Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
File: dQRxYHUyqMev1g1PMXqtxJDrogY.mft (raw, json)
Hash identifier: A0Vd8B8dUa+fFPwJ4a/tXMOINdkhCofGkzoveRLXYsU=
Subject key identifier: 62:E6:2C:8B:D7:85:24:06:0D:4B:48:5E:46:79:5E:26:EE:F8:84:11
Authority key identifier: 75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
Certificate issuer: /CN=750471607532a8c7afd60d4f317aadc490eba206
Certificate serial: 019D2704430B8AC5D8C82DF68DD1681ED335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:23 +0000
Manifest this update: Wed 25 Mar 2026 22:01:23 +0000
Manifest next update: Thu 26 Mar 2026 22:01:23 +0000
Files and hashes: 1: dQRxYHUyqMev1g1PMXqtxJDrogY.crl (hash: gvTRuryNq13na6DPAMnNCRJgjpmhNNXEvK/tETArrLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:43:0b:8a:c5:d8:c8:2d:f6:8d:d1:68:1e:d3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750471607532a8c7afd60d4f317aadc490eba206
Validity
Not Before: Mar 25 22:01:23 2026 GMT
Not After : Mar 26 22:01:23 2026 GMT
Subject: CN=62e62c8bd78524060d4b485e46795e26eef88411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:b1:7f:b5:13:0a:33:df:dc:d3:c6:a6:74:
fa:0a:34:c7:73:f1:ba:c8:6f:b2:5c:94:6b:e8:28:
6d:1e:5e:93:b8:69:ec:9c:32:58:62:c9:dd:f0:af:
c9:93:38:d6:cf:2d:7c:12:78:14:72:3b:85:5b:f8:
e1:b2:87:7d:b9:9c:75:5a:95:3f:58:e9:f5:5f:5d:
58:4c:12:ed:58:3f:40:a2:1d:b5:b4:00:30:b6:c2:
71:ce:5e:d9:21:12:23:37:09:8d:71:69:01:55:68:
89:f9:01:80:f1:70:45:52:42:45:69:e6:99:e6:8c:
8f:15:56:fe:b4:a1:b3:68:ec:5d:f6:80:cd:9e:c5:
33:4d:cb:40:92:29:2c:cc:4b:fd:b7:06:6f:92:ce:
c8:c6:6e:4e:b5:82:fa:b4:9f:d5:85:0a:56:1b:1b:
17:72:d0:65:5f:70:ac:e0:9a:f5:69:8a:80:91:3e:
ba:fc:9c:af:03:61:65:c6:f5:5b:3b:c8:79:7d:a7:
27:2d:01:d4:1c:60:d1:5b:77:a2:37:62:ac:22:f7:
c0:c8:c0:e0:82:1e:24:ba:83:fd:a8:8c:51:03:63:
53:98:05:fe:0f:72:ce:2f:5e:6f:56:a3:36:a5:95:
5c:b5:08:90:ec:56:91:a4:54:a6:ee:dc:0d:31:77:
18:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E6:2C:8B:D7:85:24:06:0D:4B:48:5E:46:79:5E:26:EE:F8:84:11
X509v3 Authority Key Identifier:
keyid:75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f7:ed:c6:f6:f5:11:3e:29:7f:fe:f7:4e:eb:b7:aa:4e:8b:
b5:fa:6a:e2:76:b9:f7:5d:25:85:20:83:8a:e3:1e:6d:6b:de:
ba:9d:67:49:9c:2e:cc:63:d4:07:7a:97:75:a7:b8:cd:9c:12:
c7:d0:f5:db:30:55:0b:71:54:ef:08:c9:11:28:e0:3d:e2:3a:
f9:f0:a3:fc:26:1d:30:35:3b:c7:2f:21:d9:62:47:34:c8:2f:
7b:a4:b8:b9:c8:52:49:36:a9:59:fe:83:86:57:33:1e:9f:ea:
7e:ff:73:53:90:80:a1:ac:b7:7a:98:ad:75:91:88:8c:90:31:
30:3e:de:74:fe:53:fa:3c:4f:41:f0:2d:f2:0b:dc:76:69:b8:
6c:b3:ce:81:e9:fe:15:e5:05:ed:51:12:62:bf:6e:34:77:9e:
e6:cc:87:d5:67:fb:e2:a2:29:51:74:a3:5d:0f:af:f0:44:f2:
72:25:d3:06:d7:8f:21:e7:47:be:8f:a6:d1:10:ca:5b:e6:d6:
d4:06:f1:52:9a:84:3a:97:7d:6e:32:ac:7b:a0:14:6c:51:2b:
74:13:48:5b:f6:b1:62:29:f4:20:96:3a:2a:ee:93:af:7a:99:
47:ff:fa:cd:c2:e9:14:1c:39:a2:7f:b3:84:94:f0:07:6a:25:
b1:92:40:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:48 2026 by rpki-client