Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File: DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier: JiGcqgQQwhy1r7AD0uergUHIpvF+flWcIym2nPYYofo=
Subject key identifier: 14:A3:CA:21:19:19:C2:45:60:C0:EA:AD:81:9F:B6:90:F1:AA:92:5F
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer: /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial: 019D38667E16AE2F800D006A1D2DF7029235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:02:14 +0000
Manifest this update: Sun 29 Mar 2026 07:02:14 +0000
Manifest next update: Mon 30 Mar 2026 07:02:14 +0000
Files and hashes: 1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: 4MxAIkISTbRRW587tqfytEGlHdWTwCgIs+Hllcbfcao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:7e:16:ae:2f:80:0d:00:6a:1d:2d:f7:02:92:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Validity
Not Before: Mar 29 07:02:14 2026 GMT
Not After : Mar 30 07:02:14 2026 GMT
Subject: CN=14a3ca211919c24560c0eaad819fb690f1aa925f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:a4:ed:44:81:05:79:2e:4e:a8:61:01:08:
04:4a:2d:cb:0f:81:1a:7d:46:78:48:6d:05:62:af:
99:05:d6:f8:35:52:87:ba:5e:ef:10:74:c2:f7:95:
ad:60:e8:f4:ea:be:c0:75:fa:22:78:9c:b4:f4:4a:
0a:ac:f0:24:47:56:da:37:34:f3:6d:6d:d0:f3:4c:
71:4d:19:d0:52:54:21:df:d4:5b:92:9c:6b:24:02:
18:e3:55:fe:f1:5b:64:53:1a:a7:66:98:dc:66:4a:
be:7f:92:e1:76:fe:bc:e5:06:e9:02:c5:79:1f:a0:
89:47:6f:90:ca:2e:80:a4:0b:b9:94:3b:ad:7f:82:
8a:70:ff:15:60:27:cb:4d:2d:49:de:41:0d:bd:07:
73:07:f3:ae:84:41:94:71:0d:2c:7c:2a:ae:dc:d0:
9d:2b:4c:0d:db:39:0c:cb:5b:fa:96:6c:dd:44:fb:
ef:fd:0d:70:02:af:03:b1:25:9f:37:6c:52:01:9d:
6f:24:6a:fa:76:92:cc:07:d1:3f:68:a6:53:b7:bf:
42:24:ce:58:76:e2:e2:03:2f:d7:20:3f:2e:fc:2a:
07:e0:66:92:2c:fe:df:d9:06:7d:d8:71:77:91:84:
c8:ba:62:bc:e1:14:b0:05:ef:72:c5:6a:cc:d9:58:
3d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A3:CA:21:19:19:C2:45:60:C0:EA:AD:81:9F:B6:90:F1:AA:92:5F
X509v3 Authority Key Identifier:
keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:84:2c:e9:a7:fa:19:41:39:e5:2b:9e:0c:8c:c8:fb:2a:d3:
70:d8:93:df:5e:8c:ed:2f:6e:2c:8c:e8:af:4c:2d:64:6c:6d:
a4:1a:6c:f3:5b:17:33:8a:98:27:89:5c:8c:ce:0d:16:c7:8a:
5f:67:51:73:ee:21:1f:9a:04:2c:f0:c3:42:8f:57:ab:b9:01:
b1:11:7e:d4:60:2b:c7:ed:ae:2b:e8:7b:47:0a:71:07:33:9a:
11:6a:d6:af:46:1c:13:0e:87:35:24:d8:a6:6a:bf:69:6b:65:
84:f8:6e:c1:9f:5c:17:b0:36:a7:3c:4e:dc:92:39:a1:f5:f0:
98:99:fd:1f:fc:39:8e:49:f2:6d:f3:a8:e2:38:7f:f2:5f:b2:
cd:01:6f:52:b8:a2:c9:d9:f7:55:3e:ce:70:81:92:23:47:0e:
3f:e0:82:a1:1a:0e:75:df:5d:6a:97:18:55:5c:2d:f6:34:d5:
7b:2e:61:94:e9:89:6f:2b:1f:43:cd:11:f7:e8:e7:aa:8c:3d:
97:ed:ff:5b:3f:d1:e1:2b:13:05:6e:51:bf:33:6d:cd:1e:c5:
5d:e6:ee:c3:06:1e:fa:37:f0:70:6f:ec:bb:82:23:12:6b:c4:
b0:04:6a:76:62:72:92:17:c4:91:bb:95:c5:ef:b9:dd:bf:52:
56:9a:02:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:36 2026 by rpki-client