Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
File: Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft (raw, json)
Hash identifier: nCoAlJ7xksNHshQEgUNQXz25jZIcJOrWjkPJY4O5xhA=
Subject key identifier: 6A:FE:EF:22:C2:E2:27:16:BA:42:E8:AD:03:A4:32:87:E1:07:83:33
Authority key identifier: 0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
Certificate issuer: /CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Certificate serial: 019D28F32C81D7218D999A2EDCD1CE002625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
Manifest number: 16C4
Signing time: Thu 26 Mar 2026 07:01:58 +0000
Manifest this update: Thu 26 Mar 2026 07:01:58 +0000
Manifest next update: Fri 27 Mar 2026 07:01:58 +0000
Files and hashes: 1: Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl (hash: 1itOhq28bGrFAH1pp0kS6NjJKGHcVC+pcB84VSJPZSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:2c:81:d7:21:8d:99:9a:2e:dc:d1:ce:00:26:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Validity
Not Before: Mar 26 07:01:58 2026 GMT
Not After : Mar 27 07:01:58 2026 GMT
Subject: CN=6afeef22c2e22716ba42e8ad03a43287e1078333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:d4:6d:27:87:c3:49:8b:a1:f7:e2:1c:b8:
d6:03:68:d6:74:b7:99:70:d7:aa:a6:11:94:77:b0:
4b:8d:bd:80:18:a1:13:ab:34:7c:7d:38:b8:21:d6:
c7:f1:db:11:cb:5e:08:89:6a:22:71:a4:85:94:f8:
02:34:55:bc:85:e1:34:e3:55:b1:02:ce:87:e2:58:
0e:9e:6f:78:47:dd:aa:31:91:ca:3f:6a:66:69:1a:
2c:f5:c2:b7:40:17:b7:c1:3e:e0:e0:94:b3:95:71:
af:9b:52:6f:73:45:99:da:3d:56:37:6f:af:05:0c:
ea:23:22:e5:b6:a9:6d:dd:2f:e6:7c:fe:05:ac:88:
2c:fe:97:24:ba:95:06:bb:f3:79:52:c5:73:f0:b9:
e1:b1:4e:a7:31:5f:63:d6:64:16:1c:32:6b:04:f6:
31:e3:ff:41:f2:63:e2:16:33:ce:6d:19:36:7d:14:
78:8c:ad:9f:ac:dc:58:8c:c0:0e:0a:41:13:23:47:
9e:87:f5:c3:02:25:25:12:37:a5:6a:35:c9:68:4b:
56:f3:18:e9:f8:3b:07:a9:a6:4e:35:61:46:27:7e:
89:9f:72:ae:7b:9f:1b:aa:ae:6e:93:29:84:84:01:
21:73:de:74:68:5a:7d:f8:10:d8:28:ba:a7:bc:00:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FE:EF:22:C2:E2:27:16:BA:42:E8:AD:03:A4:32:87:E1:07:83:33
X509v3 Authority Key Identifier:
keyid:0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3b:a7:89:45:de:ed:e1:65:86:5b:3d:ca:c7:fb:5f:a4:8f:
44:06:b3:7c:4f:e0:30:94:ea:d0:d0:44:e9:9c:85:f1:b2:16:
83:8e:26:96:08:e9:44:28:df:f2:83:20:18:7d:81:46:05:f7:
60:9f:66:5d:00:9d:6e:75:12:74:7e:23:72:e1:94:5a:e1:75:
0e:58:c8:12:cc:52:e8:db:11:be:4c:16:0b:4b:61:9b:24:fd:
61:64:2f:39:a4:ee:31:49:a4:79:34:44:bb:55:3b:d0:e9:65:
4f:fd:57:5e:a9:fe:d4:3b:e9:47:6d:7d:8f:28:20:00:4e:d7:
b5:40:4a:3f:ea:b3:86:76:9a:f9:22:1c:ad:4f:60:6c:18:b9:
3e:78:e8:94:d2:c6:87:c8:f2:92:4f:c4:77:6c:9b:a2:2b:f0:
31:95:21:9b:2b:e7:42:64:71:e5:71:25:35:47:34:52:4f:22:
67:06:ee:ca:aa:c2:6a:17:1e:bf:86:96:ac:27:cc:75:7d:ec:
e4:0f:75:d1:76:ce:ff:0c:cd:2d:82:4e:68:5f:6c:68:aa:53:
57:19:eb:4d:af:c5:0e:04:c6:82:27:0a:19:98:47:50:13:7a:
7f:0e:84:41:c2:2b:30:12:68:86:4c:f0:80:eb:de:0a:90:8c:
d7:45:85:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:56 2026 by rpki-client