Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
File: dJFafoze18DuIhnnMMGYy7eLxfI.mft (raw, json)
Hash identifier: rQc/tSGroZ3tLQ9SAX94QNp0OWZRkrKGND5fviYqge4=
Subject key identifier: 3D:67:9B:CE:B3:DD:51:62:52:6D:86:46:8A:9D:65:42:8A:EC:65:8D
Authority key identifier: 74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2
Certificate issuer: /CN=74915a7e8cded7c0ee2219e730c198cbb78bc5f2
Certificate serial: 019D273AC8F5091592C14008EA9F601DB305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
Manifest number: 03E8
Signing time: Wed 25 Mar 2026 23:00:57 +0000
Manifest this update: Wed 25 Mar 2026 23:00:57 +0000
Manifest next update: Thu 26 Mar 2026 23:00:57 +0000
Files and hashes: 1: dJFafoze18DuIhnnMMGYy7eLxfI.crl (hash: 0h5rwhw4hNurWstiXs0n+PIwd3BCcwAytufaPsLo+2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c8:f5:09:15:92:c1:40:08:ea:9f:60:1d:b3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74915a7e8cded7c0ee2219e730c198cbb78bc5f2
Validity
Not Before: Mar 25 23:00:57 2026 GMT
Not After : Mar 26 23:00:57 2026 GMT
Subject: CN=3d679bceb3dd5162526d86468a9d65428aec658d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:52:26:5b:fc:14:92:89:36:a4:a3:3c:c5:
22:d7:6f:87:a9:80:4d:21:09:31:6c:6b:4c:97:a7:
98:1c:9f:06:34:ba:d7:8e:6f:0b:87:00:1f:f0:43:
d6:ac:c3:f5:41:98:14:59:46:3c:c4:d9:6e:2c:59:
f2:e8:ba:79:4f:16:58:63:56:8a:2b:b8:56:8b:57:
66:30:fa:64:82:8c:96:e1:c8:5b:cd:5c:da:9b:92:
a0:9b:19:3e:0b:39:4f:2c:8f:f9:4b:dc:fc:68:3b:
d7:d2:80:57:68:46:d3:f8:2d:a0:d5:75:17:fd:af:
3e:34:51:2f:88:6b:82:53:73:f6:60:cb:76:18:fe:
78:41:5e:4d:5a:40:c3:7b:dc:29:ca:c5:4c:40:2d:
db:ef:1a:b1:70:47:ab:5f:c5:d2:11:dc:f0:65:68:
8a:ff:b7:88:31:e6:a4:76:49:ca:d1:cf:76:6a:71:
d2:ea:fb:2a:51:7d:46:b0:cd:28:1f:00:40:b6:c0:
c9:7f:23:2b:17:6f:14:13:24:e3:93:1b:e9:86:0d:
be:f0:83:e0:54:a7:d1:f6:8e:42:53:a6:38:77:88:
bb:39:68:68:73:90:d8:23:86:90:71:3d:ab:26:f9:
2a:39:3e:d0:56:fd:ed:42:fa:3d:c4:eb:84:2f:5b:
7b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:67:9B:CE:B3:DD:51:62:52:6D:86:46:8A:9D:65:42:8A:EC:65:8D
X509v3 Authority Key Identifier:
keyid:74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:20:dc:c3:be:1d:62:6d:e9:2c:0b:ac:66:a9:34:6e:a3:c4:
a6:84:fd:24:bb:5a:43:be:e4:df:53:d7:f0:cd:f4:92:bb:c2:
31:bd:75:c4:6c:a3:09:fa:22:f5:09:b7:93:77:07:60:96:93:
c8:3a:d8:e7:b4:37:71:9b:0d:66:49:ba:8b:1e:4e:f8:c5:da:
e3:39:90:0b:cf:01:b0:d5:a9:47:2d:2b:40:5b:c3:95:b8:e5:
01:7f:bd:f8:ee:66:2f:17:36:42:94:c3:74:e3:f4:35:26:4c:
87:40:7d:68:00:6d:36:eb:76:10:ea:4f:36:2f:37:d6:ec:0c:
44:83:33:cc:84:03:25:f8:c6:66:3f:53:3e:e8:27:4e:1e:e5:
9b:0e:ad:56:03:3b:e7:83:70:14:a1:5e:4a:fc:33:af:b3:d3:
77:64:37:b7:a6:61:4f:35:b8:33:33:88:0b:0b:a8:c0:85:c8:
8c:8e:5c:15:00:c2:01:b6:fd:a3:6e:84:ad:47:aa:e3:09:1d:
91:86:71:8d:e9:a2:2e:b7:15:6a:0d:72:a7:bb:18:2f:01:26:
32:27:62:23:6f:dc:67:5b:54:0a:07:47:29:3e:f9:cf:f6:60:
61:a1:d9:61:42:b7:bd:ea:af:ae:ae:71:27:6c:a6:5a:aa:08:
3c:7c:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:06 2026 by rpki-client