Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
File: dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft (raw, json)
Hash identifier: fWjxZwkB5ASbm2N3ycgmQSGWAFRZ7tH8fE65xTUnlnM=
Subject key identifier: 5C:6F:0D:99:4D:60:EA:BC:7A:49:1F:5B:30:DA:DA:77:28:33:1D:A1
Authority key identifier: 74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
Certificate issuer: /CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Certificate serial: 019D292955C06634FE75F85A6CDD4746AC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
Manifest number: 117B
Signing time: Thu 26 Mar 2026 08:01:07 +0000
Manifest this update: Thu 26 Mar 2026 08:01:07 +0000
Manifest next update: Fri 27 Mar 2026 08:01:07 +0000
Files and hashes: 1: dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl (hash: JXYbA4MhDKi9jPTbsf4QFvyhFoR4rLe/VjjA6pB7sxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:55:c0:66:34:fe:75:f8:5a:6c:dd:47:46:ac:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Validity
Not Before: Mar 26 08:01:07 2026 GMT
Not After : Mar 27 08:01:07 2026 GMT
Subject: CN=5c6f0d994d60eabc7a491f5b30dada7728331da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f7:34:e8:53:c3:ea:5b:ab:a8:e5:47:87:44:
b0:ed:07:2e:ca:dc:39:65:38:cf:f8:f0:31:9e:49:
27:d3:f7:cb:cf:48:b3:fa:40:87:06:15:dd:f9:f4:
39:5d:db:5e:76:b5:58:d5:5c:e5:f3:e5:ad:75:e8:
f6:57:fe:84:83:a5:d6:6d:62:3a:bf:ad:b3:8e:89:
d6:ed:50:e0:b8:91:85:7b:b8:f3:75:09:19:38:6b:
b1:ec:3a:4f:f5:dd:17:de:bb:78:e1:31:6b:89:f3:
9e:d7:3a:77:a2:d9:9d:0a:3b:b5:17:84:9c:f9:6b:
3c:4e:12:4e:7e:67:a2:d3:3a:20:78:40:96:f8:60:
b2:83:bf:5d:cd:cd:a3:9b:3a:8e:b0:af:de:fd:21:
14:db:8e:da:06:5d:ec:4d:c3:fc:5a:92:2a:18:84:
b8:eb:1d:e2:ca:53:56:9c:69:43:d0:6b:09:7d:c0:
82:19:0f:8c:ac:ca:3a:4d:34:96:fc:c8:ba:f0:94:
49:b7:e6:3a:50:c4:f6:ae:27:a3:9b:ac:52:87:21:
bc:90:66:a5:e3:d6:da:99:d7:62:fc:06:ac:dc:c6:
14:6f:06:e7:84:94:9d:b8:e5:04:15:6c:9b:bc:97:
6d:b6:b2:8b:1f:10:62:02:50:20:a8:91:01:ae:6a:
3f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6F:0D:99:4D:60:EA:BC:7A:49:1F:5B:30:DA:DA:77:28:33:1D:A1
X509v3 Authority Key Identifier:
keyid:74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e2:79:10:b3:6d:1b:11:20:ce:6b:aa:92:ce:42:c8:9a:73:
53:80:36:9d:70:ce:23:92:48:68:6d:83:7a:40:d5:f4:54:36:
8b:33:3c:d1:5f:a1:46:72:62:be:0e:9d:6e:34:f3:03:4a:f4:
7c:42:3f:d8:33:db:c2:7c:ce:63:b1:70:05:d2:12:fd:17:47:
32:e3:a6:d2:60:86:00:75:e2:27:55:0e:01:a6:f4:ba:31:e5:
14:0f:6a:21:ad:ed:f4:62:b5:66:c0:22:dd:77:65:eb:59:32:
f1:01:d3:c4:6b:6b:5c:35:bb:9a:3c:0d:c7:ba:54:e8:c4:e7:
50:30:ea:c3:2c:17:c0:ea:4a:6e:d4:48:80:bb:69:d6:3b:73:
7d:6a:7b:4f:1c:b5:a7:4f:0f:c2:da:e6:71:c8:1b:4b:71:0b:
a1:5d:a2:48:6b:13:f6:dd:b5:2b:63:c9:c8:08:ac:d4:f2:35:
dd:60:09:37:4d:2e:97:c9:fa:63:86:9b:18:27:dd:6a:2e:8f:
9a:a3:a3:67:05:8e:84:e1:df:a2:08:44:16:14:6f:16:7d:2e:
76:a1:94:71:c4:3d:02:eb:93:b9:8d:07:94:7f:04:c8:15:32:
c6:50:c5:58:0d:d2:72:bb:96:2c:23:4f:b0:f1:8e:cb:49:1f:
c4:1a:94:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:29 2026 by rpki-client