Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: bO2v2aDRH3wzgbP+o6l6a/vPjapXht/2crL+NiK0pjg=
Subject key identifier: C0:84:12:86:35:13:26:B8:76:5B:21:D6:A4:27:4A:57:8A:DD:7A:13
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 019D28F28EBE746BEBFF06AE729708366101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 07:01:17 +0000
Manifest this update: Thu 26 Mar 2026 07:01:17 +0000
Manifest next update: Fri 27 Mar 2026 07:01:17 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: vTRZsXKPvwdg5Fgr8KnzH3h4Q3VeD4gccVyqr04qBrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:8e:be:74:6b:eb:ff:06:ae:72:97:08:36:61:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Mar 26 07:01:17 2026 GMT
Not After : Mar 27 07:01:17 2026 GMT
Subject: CN=c0841286351326b8765b21d6a4274a578add7a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:ed:1d:8e:c6:00:93:37:55:44:84:90:b4:
3b:1b:c5:ef:25:85:50:98:a9:46:62:69:8e:7e:e8:
3c:d1:19:9c:cb:e9:0b:5d:79:99:76:8f:3d:9c:43:
a7:34:0e:d5:41:43:44:3a:38:92:c0:40:8e:ab:38:
1a:03:09:d6:5b:72:b3:31:11:99:2e:0d:38:d2:2d:
bd:a7:63:df:bb:91:1a:2e:f3:cb:54:b9:b8:f4:34:
2b:75:3d:3b:d1:47:53:ef:9b:c0:a8:9f:a9:b4:1e:
24:41:41:39:42:9c:61:d8:a3:30:45:c8:1c:38:09:
63:51:c4:3e:40:49:8e:95:fb:d7:00:51:bf:63:af:
65:4a:71:c7:a5:20:ea:36:e1:b9:a7:81:da:95:cc:
6f:1a:5e:40:ea:40:11:aa:c9:11:c2:e9:37:cd:e0:
5a:c7:0a:58:4b:0c:8e:57:6a:27:0f:b9:98:23:a1:
d7:ae:0c:1c:ce:fa:cf:7d:cf:6f:25:6a:2e:4f:48:
0e:da:98:48:1f:3a:18:28:88:ab:a5:77:ec:31:06:
86:6d:fb:f4:1a:38:ee:1c:b4:78:09:cc:97:4b:43:
f0:55:d1:c6:58:e0:4c:5c:d0:ff:43:94:43:c1:58:
64:6d:6e:6f:b9:18:a8:28:0c:32:bb:f6:f2:80:8f:
a0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:84:12:86:35:13:26:B8:76:5B:21:D6:A4:27:4A:57:8A:DD:7A:13
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c0:81:34:2e:f0:f7:cc:47:ef:92:fa:e3:aa:da:69:e1:4f:
89:06:46:11:9c:82:3a:c9:90:7c:68:50:1d:eb:19:02:96:7b:
32:d8:c5:ac:0e:7a:55:e2:37:0f:ff:f3:44:c5:c3:b6:6d:74:
54:de:2f:03:ef:c7:86:d3:0d:8e:89:42:09:7b:40:f8:c7:5a:
38:88:58:e3:b9:be:37:b0:f2:70:a9:0a:68:20:61:5e:cf:7c:
fd:8b:07:2e:e7:43:00:da:bf:37:21:0b:98:d1:71:db:5c:56:
aa:17:1c:59:f8:db:c9:20:5a:07:e3:66:c2:4e:97:24:e4:2d:
ce:35:14:ce:fe:19:7f:68:a1:21:31:32:c3:7d:0f:c7:ce:2a:
ac:ac:e5:5f:69:5b:0d:bd:4b:28:7f:14:97:ea:05:2a:e6:11:
e4:06:dd:a6:ed:98:8b:c0:a3:c5:c3:6d:24:35:cc:7e:f4:5f:
74:9c:ef:95:d1:33:6f:02:48:de:e3:39:1c:d5:07:38:b6:11:
76:9f:86:c1:6b:44:cc:07:ab:e6:0e:e5:7a:3d:98:e9:d2:15:
7a:41:92:c7:f1:9a:06:9e:ea:60:38:5a:7c:eb:4e:22:9c:2b:
d8:1f:3b:54:94:de:ea:7a:2b:05:d9:23:f2:86:e5:2a:a6:fb:
17:e5:48:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:39:42 2026 by rpki-client