Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
File: DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json)
Hash identifier: BMnveneGlfJPX3vCL0MOTh8u37+hvYd4S3WKwbK46EM=
Subject key identifier: AE:7F:82:58:69:B7:1C:15:FD:AE:60:78:B5:49:2C:5F:5D:48:4E:EC
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Certificate issuer: /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial: 019D2704D9609B96973CB06AACBE60D9FB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
Manifest number: 0E11
Signing time: Wed 25 Mar 2026 22:02:02 +0000
Manifest this update: Wed 25 Mar 2026 22:02:02 +0000
Manifest next update: Thu 26 Mar 2026 22:02:02 +0000
Files and hashes: 1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: YIh8CUJ4A0ZiiUJluBtAo2nm2fMqrbvn3BQoFxElHM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d9:60:9b:96:97:3c:b0:6a:ac:be:60:d9:fb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
Validity
Not Before: Mar 25 22:02:02 2026 GMT
Not After : Mar 26 22:02:02 2026 GMT
Subject: CN=ae7f825869b71c15fdae6078b5492c5f5d484eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:14:3f:da:12:a4:33:ad:9c:16:8f:6b:a2:
8b:86:a9:49:c0:57:c5:63:3b:42:c6:0c:f9:95:69:
79:fe:49:44:cd:a3:a8:5f:88:d8:70:c8:85:c8:69:
86:a6:92:f8:0e:1c:76:6a:68:b3:32:24:fb:69:8c:
8a:9c:2e:47:fc:c6:60:ec:43:56:12:13:8e:7a:11:
dd:29:58:fa:5c:29:79:fa:bb:f4:cb:17:6b:49:31:
e8:8d:c5:87:4e:90:d4:5e:48:e6:8e:62:7d:00:20:
54:69:cf:5f:1e:66:5c:48:2d:6d:08:27:d7:3e:5c:
78:fa:e6:f4:15:92:e4:8d:cf:2a:b5:5f:f4:72:b4:
f6:01:69:8f:1b:a9:8f:f5:13:54:3f:e7:7c:91:d7:
3b:80:84:b2:7c:e2:8f:05:8e:c8:97:74:c2:11:79:
3a:96:41:7c:3d:e2:42:4f:50:bc:71:86:df:f4:56:
fd:93:98:e4:63:eb:53:28:9d:d9:1a:41:f0:6b:05:
59:68:52:bd:ec:ea:79:29:07:4a:3e:07:d1:fb:73:
e9:05:64:e6:e9:f0:09:14:c4:34:ac:6f:99:0b:f5:
2a:21:e3:0f:d5:6b:d6:f3:0e:e4:7a:7f:df:bf:d5:
86:3a:25:05:34:dd:b2:13:4f:c4:ff:82:75:7d:42:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7F:82:58:69:B7:1C:15:FD:AE:60:78:B5:49:2C:5F:5D:48:4E:EC
X509v3 Authority Key Identifier:
keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a1:e8:d3:b1:0b:1b:ce:2e:6a:44:7f:ce:32:81:00:44:66:
b4:a2:92:74:d2:0c:73:ed:6a:16:c4:39:fd:d0:ae:a4:a3:af:
93:39:10:a4:9c:9a:21:2a:8a:34:a0:16:ec:c2:bb:03:b1:a8:
2d:37:0a:4e:5d:ab:3e:c6:84:90:58:f5:82:c3:de:68:b4:cd:
e1:02:f4:03:a3:ad:9c:4c:3f:6d:9a:8d:dc:8d:80:4a:7d:af:
c4:7b:6a:f0:c1:5c:a3:9e:b9:ed:a1:8b:8c:d9:2f:c2:0c:60:
c6:0d:b7:d0:de:41:e3:04:65:18:ce:ff:38:82:93:10:6c:1d:
94:74:b3:20:51:86:8c:b8:5a:9d:8e:b2:c1:2b:49:00:23:c1:
f7:ba:41:8d:3c:bc:2f:53:40:36:ce:39:99:57:57:e5:ea:46:
28:8c:61:2c:d6:eb:e1:11:bb:f1:7f:3d:0f:dd:28:70:34:5a:
49:0c:d5:43:7c:e0:d8:fa:d4:3e:b9:14:8e:3d:cf:72:47:5a:
98:ab:7d:31:8d:13:66:e9:0a:c2:8e:fa:32:a0:d8:9c:a1:c0:
a1:d5:2b:f9:c9:e3:4e:8d:ad:69:3b:2c:01:e4:2a:00:b3:fb:
ff:62:df:76:24:42:14:fe:b5:2d:99:90:62:eb:0a:39:ba:ce:
0e:dd:31:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:26 2026 by rpki-client