Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
File: dgynIUsW9YyV1i3vAFkVhtvSPKo.mft (raw, json)
Hash identifier: 6vL1lH2/AGkzIc+14vWtNwgJ6zqWB1AupU/iEzh4dM8=
Subject key identifier: 73:B7:BA:05:92:AC:C2:14:AF:D1:5E:71:1A:19:1A:C1:69:F3:39:51
Authority key identifier: 76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
Certificate issuer: /CN=760ca7214b16f58c95d62def00591586dbd23caa
Certificate serial: 019D2704424835C72128223FE79F8427EE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
Manifest number: 0AF8
Signing time: Wed 25 Mar 2026 22:01:23 +0000
Manifest this update: Wed 25 Mar 2026 22:01:23 +0000
Manifest next update: Thu 26 Mar 2026 22:01:23 +0000
Files and hashes: 1: dgynIUsW9YyV1i3vAFkVhtvSPKo.crl (hash: TPH3+LHkVCqI/R/kUtvoAHcZHcn3jXdfYEtHyNp4G2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:42:48:35:c7:21:28:22:3f:e7:9f:84:27:ee:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760ca7214b16f58c95d62def00591586dbd23caa
Validity
Not Before: Mar 25 22:01:23 2026 GMT
Not After : Mar 26 22:01:23 2026 GMT
Subject: CN=73b7ba0592acc214afd15e711a191ac169f33951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:8e:10:86:06:d9:a1:c7:ba:7e:a5:e7:ff:
1a:61:7d:b8:14:99:73:75:15:80:9c:36:50:a0:e0:
96:a8:2f:e9:79:1e:87:63:31:e7:23:b2:e8:fb:bb:
23:ae:c1:03:89:01:05:bd:65:50:e5:5f:17:a7:02:
73:51:e3:d1:c7:c0:30:99:e9:3f:a9:1c:ad:c0:d4:
eb:97:8f:b1:01:a0:41:e8:93:0c:86:64:97:c4:ea:
55:e1:94:d0:39:da:7b:1a:bc:b8:a5:d6:48:4e:90:
fa:62:be:99:99:c7:41:19:50:6a:fe:cd:66:11:60:
3d:6e:63:3f:b2:e9:35:4d:8b:aa:7c:0f:05:0d:02:
ed:a3:e9:0a:06:32:67:8c:6a:90:11:16:c2:21:65:
f4:21:31:e5:74:9d:9b:c9:ee:29:07:e0:bf:eb:93:
61:b9:68:74:5a:23:21:1b:7e:1f:fa:b8:30:05:56:
1c:bc:e9:9d:0f:b5:50:4c:f7:8b:31:0f:5e:7c:3c:
c8:93:06:b8:07:f2:2b:77:72:9d:34:c6:1c:54:33:
76:e1:b2:67:27:05:4a:61:2b:6a:f7:f8:34:23:8d:
80:ba:c7:1f:80:0e:c9:d7:95:b1:c1:b4:64:e5:6f:
64:f6:ad:a9:b9:a8:9f:de:94:15:67:e5:2e:97:22:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B7:BA:05:92:AC:C2:14:AF:D1:5E:71:1A:19:1A:C1:69:F3:39:51
X509v3 Authority Key Identifier:
keyid:76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8c:17:6e:13:c2:3b:97:26:da:89:e6:fc:1a:ff:0b:2f:4c:
fc:7b:4b:fe:4f:a8:b4:60:d3:14:a8:0c:e5:c2:fe:fb:3c:4c:
a1:03:28:d7:ff:a2:e6:9f:1c:5d:39:cd:25:d3:18:3c:b1:5a:
e3:54:85:70:02:1c:a5:5c:da:9a:ff:26:97:43:76:6e:4a:ad:
96:99:c2:3d:c8:d5:23:70:0d:7a:74:a3:40:81:01:07:9e:3c:
b4:96:21:2d:db:3a:41:b1:ef:43:33:d5:0e:2d:dc:dc:fc:ce:
5b:c2:3a:01:d1:e9:cb:ae:c0:09:6a:40:17:f5:70:46:37:48:
84:3a:72:0d:e4:27:b6:77:10:c0:43:35:b8:8c:16:e6:8b:95:
a2:dc:ff:9b:10:1b:d1:85:29:98:83:16:ec:ec:19:85:6d:e0:
bc:8e:b3:c9:0a:b7:3f:c1:45:61:73:30:00:19:cd:54:cb:61:
b0:10:02:72:b3:5f:d0:2e:c2:b5:7d:f6:cf:54:19:59:d3:19:
d0:12:c0:dd:48:e9:af:43:c1:ca:82:11:67:8f:5f:9d:02:79:
98:0a:2a:ea:10:df:99:06:b9:e2:ec:40:e6:84:aa:6b:7a:17:
be:64:3c:70:bd:76:5e:1d:6b:c5:28:98:e6:f9:dc:d2:93:9f:
d5:c6:e3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:46 2026 by rpki-client