Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File: DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier: V6pFi3GWfgpFyWFab+McfksAL4Ep6QlE0iA0XfMd+84=
Subject key identifier: 4D:3D:EA:88:80:94:11:3E:9E:9D:B5:F2:8B:4C:00:F4:C2:69:FA:5B
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer: /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial: 019D270451F34B8EF073B768A5551DFDACAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number: 0667
Signing time: Wed 25 Mar 2026 22:01:27 +0000
Manifest this update: Wed 25 Mar 2026 22:01:27 +0000
Manifest next update: Thu 26 Mar 2026 22:01:27 +0000
Files and hashes: 1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: H+pgvSakq1cqJqHqkkmqFbNOXwuIYs5n4yM9aydYo6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:51:f3:4b:8e:f0:73:b7:68:a5:55:1d:fd:ac:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Validity
Not Before: Mar 25 22:01:27 2026 GMT
Not After : Mar 26 22:01:27 2026 GMT
Subject: CN=4d3dea888094113e9e9db5f28b4c00f4c269fa5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:ea:3d:99:d7:61:1e:32:d7:c1:d7:b5:b3:
5e:2f:0b:81:70:8d:76:b9:07:b9:6b:d0:e0:63:b0:
cf:36:f9:d9:b3:01:f5:02:1b:19:f6:fe:29:11:65:
96:2d:4c:3f:ec:ff:0e:fb:80:a0:0c:14:9d:e4:c1:
18:aa:9f:61:a4:c5:f3:52:84:e5:12:54:b3:02:b3:
e4:c4:33:1f:e1:1f:74:f3:e9:41:6a:5c:27:c6:d6:
54:45:39:7d:ec:48:96:c4:ad:3a:dc:d0:52:43:e8:
84:3d:b6:7d:d0:25:26:11:f0:f6:53:3a:72:99:39:
13:fc:05:37:84:3b:59:51:0f:87:63:36:71:54:57:
4d:28:9d:fe:a5:8d:ae:61:9e:0c:d3:22:02:26:a6:
e2:ac:df:30:a5:9c:88:14:ae:20:50:1c:af:d2:85:
8e:8e:1e:a9:d6:15:f1:d9:17:7e:18:c4:16:b0:1a:
4b:c2:13:be:0a:ef:fd:61:37:57:2a:62:7d:c8:50:
03:9c:36:a6:9c:ec:b0:cd:8a:9e:59:80:37:ac:2c:
b1:8a:86:09:4e:05:1a:f9:65:b5:83:53:34:83:36:
2e:12:20:b9:34:57:f5:e6:81:60:7f:c2:31:8b:58:
36:e4:ef:e0:e4:d7:2f:68:c7:2c:4a:c8:9b:58:63:
1e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3D:EA:88:80:94:11:3E:9E:9D:B5:F2:8B:4C:00:F4:C2:69:FA:5B
X509v3 Authority Key Identifier:
keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e1:f4:c1:70:f9:a2:79:52:00:cf:4e:1a:17:2e:6d:0e:b7:
e3:a7:5e:1d:fa:9b:07:f2:c7:04:56:2f:cf:ac:a2:61:1d:f4:
7c:af:21:78:18:39:ef:c0:37:6b:57:68:18:36:37:30:17:6d:
9e:07:cd:0a:97:28:e9:20:0c:a5:96:4e:a8:26:a8:15:2f:c7:
b0:7d:01:77:55:b5:79:30:bc:b9:56:f5:9a:33:83:6a:3f:ec:
17:a8:c6:dc:23:f4:c5:63:de:8a:34:0a:07:8d:2f:d7:7f:72:
ac:77:49:05:60:67:93:e0:61:e7:81:69:b0:77:35:e4:9a:fa:
85:6b:f5:02:5e:96:2e:d1:0c:88:bb:ce:cf:a0:9c:24:e4:7d:
39:82:94:5e:b7:ef:b1:93:00:15:f2:d9:d4:b6:97:2b:5b:ef:
a2:05:5a:da:b1:17:e6:12:51:9f:8d:54:6c:32:51:1f:4e:c7:
7c:29:4e:2a:0b:64:6b:aa:2d:62:f7:9f:f4:9f:c9:a6:42:34:
52:f4:fa:8a:41:3c:45:da:9f:4e:1b:55:c1:af:fb:8d:fc:99:
e0:31:a5:81:37:63:2d:f9:15:ad:75:b2:60:4b:d2:2b:6c:b8:
d0:86:b2:11:90:aa:b6:cf:4f:b4:a0:6d:60:b2:bc:ef:cb:9d:
19:93:1f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:11:20 2026 by rpki-client