Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
File: dDWQyYyt2-4a14ldOC1Q9f28SK0.mft (raw, json)
Hash identifier: +FxTMqwJtsGuYN9MHowFVwX2Ma7rihJAIjyRLUipbuc=
Subject key identifier: 03:85:81:19:5F:A4:FF:A4:CF:8D:74:6F:67:E8:27:3A:60:BC:69:AF
Authority key identifier: 74:35:90:C9:8C:AD:DB:EE:1A:D7:89:5D:38:2D:50:F5:FD:BC:48:AD
Certificate issuer: /CN=743590c98caddbee1ad7895d382d50f5fdbc48ad
Certificate serial: 019D273B2FC103BFBD9A4A92B21210B70678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDWQyYyt2-4a14ldOC1Q9f28SK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
Manifest number: 022D
Signing time: Wed 25 Mar 2026 23:01:23 +0000
Manifest this update: Wed 25 Mar 2026 23:01:23 +0000
Manifest next update: Thu 26 Mar 2026 23:01:23 +0000
Files and hashes: 1: dDWQyYyt2-4a14ldOC1Q9f28SK0.crl (hash: mNXf4b3A+xOlx1FrWMoZbuEWGmoqnliM48FYk45xmv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dDWQyYyt2-4a14ldOC1Q9f28SK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:2f:c1:03:bf:bd:9a:4a:92:b2:12:10:b7:06:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743590c98caddbee1ad7895d382d50f5fdbc48ad
Validity
Not Before: Mar 25 23:01:23 2026 GMT
Not After : Mar 26 23:01:23 2026 GMT
Subject: CN=038581195fa4ffa4cf8d746f67e8273a60bc69af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:d0:cf:74:f4:96:5d:30:c9:24:05:71:e6:
f4:06:99:c8:e8:c0:2d:bd:46:d8:0f:d4:0d:3d:86:
c6:e7:fc:79:8e:fb:b5:39:8e:25:96:e8:9b:62:d5:
5b:0a:93:ef:f3:94:4c:98:38:d5:3c:c1:e0:ed:21:
de:af:17:8b:d3:1d:60:77:d8:7a:c3:37:31:67:e7:
dc:aa:94:5d:6a:9f:7e:fd:ae:ec:f8:c2:23:7e:a7:
23:ac:b2:40:d7:bf:03:c3:50:94:aa:46:cb:7a:24:
c5:ca:db:87:0c:c2:7c:a5:7b:5c:3f:8f:d9:6d:f8:
18:72:37:3a:e5:73:9f:a0:a0:9c:71:31:eb:28:49:
41:ef:12:e7:18:27:80:ce:c2:70:ed:50:d4:c7:b9:
ee:37:d4:5d:7a:42:0b:0b:7d:1b:ca:18:1c:33:2d:
15:3a:60:2a:3d:5f:e4:e7:f2:f6:2b:21:a9:b3:bf:
6d:df:3b:ff:b0:74:da:ba:bd:7d:8e:a7:72:f5:9f:
24:96:a0:69:48:37:f9:61:9b:8c:c5:c9:d0:8c:97:
89:ab:54:43:a3:14:51:23:29:63:9b:4e:9d:ec:cd:
75:66:85:c2:63:12:20:10:b2:fb:aa:48:16:12:a2:
2d:d9:42:ea:d0:aa:58:b6:4c:4f:3a:58:66:8e:d6:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:85:81:19:5F:A4:FF:A4:CF:8D:74:6F:67:E8:27:3A:60:BC:69:AF
X509v3 Authority Key Identifier:
keyid:74:35:90:C9:8C:AD:DB:EE:1A:D7:89:5D:38:2D:50:F5:FD:BC:48:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDWQyYyt2-4a14ldOC1Q9f28SK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c2:c8:72:01:8d:4a:3c:c0:03:60:8f:5b:78:a8:b6:f7:af:
52:83:11:e2:d7:16:43:51:f3:77:d0:08:79:bc:e2:b2:17:55:
1a:5d:7e:31:a7:99:c5:db:56:61:ec:a6:32:84:73:70:9d:ac:
85:5e:78:e6:b2:e3:31:df:70:af:03:a8:51:24:cb:a6:45:05:
b8:32:4b:56:3c:e2:e7:db:65:5c:60:e6:c2:ba:1b:ca:bf:b7:
61:83:11:7d:46:6d:5a:03:03:bd:03:09:3f:6b:e9:61:11:a1:
22:53:6f:b0:0a:fd:88:f5:d0:37:53:30:a7:a2:f9:34:f5:b0:
a5:84:03:bc:2e:df:d0:2c:6b:c7:70:f3:7a:c8:d3:84:7c:c7:
f5:e4:b2:fa:dd:ef:50:af:1a:93:5c:e6:e2:a1:04:1b:24:e7:
38:ad:4a:45:2c:10:08:91:11:7d:d8:30:c5:a6:2b:c4:a2:a6:
30:df:c4:81:a7:c9:e5:a4:8c:63:da:e4:34:00:14:d3:5b:eb:
a8:b2:68:dd:ca:8c:7f:5e:1d:4f:74:ce:2b:bb:da:98:cd:f5:
ba:81:ed:74:30:20:6a:03:f0:0c:03:02:2b:74:83:66:61:a7:
4a:41:ee:2e:ae:80:ae:c9:68:42:cc:31:f8:06:29:11:9c:33:
f3:a9:02:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:35 2026 by rpki-client