Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
File: DDvIzqseeTohA5zQseVHLHJkH2g.mft (raw, json)
Hash identifier: igB3ziOQRP0tDde+Br0IVqrOfiBkcbTS/AdiqvHljBg=
Subject key identifier: 71:6F:C5:3F:8F:E6:E9:34:C9:88:69:E9:9B:EE:7E:69:BD:B4:9F:BA
Authority key identifier: 0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
Certificate issuer: /CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Certificate serial: 019D29CE08CC19B51B55C0B6098FB46F4603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 11:01:01 +0000
Manifest this update: Thu 26 Mar 2026 11:01:01 +0000
Manifest next update: Fri 27 Mar 2026 11:01:01 +0000
Files and hashes: 1: DDvIzqseeTohA5zQseVHLHJkH2g.crl (hash: tvAsg94W3Xg6oeqCAhsneM+QDtgu2YB0AHdS3W8+E0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:08:cc:19:b5:1b:55:c0:b6:09:8f:b4:6f:46:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Validity
Not Before: Mar 26 11:01:01 2026 GMT
Not After : Mar 27 11:01:01 2026 GMT
Subject: CN=716fc53f8fe6e934c98869e99bee7e69bdb49fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:c6:df:65:ed:13:7f:83:f2:a0:1d:97:ed:
35:48:dc:33:c2:df:ac:d8:d3:d7:e2:ef:02:59:c3:
ea:fb:0e:12:ae:d9:8f:2f:d5:dd:89:cf:ea:b1:b7:
66:58:d1:13:a7:5d:3b:f4:d1:dd:d3:d8:df:09:91:
58:23:c4:fc:ce:04:48:d6:cb:8e:d8:e7:52:fc:be:
cc:64:68:c1:9c:fc:9c:12:66:64:7f:b1:25:e5:41:
aa:31:1b:08:d4:01:c5:eb:3c:5e:42:78:b6:2b:7a:
a5:62:e8:8c:b8:b4:2e:78:d7:c5:4b:de:d3:63:41:
3c:a9:89:25:1a:cf:08:ce:2d:97:cd:62:5b:c1:71:
60:ac:05:e6:b0:7d:1b:df:27:f9:7f:e3:3c:dc:6c:
66:68:ce:0b:43:7e:a5:e0:7c:8e:8f:24:d1:ff:4e:
2f:85:bf:fd:fc:77:4b:6e:5b:77:f1:03:c0:64:0d:
12:37:e4:91:e4:b4:1f:fa:5d:6e:db:17:8f:a1:59:
89:5e:07:2b:2d:ab:f6:8b:2b:01:ef:79:bc:3b:89:
37:a3:0f:70:7c:e7:48:0d:1d:8f:01:cb:01:28:00:
0d:0e:77:0e:83:73:7b:46:22:86:af:be:14:d3:5d:
6a:3b:c7:7b:dc:f2:f1:3d:9e:51:5d:44:61:05:e6:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6F:C5:3F:8F:E6:E9:34:C9:88:69:E9:9B:EE:7E:69:BD:B4:9F:BA
X509v3 Authority Key Identifier:
keyid:0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:46:f0:5b:4b:3f:6d:33:04:5f:37:f1:1e:35:d5:c2:e2:ca:
78:c1:11:50:d3:c7:30:01:c6:e0:1b:6c:a5:73:43:4b:7d:05:
28:df:9a:6b:51:aa:d7:5f:05:55:7a:5b:8e:0f:22:d1:47:41:
8b:34:e6:81:16:cd:72:c5:fa:08:06:41:84:4a:2e:36:25:bd:
32:78:47:54:9d:c4:0b:4d:e9:d9:0b:2e:4d:bb:e3:82:2e:be:
2d:74:7a:1f:ea:f8:3f:fc:ee:f1:5d:f6:f8:6a:56:38:c1:ce:
ed:35:a6:e1:6d:a2:30:dd:60:39:bd:ea:19:eb:ab:08:f4:ab:
92:0c:4f:52:03:44:72:e8:b4:30:f1:fb:5d:17:0f:91:ef:a7:
14:a2:c3:54:2f:50:4c:25:f5:55:00:cd:e3:38:a5:15:b8:17:
cd:fd:49:05:06:10:b0:a2:b9:31:24:22:a5:52:2b:a7:1c:9f:
52:95:a9:f0:a1:d5:85:b0:2e:27:4d:51:06:7d:e3:68:78:49:
9f:7a:74:fe:a1:12:a7:3c:c3:52:01:8e:8d:e3:a8:f3:8e:ea:
bc:21:51:01:9c:ae:a9:38:f0:3e:43:3c:b5:78:89:6b:a2:6d:
b0:22:12:10:8c:dd:47:e3:15:4d:c2:96:3d:11:62:c8:1f:5f:
6d:ad:39:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:32:23 2026 by rpki-client