Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
File: dGNy_s6bo5ZuFegFXAWHxQPAOas.mft (raw, json)
Hash identifier: +1tpkheyrc+dfSabbrruFHH3QthVLcBStda2awNnFvQ=
Subject key identifier: 8A:D7:66:00:F9:14:8B:42:55:AC:EF:D1:7D:82:97:EB:5E:28:35:23
Authority key identifier: 74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
Certificate issuer: /CN=746372fece9ba3966e15e8055c0587c503c039ab
Certificate serial: 019D27040C0AF050D199F87E490C5B8F392D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
Manifest number: 132D
Signing time: Wed 25 Mar 2026 22:01:09 +0000
Manifest this update: Wed 25 Mar 2026 22:01:09 +0000
Manifest next update: Thu 26 Mar 2026 22:01:09 +0000
Files and hashes: 1: dGNy_s6bo5ZuFegFXAWHxQPAOas.crl (hash: d+Iuj/tByn90u7/jIGfoJ78ETzzl59eHfD0cXNmMl74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:0c:0a:f0:50:d1:99:f8:7e:49:0c:5b:8f:39:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746372fece9ba3966e15e8055c0587c503c039ab
Validity
Not Before: Mar 25 22:01:09 2026 GMT
Not After : Mar 26 22:01:09 2026 GMT
Subject: CN=8ad76600f9148b4255acefd17d8297eb5e283523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:2b:e4:5c:06:48:a6:b4:c9:c1:c7:88:a0:
19:c7:42:26:e0:c9:89:32:f4:de:ee:90:58:fb:cf:
f5:2a:f2:30:a6:ff:be:8d:e1:cc:28:2b:94:0d:7e:
a7:68:7d:9f:be:bb:71:d8:36:86:25:b7:bb:aa:02:
20:44:69:ec:1a:56:5b:0a:fd:54:c7:46:8a:fc:89:
dc:72:61:b6:bb:05:0f:72:5b:28:0a:d8:42:3d:f7:
84:ef:13:37:e4:a0:82:d8:ee:41:1a:a1:7b:fd:1b:
1d:89:9c:a7:07:77:d9:23:fa:cb:8b:9c:ea:19:a6:
e2:dc:30:40:2f:65:19:46:e3:cf:9a:bf:30:ae:06:
f7:3c:82:f9:75:e5:97:70:49:f5:2c:db:96:80:cd:
8f:50:e0:76:70:03:80:15:80:5e:1c:3f:78:71:a7:
92:41:b5:5a:70:a6:4c:fe:6b:e8:85:1d:b9:36:21:
f0:85:25:a4:7b:49:34:17:72:24:32:12:28:d2:b9:
4a:cf:dd:78:56:27:39:b4:f8:96:9c:ae:52:1c:e0:
1e:3e:47:18:a3:ea:57:21:23:81:ed:71:9d:03:96:
74:4b:ba:21:42:aa:29:b7:6f:29:a1:a7:47:b6:a5:
49:2d:b5:30:54:12:80:0d:c8:40:96:a3:2f:1e:d8:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D7:66:00:F9:14:8B:42:55:AC:EF:D1:7D:82:97:EB:5E:28:35:23
X509v3 Authority Key Identifier:
keyid:74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b5:56:26:47:4b:48:ab:0e:76:d3:fa:58:2b:59:46:5a:0d:
46:28:69:ac:b9:43:fd:ed:bb:04:94:3b:6d:a4:af:47:fc:1b:
9c:cb:41:6c:27:27:f4:b4:ff:a7:0d:94:35:eb:cb:7c:80:9f:
d0:a8:b5:73:b8:6e:ae:ab:f0:21:8c:37:85:5d:21:3c:bb:bf:
d2:d5:32:18:6e:86:44:fe:e5:c1:0d:de:10:91:56:13:55:00:
18:bd:df:f5:6f:6b:8e:da:f8:61:8e:c9:51:b9:2f:a8:cf:1c:
e0:98:3d:56:fa:be:37:0b:14:75:25:2e:82:cb:c3:1d:9f:5e:
19:00:d8:f5:63:aa:dd:bc:6c:65:65:53:9b:27:a9:f9:fe:73:
e8:56:55:62:b1:3e:2b:f2:35:b8:e8:36:ff:6a:91:0e:4b:0e:
e3:43:1f:94:b6:42:85:30:e0:39:16:92:0a:55:fe:24:21:d8:
7e:d5:c7:fc:b3:6e:b4:c6:50:99:64:7a:16:c4:5e:4a:d1:b5:
16:7a:c6:e0:5e:7e:42:de:9a:1c:6f:43:ef:0e:a0:d6:9b:32:
f7:5b:2e:97:13:df:1c:b6:db:b7:6b:a2:57:e4:6e:8e:33:0e:
86:a5:63:b6:09:fb:d3:87:b8:79:95:f5:77:c3:21:1d:b2:4e:
7a:a8:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:38:58 2026 by rpki-client