Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
File: D7o0uxz-i22g8bKwUkBsPpFhvyM.mft (raw, json)
Hash identifier: YcjAmFN3hbWDvsERzETwtJHJ7jf74AAoPiLpBcmDeQ0=
Subject key identifier: D9:A1:D4:1B:35:93:A9:F6:F6:34:E0:9B:FC:CB:50:41:AF:6A:96:6F
Authority key identifier: 0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
Certificate issuer: /CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Certificate serial: 019D27047A16725C01F611B723F95F58A850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:37 +0000
Manifest this update: Wed 25 Mar 2026 22:01:37 +0000
Manifest next update: Thu 26 Mar 2026 22:01:37 +0000
Files and hashes: 1: D7o0uxz-i22g8bKwUkBsPpFhvyM.crl (hash: dFsrNjSF754nTRQu/9dHpw7g+R8bfk82Z4ihOQ/Xbrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:7a:16:72:5c:01:f6:11:b7:23:f9:5f:58:a8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Validity
Not Before: Mar 25 22:01:37 2026 GMT
Not After : Mar 26 22:01:37 2026 GMT
Subject: CN=d9a1d41b3593a9f6f634e09bfccb5041af6a966f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:24:32:86:6b:14:94:3b:5c:a7:81:27:3e:3f:
66:40:0f:bf:08:c6:4b:08:af:33:42:99:52:89:2a:
a6:dc:86:ac:3f:3a:cd:59:3b:46:96:a6:27:19:4c:
5f:90:04:c8:d8:5f:52:0a:86:37:2d:88:57:ec:47:
4e:bc:7f:19:5b:f0:cc:f6:3d:fd:00:23:f2:93:04:
c8:69:4b:1f:c6:46:33:a6:f0:86:9a:e4:8e:c1:9f:
e1:04:08:55:43:45:82:3e:10:82:3c:0c:1c:e1:3d:
df:97:ef:4f:5e:8a:c3:fd:ca:60:1e:5b:36:b2:42:
07:38:32:54:4a:4a:b6:e0:75:ea:fd:aa:43:ae:8d:
4d:35:27:a3:1f:c4:d1:ef:5f:db:ab:6b:e6:7d:05:
0f:d1:48:4f:43:2c:a4:29:de:b6:50:9f:9c:14:db:
fe:e7:c4:aa:38:79:3c:57:a3:d0:e3:77:7f:a2:a9:
cf:82:f2:1a:e8:99:df:12:5b:c3:a0:58:03:5a:87:
c9:3e:e7:2a:93:c6:fa:77:4c:91:0a:74:c6:b3:ba:
a0:e5:8a:77:01:24:cd:22:b7:d5:04:52:c6:3d:81:
13:93:5a:e7:bc:d3:aa:38:47:fc:bd:84:d6:8e:2f:
f7:e8:1d:20:a6:09:e1:91:c0:d2:18:b2:d5:5b:0d:
e3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A1:D4:1B:35:93:A9:F6:F6:34:E0:9B:FC:CB:50:41:AF:6A:96:6F
X509v3 Authority Key Identifier:
keyid:0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:01:6b:ba:21:87:52:23:04:c8:84:5a:55:ba:e2:2f:f9:b7:
84:34:39:0f:a7:30:e3:58:80:34:43:a4:95:72:03:ec:54:f0:
39:60:2a:26:58:97:1b:cc:be:f6:fe:e8:21:ef:be:f2:cc:2d:
77:5b:b1:e7:70:f6:33:64:64:a9:57:52:a7:5f:fc:88:86:9c:
83:42:77:49:a9:40:87:b2:13:26:d2:68:a7:9d:b3:9b:f9:25:
c8:e2:89:3e:c3:9d:d5:d8:a2:a6:6f:de:4b:3f:eb:94:8c:fd:
3c:4e:19:6c:1d:31:cf:f5:82:55:7c:5c:15:bb:9f:3f:6f:d1:
f1:59:d9:ab:42:17:1d:ae:a5:ca:69:de:0a:90:1c:e7:50:b2:
1d:20:68:27:e8:1a:46:b1:61:94:94:0b:26:a2:8d:69:57:63:
42:6a:b3:1b:53:cd:23:60:a6:52:d8:1b:02:5e:87:59:86:58:
2c:63:f7:cc:83:65:e4:70:84:fe:45:2f:67:4e:c5:5c:4b:88:
67:21:1d:e8:09:d2:17:e9:54:fd:b2:91:89:5b:1e:c8:07:91:
25:1f:1b:72:75:9b:ca:a5:d4:99:ab:15:c8:79:21:b3:9d:ff:
7f:29:cc:3b:93:31:42:11:f9:56:06:4a:36:24:ad:d2:6f:11:
8e:61:a1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:38:06 2026 by rpki-client