Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
File: dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft (raw, json)
Hash identifier: AdPnXzNqEyR1bzhbv435yBLmCHTfMKVSgVkEPLv6FKU=
Subject key identifier: 83:75:A4:D3:22:56:0B:0F:E2:C2:71:1E:14:61:AE:56:CA:96:6C:07
Authority key identifier: 76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E
Certificate issuer: /CN=763d7a5535a5249e97a75064669399a93c46cc8e
Certificate serial: 019D2B4F32FF278D88959703B3C0B0302522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
Manifest number: 0CC3
Signing time: Thu 26 Mar 2026 18:01:43 +0000
Manifest this update: Thu 26 Mar 2026 18:01:43 +0000
Manifest next update: Fri 27 Mar 2026 18:01:43 +0000
Files and hashes: 1: dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl (hash: MIjr9Of25a+shSTgHQnaQ5QCUwoUH9132vUjyMgBt08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4f:32:ff:27:8d:88:95:97:03:b3:c0:b0:30:25:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=763d7a5535a5249e97a75064669399a93c46cc8e
Validity
Not Before: Mar 26 18:01:43 2026 GMT
Not After : Mar 27 18:01:43 2026 GMT
Subject: CN=8375a4d322560b0fe2c2711e1461ae56ca966c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:e9:25:b9:bc:74:3b:02:06:c4:c3:62:e5:
8f:df:1f:da:c0:73:5d:fa:0b:15:a8:f7:c7:3c:b0:
d3:02:78:7c:9a:e6:bd:f7:d7:1f:63:62:4c:4e:4c:
4e:41:fa:64:38:d8:a4:2b:01:ba:89:62:d2:8d:52:
bc:5f:42:60:01:34:af:77:ee:0c:0d:76:f1:ef:af:
04:fe:b9:56:d9:e7:11:d2:5a:b7:e6:34:ec:c0:62:
d4:77:9a:f2:a1:77:0c:a0:5d:70:46:34:e9:7b:50:
b3:4d:cf:72:70:88:39:34:8b:d7:ac:a7:9f:a2:21:
d8:45:6f:72:e0:ae:e0:86:74:2f:ba:c6:37:86:fc:
40:86:c4:68:91:ad:77:4d:5a:d1:c3:b2:bf:08:0e:
f0:66:62:b4:75:5e:a6:50:8c:8d:7e:6e:31:76:03:
44:d6:93:ea:fa:4a:b4:df:de:b6:59:2f:2a:a1:eb:
be:d1:75:d9:92:25:3e:7b:e1:5d:ba:51:b4:8d:4b:
d8:79:18:73:dc:f4:93:8d:0a:27:41:4c:97:f1:a4:
5f:38:a5:1f:be:58:a5:1e:5d:00:2c:d9:68:1f:5d:
f5:66:90:d1:6f:59:88:82:da:6f:24:a2:d8:64:b7:
c8:ed:3c:7d:51:9b:e4:3a:ee:52:c3:53:9c:60:65:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:75:A4:D3:22:56:0B:0F:E2:C2:71:1E:14:61:AE:56:CA:96:6C:07
X509v3 Authority Key Identifier:
keyid:76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5d:1d:88:c5:8a:e7:65:b4:48:20:83:52:dd:7c:43:5b:51:
10:ec:dc:a1:13:6b:a5:b4:61:a1:04:b5:77:11:74:4e:9b:e9:
0c:71:02:6b:d9:5e:f5:7c:a1:3d:cc:cb:17:d1:9f:ed:13:a5:
7d:bb:b0:83:36:b6:c9:dd:b1:d5:7b:24:bb:88:36:49:96:19:
27:00:de:7f:9f:c6:09:7c:53:4b:4e:67:46:5f:61:22:86:2a:
f3:9e:b9:c5:dc:b9:cc:47:b0:30:06:c6:4e:47:3c:ed:bb:cf:
87:33:e1:e1:9f:b7:c3:fe:2b:6e:e6:35:7c:d0:42:4c:31:4b:
24:3f:d3:cc:a7:f5:25:7a:ac:8a:75:d1:02:80:f3:e1:6c:3c:
45:4d:ba:b7:48:b4:8f:49:48:28:00:a1:52:c6:2e:ed:8d:ca:
d4:5d:7a:1f:96:4b:fb:8f:e1:e9:9d:20:af:c5:b8:53:cf:da:
5c:5b:b3:90:a0:16:b1:23:93:77:e6:32:63:55:8a:08:41:b5:
30:80:e9:0b:5d:31:5a:76:7e:e5:18:11:cb:a2:a1:4e:db:a5:
e9:55:96:7e:a7:93:73:ff:7c:20:15:dd:a2:c4:67:28:7f:3a:
c7:76:7e:b9:29:cf:a3:d7:1f:04:1b:e8:dc:e4:0f:31:ad:eb:
95:84:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:04:07 2026 by rpki-client