Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
File: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft (raw, json)
Hash identifier: AIHtUB3JH0RNTPvKZQkChwCU6EHp6oMhG4bvjA4G89Q=
Subject key identifier: C1:3C:ED:8D:96:14:6D:E3:DD:99:C9:3D:00:C7:2F:31:60:E1:0F:6F
Authority key identifier: 0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33
Certificate issuer: /CN=0ccc36028d005810caba24614bd60731dd495033
Certificate serial: 019D265F3D8C1DEFF55E246C1D3D527753D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
Manifest number: 03F7
Signing time: Wed 25 Mar 2026 19:01:08 +0000
Manifest this update: Wed 25 Mar 2026 19:01:08 +0000
Manifest next update: Thu 26 Mar 2026 19:01:08 +0000
Files and hashes: 1: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl (hash: J76dXyuoNJGdKUXDjYCWdPX7eMxGh19o4hzDpnnWXVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:3d:8c:1d:ef:f5:5e:24:6c:1d:3d:52:77:53:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ccc36028d005810caba24614bd60731dd495033
Validity
Not Before: Mar 25 19:01:08 2026 GMT
Not After : Mar 26 19:01:08 2026 GMT
Subject: CN=c13ced8d96146de3dd99c93d00c72f3160e10f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:42:be:76:89:e5:4f:8c:32:dc:77:29:17:
92:81:8c:9f:52:5e:4d:cc:08:55:49:31:90:6f:55:
42:99:b4:32:da:32:34:d3:b3:f4:7b:b2:c2:28:ad:
e6:03:93:86:c5:d8:8f:9b:6d:37:b1:e0:a8:16:30:
c8:1b:54:f0:4d:59:58:e1:1a:25:57:4a:af:23:96:
78:d9:99:0c:84:06:e0:e5:7a:1a:0e:b2:2d:49:66:
58:3f:5e:ff:4c:57:fd:ab:e8:12:5e:68:19:a1:6e:
4b:83:94:ad:48:f8:c1:ed:fc:4c:7e:b4:23:7f:47:
d3:5a:55:90:0b:87:ac:6e:4c:58:d4:b5:05:3e:a9:
00:08:a4:20:d2:aa:94:d7:da:c2:89:36:51:f8:a7:
98:c1:4e:15:0f:c8:19:fa:07:65:31:ee:32:0e:37:
ac:41:a1:ac:a6:7f:b4:fb:f7:86:e7:8c:cc:2e:d1:
93:be:3c:cd:4e:75:4b:d4:7b:40:4f:7d:dc:eb:d2:
84:52:18:07:c5:c8:36:c3:a1:0c:9a:d1:8a:2f:13:
d2:8b:c8:be:e0:65:a9:e0:92:d6:f7:ee:fb:74:e6:
dc:c6:59:71:df:55:2e:80:3a:dc:ec:e0:14:18:cc:
b9:8b:87:9a:d5:f4:07:9f:d4:49:b9:16:22:e7:44:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3C:ED:8D:96:14:6D:E3:DD:99:C9:3D:00:C7:2F:31:60:E1:0F:6F
X509v3 Authority Key Identifier:
keyid:0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:db:9a:34:5c:33:3e:f7:d3:47:8f:8c:0e:50:16:6f:02:7a:
c2:44:ba:60:38:bf:d0:6e:07:3f:27:96:8c:9a:4f:81:42:07:
c9:13:0c:23:9b:a6:7f:a8:3e:a5:f9:21:7c:b3:8f:dc:25:10:
76:3b:11:7b:b9:16:68:0c:58:11:91:be:58:2d:d7:ab:bb:06:
df:9f:d3:5b:46:da:7f:b3:46:c2:71:ba:dd:85:d3:21:28:ab:
fa:d4:57:cf:07:d4:d2:49:63:1a:a1:0f:25:7f:45:4a:0e:96:
6f:98:17:05:3c:48:7c:87:14:7d:de:f5:01:4d:9c:ac:13:57:
9f:58:87:d0:b7:3d:6b:85:a3:20:c7:a7:e9:51:53:b6:2f:96:
10:2d:53:e4:14:bd:66:1e:ca:21:f0:84:09:21:24:e8:2b:5f:
84:4c:7e:52:27:9a:09:75:a6:12:52:c4:42:58:17:56:98:6d:
c4:f4:a4:2c:6a:1e:02:c6:1d:85:bf:23:65:2d:20:c9:37:d1:
5e:85:0b:8a:5a:73:92:c1:ed:6b:b7:3c:ad:96:85:8e:d6:73:
28:7c:f7:65:1d:d7:e7:52:03:ef:be:e2:54:5c:66:c3:3b:ae:
f3:5f:1c:26:0d:fc:b3:36:c9:e9:0e:ef:b6:5a:34:fa:f5:55:
96:63:b1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:51 2026 by rpki-client