Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
File: DlNS2UQbZcIBbtjrfi8jWVRDT10.mft (raw, json)
Hash identifier: pilWfpkT2pctnQAuuh88aJkm5h6JL8QKxgCS4LPbPnQ=
Subject key identifier: 55:E0:F3:7F:1D:52:0C:8D:5A:E1:BA:9A:A8:66:73:6A:77:AF:6A:AF
Authority key identifier: 0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
Certificate issuer: /CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Certificate serial: 019D27728149E8EBF22D794377F8F10E73C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
Manifest number: 042D
Signing time: Thu 26 Mar 2026 00:01:48 +0000
Manifest this update: Thu 26 Mar 2026 00:01:48 +0000
Manifest next update: Fri 27 Mar 2026 00:01:48 +0000
Files and hashes: 1: DlNS2UQbZcIBbtjrfi8jWVRDT10.crl (hash: ZItehN4C/R7IEdXkf9/A8TJblsbThA19zOjYMxMHHGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:81:49:e8:eb:f2:2d:79:43:77:f8:f1:0e:73:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Validity
Not Before: Mar 26 00:01:48 2026 GMT
Not After : Mar 27 00:01:48 2026 GMT
Subject: CN=55e0f37f1d520c8d5ae1ba9aa866736a77af6aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:8c:28:6a:ef:90:2c:c7:58:79:06:28:3d:
b3:16:4e:70:6b:bd:f9:8b:1c:ff:42:72:7d:5e:f1:
5a:69:4b:0d:9b:88:53:be:45:18:29:34:b7:7b:48:
10:cc:fe:12:91:58:ff:b3:d2:87:9a:45:1d:5d:4a:
86:9e:0e:6f:24:f9:c1:71:e2:ce:76:ec:1e:23:50:
3a:96:f9:b8:ca:06:e7:8a:69:f0:03:a3:58:26:d0:
ee:51:7b:5f:73:f6:c6:52:1e:35:17:03:02:35:53:
47:ec:ed:5c:82:7c:b2:46:30:56:f6:e1:fa:84:7c:
d3:17:25:c3:8e:e2:8f:48:da:06:55:a5:d9:eb:1f:
ef:00:e8:71:a9:f5:08:c4:b0:94:ab:3b:20:bd:bc:
8e:cf:70:c6:71:a3:39:c6:b4:a1:aa:2b:46:22:53:
01:90:6e:5e:d0:be:3f:23:f4:f6:04:1d:97:52:7e:
c9:fa:65:48:ea:6c:e3:8d:6b:21:08:7e:19:0a:68:
23:24:00:ed:90:e7:2d:a8:90:5a:d0:98:20:e0:e1:
fa:e3:33:c6:b1:84:b8:fc:6e:f1:aa:3c:15:ff:e5:
cc:cd:ff:d5:19:18:77:2b:30:e0:a2:66:72:44:25:
13:48:0e:1b:33:8a:f5:06:e9:29:0c:2a:78:18:da:
76:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E0:F3:7F:1D:52:0C:8D:5A:E1:BA:9A:A8:66:73:6A:77:AF:6A:AF
X509v3 Authority Key Identifier:
keyid:0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:8b:a0:1f:56:e9:5b:c9:6c:bb:1d:29:5c:1f:07:35:60:42:
aa:bf:23:67:dd:fa:a3:99:4b:dd:0f:ec:11:20:cc:c8:f9:c9:
01:2e:42:ed:66:8d:48:65:4a:65:10:8f:51:ad:05:9f:b4:d3:
aa:92:87:46:11:ac:8c:43:b6:9b:e3:b6:d6:4c:bd:23:66:a0:
1a:31:e4:0d:cd:44:7c:96:a9:95:58:78:d2:f1:63:5e:e0:20:
6e:07:c9:59:55:84:09:81:dc:1a:53:f2:18:05:94:ef:7e:ba:
7b:a9:fa:df:3a:e3:f7:29:36:02:2f:5b:7a:e6:b3:74:97:85:
a2:04:a3:f8:d3:ae:b8:92:19:cf:bc:5c:dd:a8:7d:9b:e1:4d:
34:90:f7:65:bc:26:9a:80:1b:44:79:84:4c:ae:3f:7d:b7:cc:
74:fa:6f:7b:eb:ce:ed:e3:96:41:33:d3:96:c7:63:c2:f5:52:
60:ff:34:4c:d3:c9:11:a3:60:c6:d0:18:eb:0a:6a:48:68:3a:
97:5b:1d:54:bb:90:ad:ec:2a:77:1a:36:3d:85:29:45:10:19:
c9:3d:93:50:92:ed:11:11:28:78:62:c7:ad:e7:87:b1:83:65:
39:2f:7c:49:13:31:dc:8c:50:b1:4d:c3:e3:d8:65:8e:2e:04:
b8:c4:2c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:22 2026 by rpki-client