Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier: vs+ZXnv9FSazlltKAZPLd4F51vAdRFyCCqQ5DsRaVSM=
Subject key identifier: BA:61:FA:A9:B5:85:B1:C1:62:EF:98:B9:7B:91:43:41:F5:51:E1:7C
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial: 019D28BBB46F8A46B81CA4F74A3E4A952442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:23 +0000
Manifest this update: Thu 26 Mar 2026 06:01:23 +0000
Manifest next update: Fri 27 Mar 2026 06:01:23 +0000
Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: U8MVPOQuf07n2JkQJpzGyC6ikjFAJjNViwscxh320Ao=)
2: xOh8rPz0fCu_Rdtl4qREsx0riTQ.roa (hash: 51BbJDIoI2b7sQWeISHrMYtf3JjGMl3uwds3WWJ64wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b4:6f:8a:46:b8:1c:a4:f7:4a:3e:4a:95:24:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Validity
Not Before: Mar 26 06:01:23 2026 GMT
Not After : Mar 27 06:01:23 2026 GMT
Subject: CN=ba61faa9b585b1c162ef98b97b914341f551e17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:57:9f:ff:98:52:64:87:00:37:63:69:55:
8b:0a:fc:55:2c:4b:08:7b:28:08:ee:d2:ed:40:cf:
7f:d6:28:37:38:01:87:e5:36:55:a5:ec:ad:1e:b7:
8d:bb:6d:0f:bb:8b:12:2c:eb:c9:ea:b9:37:db:7f:
7b:e8:7b:bb:42:0b:b9:b3:a7:89:ac:00:8b:d2:9e:
93:84:d4:b3:7b:8f:43:60:95:99:a2:78:76:07:32:
f4:2b:2f:ca:8a:6f:12:81:f5:de:b8:59:75:24:3a:
d0:c6:bc:52:3d:d8:75:32:62:e2:c6:43:cf:18:8f:
93:3e:7d:2c:27:e9:f3:ad:45:ea:3e:a9:5c:e7:82:
41:95:68:cf:c9:50:c1:67:1b:34:8d:9f:1c:11:9f:
2b:25:1b:58:4d:92:bc:0f:b2:67:f7:66:5e:29:f6:
1a:e6:fc:1d:9e:b1:75:9f:5a:58:6b:1f:45:a1:9a:
a9:04:61:ad:c5:dd:42:af:f0:02:a3:13:cf:20:24:
f1:d6:45:a7:d5:c1:ae:2c:ee:50:dc:3b:d2:f1:2a:
81:ed:6b:ba:b1:8d:ad:e8:12:78:c2:69:c0:89:61:
2c:0c:a9:47:ba:09:59:ee:66:ee:7a:ec:a3:b0:da:
1c:a6:1e:b4:56:17:89:be:14:9b:15:ce:c8:aa:f3:
b3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:61:FA:A9:B5:85:B1:C1:62:EF:98:B9:7B:91:43:41:F5:51:E1:7C
X509v3 Authority Key Identifier:
keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ff:74:3d:a7:b9:15:04:4a:9a:9e:39:92:58:e7:16:4f:b0:
cf:8b:c0:61:9a:a9:a5:26:8f:02:ad:ee:53:25:fc:be:58:0d:
1f:e8:51:36:b6:a3:19:8c:82:33:d8:03:01:d2:d2:70:6f:74:
38:0e:d2:8d:ed:d8:75:37:9e:f3:0e:fe:2e:0e:f5:47:11:1a:
f4:f6:d0:5a:33:60:45:ec:9a:e6:e6:81:26:7c:33:38:04:75:
dd:a0:9f:86:5e:d2:ab:8b:d9:26:9a:29:db:7f:ee:27:23:3c:
94:fb:f6:e0:4c:f5:7f:84:86:47:4e:19:de:de:32:a6:eb:4b:
1c:b4:5c:fd:65:4e:7c:ce:dc:9e:c1:97:db:3a:13:1b:17:66:
19:0e:34:36:9a:25:f3:04:f3:7e:c1:35:4f:3a:98:19:e2:9c:
c9:0d:43:e0:70:7a:6b:03:51:cf:fc:e4:e3:55:a7:14:4c:3c:
8c:aa:c8:ff:4a:f4:55:e8:27:73:e2:9a:39:2e:bc:a1:87:a5:
74:41:f3:8d:ec:eb:2e:56:a2:75:db:f0:5b:d8:bd:9f:36:fa:
91:0d:7f:ff:55:9b:08:97:01:e4:ee:27:4c:8e:b2:1e:e8:ad:
73:e3:cc:df:9c:2f:a1:7f:6c:c1:07:00:02:2b:7c:2a:48:93:
9e:22:4f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:17 2026 by rpki-client