Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
File: DmuhOkKdJETI5sfYf-vxnVD-dQo.mft (raw, json)
Hash identifier: FIJ9DABUJ85sKQI/BrdtYbdu2VNZbiVi2cbTgq67L2s=
Subject key identifier: 77:4C:FC:36:B7:A4:00:DB:93:F6:95:EB:87:0A:55:60:03:31:9B:BC
Authority key identifier: 0E:6B:A1:3A:42:9D:24:44:C8:E6:C7:D8:7F:EB:F1:9D:50:FE:75:0A
Certificate issuer: /CN=0e6ba13a429d2444c8e6c7d87febf19d50fe750a
Certificate serial: 019D2704D6B662D2B1BD5C3CB2642483E104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:02:01 +0000
Manifest this update: Wed 25 Mar 2026 22:02:01 +0000
Manifest next update: Thu 26 Mar 2026 22:02:01 +0000
Files and hashes: 1: DmuhOkKdJETI5sfYf-vxnVD-dQo.crl (hash: zeG4w9nuhhrzhJTXYiKx6ipHJbogm9YB/gckWQhK4D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d6:b6:62:d2:b1:bd:5c:3c:b2:64:24:83:e1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6ba13a429d2444c8e6c7d87febf19d50fe750a
Validity
Not Before: Mar 25 22:02:01 2026 GMT
Not After : Mar 26 22:02:01 2026 GMT
Subject: CN=774cfc36b7a400db93f695eb870a556003319bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:1d:42:dc:4a:7a:67:d4:b6:b5:f7:31:2c:
0a:2b:89:b8:4f:a1:ca:4b:5a:7c:df:be:a3:a6:25:
c6:92:d0:2f:42:98:7d:ec:f7:2e:a4:dd:b7:ab:b0:
49:30:df:1e:1b:87:83:b0:16:2e:67:a7:88:41:d3:
a7:61:08:1f:07:37:60:f0:8e:d0:a8:34:4b:a5:3c:
c7:ea:34:01:e7:32:e7:07:e0:ed:d0:32:11:bc:c8:
4d:8a:2d:1b:af:21:d6:c3:2b:38:bd:ad:03:0b:1c:
47:04:2e:bd:7e:c5:11:72:bf:b9:45:5a:e7:d2:ec:
b4:df:7e:a6:eb:3d:0a:eb:f9:58:53:1e:cf:0e:28:
bc:a5:5c:8e:c4:ec:0e:05:80:89:88:54:0a:c7:06:
0a:55:9f:12:f5:00:6e:ed:0f:0f:4c:ec:1d:ae:c5:
b4:8d:76:3d:5c:65:04:c3:03:f8:48:68:1d:ca:05:
b6:fd:ad:7f:53:df:e9:51:cd:01:4f:bd:cf:76:14:
b1:cb:7f:a5:71:d5:8c:83:b1:dc:16:54:d2:b2:a2:
ac:78:6a:da:1d:86:27:0a:2e:69:5b:36:33:4a:1c:
93:02:73:26:be:bc:42:33:67:33:b6:9d:41:de:7e:
4a:48:c5:1d:52:f6:9a:0a:0d:dc:97:fd:fd:fd:ff:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4C:FC:36:B7:A4:00:DB:93:F6:95:EB:87:0A:55:60:03:31:9B:BC
X509v3 Authority Key Identifier:
keyid:0E:6B:A1:3A:42:9D:24:44:C8:E6:C7:D8:7F:EB:F1:9D:50:FE:75:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:53:28:50:51:54:ce:09:0f:18:0d:45:47:eb:bf:29:81:d4:
04:db:7a:73:d5:43:c7:25:b0:94:95:bd:d2:1e:26:56:6c:26:
74:f1:eb:c5:bb:5f:a5:18:b4:d4:5b:f3:b2:6f:88:93:af:30:
f1:e7:5a:af:d7:b1:89:75:f9:b1:46:1d:5b:a6:ae:e8:a8:b6:
0b:70:f5:a2:9a:f2:cb:07:e1:bf:00:20:5a:24:71:67:2b:98:
1f:0f:f6:8b:08:33:e7:ba:86:6e:dc:5a:74:24:23:c8:95:11:
fc:85:1d:ed:d9:0e:8a:9e:95:0a:c9:e2:87:0a:44:3c:8e:02:
b7:94:91:05:22:9b:a6:fc:ac:e0:7e:76:52:ab:b4:22:32:0a:
82:16:cb:51:3d:b8:db:f8:bc:9b:6e:55:9e:28:be:97:f0:19:
36:92:b1:96:75:6a:94:14:8c:f6:aa:99:54:ea:c8:4e:e1:a7:
e5:20:25:8f:20:9f:73:16:da:c0:3d:62:4d:0f:f7:be:e7:a8:
4a:bf:07:c7:e1:7f:c4:c7:83:b4:38:ba:63:0d:dd:9f:cd:b7:
1e:9d:d5:c5:17:20:a1:89:17:7e:1c:75:4c:8a:32:90:71:e9:
5d:30:fb:0a:29:75:14:2e:91:9c:c2:43:15:b2:67:9d:cb:3f:
c1:3c:19:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:09 2026 by rpki-client