Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
File: dlIO_x7h4o493PuJ58tvfYmnfJw.mft (raw, json)
Hash identifier: Tm/zhr7HBQ5MOKu1Pj6DJeqhme/NN/Z7r6aYW7621K0=
Subject key identifier: 30:3B:0B:3B:77:25:58:B1:D5:C1:96:8C:0E:F8:EE:3C:C6:75:0D:89
Authority key identifier: 76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
Certificate issuer: /CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Certificate serial: 019D2B178AD37CC74E680A5878A975A7D847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
Manifest number: 0414
Signing time: Thu 26 Mar 2026 17:00:56 +0000
Manifest this update: Thu 26 Mar 2026 17:00:56 +0000
Manifest next update: Fri 27 Mar 2026 17:00:56 +0000
Files and hashes: 1: dlIO_x7h4o493PuJ58tvfYmnfJw.crl (hash: egNeg/jS5X0dzNORlkcRNiFKb5YHDl18LDuGfmd4vUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:8a:d3:7c:c7:4e:68:0a:58:78:a9:75:a7:d8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Validity
Not Before: Mar 26 17:00:56 2026 GMT
Not After : Mar 27 17:00:56 2026 GMT
Subject: CN=303b0b3b772558b1d5c1968c0ef8ee3cc6750d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:f8:ad:b3:ee:81:cf:1f:7a:cb:ad:29:ea:
fb:83:cd:cc:cc:76:ba:9a:96:46:0d:55:8e:38:fa:
7c:02:8b:ac:fc:fb:ef:c6:81:67:72:d8:45:25:49:
03:79:f1:e5:78:23:4f:ab:39:fe:87:66:48:61:a9:
c9:f5:19:e3:cc:87:aa:27:ca:a5:e5:44:f3:19:63:
3c:1a:c0:2d:f4:16:73:70:e2:fc:97:2b:df:6e:3a:
e5:92:63:0f:ad:e7:1f:b4:f4:02:6b:8b:2c:36:34:
1f:89:29:c3:ca:f4:57:b7:97:e8:99:c1:1d:d3:ce:
39:1b:20:f2:46:1e:47:b9:4b:58:28:eb:74:15:e1:
ed:59:2e:c4:c3:51:50:ea:07:49:eb:b1:4e:4e:66:
91:5b:db:94:3d:70:1e:ea:61:b4:83:1a:d0:9c:00:
eb:3e:6e:12:ae:24:5a:1d:88:65:13:3b:9f:ee:31:
a0:fe:c7:35:a7:d9:a2:49:62:7b:a3:ff:e6:db:d5:
f2:1d:f6:db:16:1c:51:20:de:1e:0e:cc:11:ff:28:
83:2e:52:ca:0b:a6:e2:63:37:e2:79:4c:8d:7c:a1:
88:34:8a:c4:c6:1e:35:6f:38:e6:58:4e:26:53:6b:
eb:e9:d6:b9:ad:7e:76:94:c7:05:7e:25:d7:06:db:
d1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3B:0B:3B:77:25:58:B1:D5:C1:96:8C:0E:F8:EE:3C:C6:75:0D:89
X509v3 Authority Key Identifier:
keyid:76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bb:f5:6b:06:cf:72:d2:d7:40:29:5b:86:b0:4d:d9:48:34:
8f:6d:0c:54:b0:38:76:81:a7:87:0a:63:45:8a:b6:b9:8d:b2:
45:8a:c8:0f:da:f0:ac:b6:80:9c:df:ab:1a:1f:bf:5d:60:42:
bd:6b:c7:31:42:5b:1b:a3:2d:b0:6c:97:ec:8f:4b:6a:cb:bc:
42:1f:d4:34:3a:87:af:70:e6:cd:0f:cc:1d:12:80:43:33:96:
91:fc:bb:78:7b:cf:74:29:ed:bf:70:c3:89:8c:a6:a4:ae:b9:
f4:10:14:49:1e:a4:05:9c:9e:c5:5c:33:6d:62:93:01:1f:33:
2c:fb:0f:4c:c6:c8:8f:af:dd:bf:71:27:d1:97:4d:37:9f:05:
3c:35:65:79:90:7d:dd:f4:b7:21:87:1c:e2:8c:e2:b7:e1:28:
07:43:24:42:be:cb:95:d6:d6:84:25:c7:6f:4f:01:ff:15:7a:
f3:4e:3f:4e:f4:5a:51:5f:b7:df:1e:f6:e6:22:e6:66:23:23:
45:c3:77:ac:55:03:f1:c5:20:1c:ba:ef:ba:fb:ab:dd:ce:bd:
02:a5:71:a3:61:b5:63:7a:3f:54:0f:8c:91:fb:ab:e3:7f:4c:
28:cd:bb:96:ba:a5:3e:7d:4b:28:21:fa:78:48:90:0e:91:ac:
93:45:c4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:36:31 2026 by rpki-client