Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
File: DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json)
Hash identifier: HgwEoj/ivuJ5MkCfUjV8CMSkXHMu1SYWFFtFBUgRI5M=
Subject key identifier: 81:22:D3:C3:60:F8:FF:EF:E6:80:D6:CD:CB:E6:1B:FB:EB:EB:34:B4
Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Certificate issuer: /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Certificate serial: 019D329ABA6A146E9A52CA889B0DEFBF192E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
Manifest number: 1889
Signing time: Sat 28 Mar 2026 04:01:34 +0000
Manifest this update: Sat 28 Mar 2026 04:01:34 +0000
Manifest next update: Sun 29 Mar 2026 04:01:34 +0000
Files and hashes: 1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: GVELjyTuQ5aup1aH3cq5y6RCK/mMvF1CRZQMuNSEORE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:ba:6a:14:6e:9a:52:ca:88:9b:0d:ef:bf:19:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Validity
Not Before: Mar 28 04:01:34 2026 GMT
Not After : Mar 29 04:01:34 2026 GMT
Subject: CN=8122d3c360f8ffefe680d6cdcbe61bfbebeb34b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:a2:d1:b9:70:32:b9:fc:f6:17:1b:98:d8:
64:eb:5f:92:ac:87:69:bd:51:f6:13:92:9a:4b:94:
92:cd:a6:fc:ff:5f:07:18:16:e0:17:51:ce:ce:54:
af:0f:0a:17:38:e1:64:6f:a3:91:b3:ee:bc:71:99:
4a:0b:41:b2:8f:d3:88:24:45:36:06:dc:63:39:17:
34:17:3d:53:53:3a:68:29:7b:c7:b2:d0:44:cb:ec:
13:56:c2:f3:04:37:57:57:5b:3c:0b:5d:44:07:50:
08:bf:3b:e7:8e:08:00:bf:56:60:d4:88:79:a8:59:
19:b3:74:9c:9c:d9:ad:a2:26:2c:4d:f0:ee:8e:df:
52:08:62:1c:54:4f:bf:b6:f9:5e:72:17:41:59:13:
b4:8b:9f:67:bd:00:fa:83:94:c7:08:56:51:41:b0:
16:62:7b:6c:c5:0a:54:a4:29:17:2a:e4:22:af:f5:
23:3e:17:68:5a:94:f1:99:8e:03:78:bc:e4:86:c9:
da:e2:cf:25:d4:b7:55:8e:2e:7e:f0:e2:2c:82:da:
54:bf:8d:fa:b3:c4:56:ce:74:f7:22:e3:2f:75:ef:
25:ff:8a:6b:58:37:ac:5e:d8:61:17:fd:0e:52:35:
ed:21:ca:a8:21:54:ea:59:c0:25:b0:78:b8:c7:cd:
1f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:22:D3:C3:60:F8:FF:EF:E6:80:D6:CD:CB:E6:1B:FB:EB:EB:34:B4
X509v3 Authority Key Identifier:
keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b6:c4:7c:74:66:da:88:b0:bb:5c:50:f5:86:2d:b9:9e:b0:
cf:6e:32:05:5f:b4:f6:8a:84:49:e0:98:0d:0d:aa:51:23:53:
53:a4:0a:c6:3b:b1:a4:2b:78:52:85:5c:a0:fb:22:52:f5:64:
05:6a:a7:32:8b:b4:d0:23:ed:b7:64:af:91:96:9e:d6:93:45:
25:f3:8e:55:34:42:32:3f:2a:98:33:fe:65:15:47:af:3e:4c:
d4:7d:09:8e:49:a4:36:d5:9c:66:92:b7:bb:04:50:a0:4f:e3:
6a:aa:41:99:fc:9c:71:3c:17:7b:d9:2e:d1:61:54:47:d9:a9:
a3:56:80:d8:e3:55:56:87:d0:34:ef:df:b4:be:e0:50:7a:49:
14:5a:a6:9f:9b:bb:dd:7a:20:2b:7c:45:96:a0:d1:ab:1b:3c:
e0:cc:73:02:9e:ee:5b:a5:87:86:bb:eb:a9:e1:43:67:19:0c:
46:c9:6d:15:77:15:6a:1b:4d:ee:da:3a:7a:d0:8c:9c:92:fe:
c9:72:67:51:73:e0:38:d9:f0:7f:31:67:47:b8:bd:f9:41:a6:
3e:08:d9:a8:47:59:20:09:93:4f:a6:3f:2a:4e:65:51:15:f8:
30:75:51:cd:f1:b1:fd:c6:56:fa:d3:e3:5e:9a:fc:4c:11:9b:
14:62:d5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:36 2026 by rpki-client