:14:31:36:dd:56:78:0f:6f:a3:0e:a9:14:83:
72:a1:22:a6:13:d3:e0:c3:ca:cd:f2:23:a1:72:7e:
b8:73:62:5f:b4:75:f2:3c:8f:c0:18:6f:4b:61:80:
80:49:d4:c9:26:17:1d:3b:c6:30:34:4e:b9:34:b9:
d2:c1:d9:26:33:8a:c6:46:c6:00:6b:4b:a1:cc:f7:
a8:13:e3:aa:86:af:12:2b:12:21:2e:63:a9:15:a5:
0c:ce:73:09:16:a6:ca:c0:21:cf:3d:ee:c1:56:2f:
01:c2:89:90:a9:b1:5b:25:90:2b:fa:f9:c8:69:f4:
41:85:98:a7:43:d4:c6:80:fd:97:06:f3:60:78:4a:
03:48:fd:69:11:19:2a:21:f2:86:bf:6c:bf:c9:14:
99:49:69:3d:2f:59:d1:9c:21:8c:60:68:18:31:4c:
ba:1b:4d:45:f8:a1:9f:a6:8e:cb:71:80:fe:7f:38:
af:19:cf:93:64:ed:10:40:92:1c:20:5c:97:55:fa:
a2:9c:61:66:a2:03:95:75:87:07:71:33:1f:6d:43:
ec:37:6d:48:06:7c:42:df:50:8e:65:84:6e:44:12:
ca:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C7:56:EA:6F:73:2E:18:56:CF:EB:22:73:9C:44:A1:52:96:CF:61
X509v3 Authority Key Identifier:
keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3b:19:c6:e9:70:13:8a:90:06:c9:a5:73:fe:7b:8b:12:c2:
81:bd:cf:f2:c6:e1:3a:59:65:38:af:5b:73:2c:80:1e:01:67:
e5:c8:1f:ad:b5:a0:b2:03:f4:ca:0f:fe:56:c7:b0:c6:f7:6f:
e5:f0:7d:72:01:80:e2:b3:c3:9a:83:12:11:08:3a:a8:41:d7:
8d:a9:1a:d0:b2:72:96:b5:15:37:db:26:44:ff:4f:28:43:2c:
d3:72:a3:0b:c5:3a:ea:e3:6c:7b:60:bd:bb:69:5d:03:d4:4f:
33:34:e8:45:99:ff:5d:0b:a8:db:06:bf:a5:e4:9e:ca:5a:e8:
ee:6e:0a:e2:ac:4d:42:2a:77:41:26:21:97:ea:30:97:16:72:
bb:55:df:e9:fe:62:58:2e:d4:af:0f:bf:c7:59:e6:28:12:f7:
36:76:91:68:31:e5:ee:ae:d0:1b:fb:82:6d:71:1b:a6:9e:1b:
35:9d:e7:43:d2:bf:13:0f:f7:4e:54:0b:1f:57:17:e7:a7:5a:
3b:bc:4b:e6:aa:89:0e:0a:67:07:c7:38:e0:1b:8b:97:27:9e:
17:4b:32:02:17:3f:c2:c9:11:c6:64:bc:bb:17:a7:00:9a:b0:
e9:c0:80:fc:34:24:da:66:4d:da:58:5e:ae:cc:94:92:8d:f1:
ff:c3:24:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:10 2026 by rpki-client