Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
File: DAHrsNsEzE1pGCs47A30sIkiJ40.mft (raw, json)
Hash identifier: JsXZ9q2LKp0nKrVYFQRZyJTbQlY3atajryVhxQmM8Aw=
Subject key identifier: 2D:45:51:A3:B1:F4:CE:37:A4:38:E0:24:46:6B:95:CB:43:B1:0F:FC
Authority key identifier: 0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D
Certificate issuer: /CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d
Certificate serial: 019F8F10447F63D3A422B99D7824EA68AC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
Manifest number: 19C0
Signing time: Thu 23 Jul 2026 13:00:35 +0000
Manifest this update: Thu 23 Jul 2026 13:00:35 +0000
Manifest next update: Fri 24 Jul 2026 13:00:35 +0000
Files and hashes: 1: DAHrsNsEzE1pGCs47A30sIkiJ40.crl (hash: VA8OCbWcMSa7+I1G3ofJrdULmiESnlBAg+tzLMTmiEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:44:7f:63:d3:a4:22:b9:9d:78:24:ea:68:ac:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d
Validity
Not Before: Jul 23 13:00:35 2026 GMT
Not After : Jul 24 13:00:35 2026 GMT
Subject: CN=2d4551a3b1f4ce37a438e024466b95cb43b10ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:7c:94:92:9e:d2:0e:cb:21:f2:38:2b:1e:
09:e7:9d:1b:e4:1f:62:ec:f9:d2:b1:63:1e:7a:68:
12:1b:05:a9:44:5d:5b:c5:40:50:f5:d2:24:9f:88:
58:15:d6:b9:c2:21:70:13:12:cc:19:c6:c4:87:a7:
cc:c0:1b:d8:ae:b7:ce:13:f6:09:f7:3c:a3:d5:75:
76:22:d1:e5:e3:c0:9a:14:f3:8d:66:57:9f:00:91:
e3:98:8f:84:92:78:bd:3f:8a:3d:26:f1:2d:83:3c:
26:f1:d3:00:74:ce:65:28:14:48:fd:f1:8c:2d:2b:
4a:2f:b2:d9:68:66:f9:ba:2d:80:36:e5:53:5e:3b:
70:31:57:3c:ac:49:ac:cb:a6:82:40:bb:4e:25:c2:
9d:91:50:25:c5:22:65:74:b9:02:64:5d:e4:53:d3:
60:60:50:36:4a:c4:3b:c0:53:cc:2c:8e:9e:65:07:
88:b9:4a:88:a1:d6:75:32:92:e2:e7:72:96:c7:54:
82:85:68:1e:f3:44:24:a6:b8:e4:c0:02:3c:88:39:
a1:f6:f9:42:5f:d3:2f:94:8b:e6:a0:60:9d:a8:15:
da:05:25:25:e0:5e:60:a5:5c:8e:30:81:84:94:57:
2a:17:01:12:31:06:8c:cd:89:48:47:d3:ed:8c:0a:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:45:51:A3:B1:F4:CE:37:A4:38:E0:24:46:6B:95:CB:43:B1:0F:FC
X509v3 Authority Key Identifier:
keyid:0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c7:81:bb:a6:7c:61:83:d1:11:63:cd:70:4e:7c:90:26:e0:
40:3a:4d:27:a2:7e:1d:8c:ca:72:22:7e:5b:e6:34:92:19:7a:
64:a9:e6:41:b6:b7:ac:9f:6e:00:68:29:c7:c3:91:9c:a6:16:
05:84:46:ae:3a:85:5f:08:19:06:76:cc:73:50:b1:a4:aa:b6:
ea:9a:23:95:65:01:de:f6:ae:e7:7c:8e:ad:22:52:37:41:b1:
7d:60:80:40:82:98:c7:36:c6:35:dd:ac:52:8d:bf:de:87:6d:
64:cc:c6:3e:05:78:4f:85:4b:c6:bb:63:28:c3:cc:d4:f8:e7:
7c:b7:0e:51:2d:2d:9c:9b:5f:b1:61:0b:dd:b2:34:56:0f:fe:
fc:30:be:35:ed:30:68:9d:ab:45:99:e3:65:b6:a3:79:d8:cc:
db:5f:77:f8:99:13:32:f9:fd:e0:10:ff:05:57:42:3e:62:28:
b7:af:bc:af:4e:cc:5b:fe:ba:d3:9c:da:1d:03:9f:7f:e1:bf:
89:0f:e0:72:52:a6:d6:89:d6:65:7d:1d:00:1e:d9:52:00:34:
61:c2:26:ee:11:42:af:1f:cb:81:86:ad:7e:4b:1a:68:b4:42:
13:36:90:d3:9a:96:4f:f0:3a:87:26:9c:77:eb:6d:8d:5b:27:
16:51:19:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:07 2026 by rpki-client