Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
File: dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft (raw, json)
Hash identifier: /CBxgYf/W7/qi203ThzBzPiJVQjXvUNzfB/+9f/dVuQ=
Subject key identifier: FC:36:D7:E1:47:54:22:3F:E9:D7:36:9C:AE:0C:18:DD:6A:5F:0C:CC
Authority key identifier: 74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
Certificate issuer: /CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Certificate serial: 019D2584390015B0D7C5B66E4318F5D68CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
Manifest number: 105C
Signing time: Wed 25 Mar 2026 15:01:55 +0000
Manifest this update: Wed 25 Mar 2026 15:01:55 +0000
Manifest next update: Thu 26 Mar 2026 15:01:55 +0000
Files and hashes: 1: dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl (hash: nl1oSTHjmZK+i0anchpb6/9b/ZuxfgQYfshRzjZCQMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:39:00:15:b0:d7:c5:b6:6e:43:18:f5:d6:8c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Validity
Not Before: Mar 25 15:01:55 2026 GMT
Not After : Mar 26 15:01:55 2026 GMT
Subject: CN=fc36d7e14754223fe9d7369cae0c18dd6a5f0ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e1:2d:68:e2:5f:b8:02:59:68:7f:34:79:65:
49:26:21:7f:ee:63:68:a4:d7:ea:a5:4a:20:22:e2:
1e:00:3d:0c:49:92:b1:35:df:b6:d6:98:0d:d0:6a:
45:80:d5:42:fb:b0:41:72:48:b1:b2:5f:b7:15:f6:
95:b2:c1:7c:be:03:ec:5f:8d:07:1d:8d:5f:03:71:
a9:45:c8:48:dd:bd:5e:bf:8a:2e:b8:ff:40:a8:58:
5e:26:aa:88:76:30:09:e3:4c:65:e3:01:39:64:5e:
f6:a2:53:e4:63:85:e5:7f:fc:1a:71:d8:4d:97:1d:
b4:10:9c:b2:c3:7a:f7:1e:c9:1c:b4:46:71:93:6f:
de:5b:75:09:35:45:d1:8b:0a:ec:42:ca:d9:42:24:
c7:0e:74:9e:13:a9:1b:b3:66:04:bd:69:0b:e5:67:
6d:78:a4:7f:03:33:98:8d:f3:35:a9:d4:87:d6:5f:
19:6b:74:df:f3:f0:03:2e:21:96:8c:90:e0:87:a8:
ae:6e:69:0a:49:76:1e:c2:d8:ee:af:c7:12:4d:25:
4b:5c:c3:eb:e0:48:f0:fb:e9:ca:7b:56:d1:32:12:
d2:d2:23:71:79:c4:eb:b9:7e:ad:bd:da:1f:11:53:
07:03:18:d2:a8:45:b6:5d:18:dc:f1:56:67:a4:9c:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:36:D7:E1:47:54:22:3F:E9:D7:36:9C:AE:0C:18:DD:6A:5F:0C:CC
X509v3 Authority Key Identifier:
keyid:74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3e:69:5b:63:09:90:7d:72:23:db:73:15:a1:17:d6:b0:4f:
5a:be:cb:f7:74:9d:63:c0:43:79:16:e0:bc:7e:a7:e0:63:b1:
94:b7:36:58:56:cc:e1:a4:f6:e3:c1:e5:df:b7:b7:67:c8:e9:
a5:a5:2e:52:94:2d:d0:b3:d3:f1:f6:bd:e9:1e:ea:45:a3:1d:
47:e9:b1:e4:d2:79:4c:45:e9:68:e4:21:a8:e8:f4:08:4c:69:
6c:36:0d:2d:66:1e:4d:9b:40:a6:9d:c8:69:48:5a:2b:34:85:
33:2a:5f:c5:9f:1a:72:74:aa:d7:e5:ce:8c:17:c1:17:e6:0c:
fc:f7:5b:e0:df:55:0b:7e:62:f5:f9:8c:32:30:f9:8a:3c:7e:
12:09:88:1e:3e:1c:79:51:f7:76:3a:ca:0e:16:8a:a7:2a:08:
ab:5c:58:a1:53:7e:fa:54:f8:77:9b:b0:b3:0c:26:36:77:93:
28:6d:99:c4:2b:ee:e1:e2:f9:0a:f6:36:00:e6:b3:a4:ba:21:
dc:36:18:86:c9:38:d0:97:b4:61:47:4f:1c:99:4c:18:eb:f5:
32:b9:f3:98:dc:3f:58:ac:29:35:58:5e:67:76:e2:97:a2:9a:
01:1e:cd:c8:2e:dd:d2:d7:b1:4e:ba:f2:90:4f:fa:e5:fb:f1:
7e:d6:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:25 2026 by rpki-client