Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
File: dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft (raw, json)
Hash identifier: G3ALdVZyEOZUUFSTuLs6EPMDXiVnyn/M3fVRf7WKcpM=
Subject key identifier: 11:E7:44:46:8D:3E:D0:DE:4A:D1:22:01:81:D6:97:CA:75:F8:77:5C
Authority key identifier: 76:96:23:B8:B3:7F:C8:C5:74:5D:57:5C:09:EF:C4:CE:A8:B6:DA:09
Certificate issuer: /CN=769623b8b37fc8c5745d575c09efc4cea8b6da09
Certificate serial: 019D2AE05AB2D9F23F1EFE341642A027652F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
Manifest number: 0FBF
Signing time: Thu 26 Mar 2026 16:00:39 +0000
Manifest this update: Thu 26 Mar 2026 16:00:39 +0000
Manifest next update: Fri 27 Mar 2026 16:00:39 +0000
Files and hashes: 1: dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl (hash: BTX3eDkOvQa6C2Sf7ETwDo8Y02hu3vF53GAJgQzEnAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:5a:b2:d9:f2:3f:1e:fe:34:16:42:a0:27:65:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769623b8b37fc8c5745d575c09efc4cea8b6da09
Validity
Not Before: Mar 26 16:00:39 2026 GMT
Not After : Mar 27 16:00:39 2026 GMT
Subject: CN=11e744468d3ed0de4ad1220181d697ca75f8775c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:8b:ba:60:54:93:c9:4c:86:85:99:5f:7d:
2e:87:a6:29:ab:e8:cc:d4:d1:11:4d:c0:3a:d2:df:
f4:4e:39:9e:fa:db:04:8e:48:cd:bf:0d:b2:a6:d1:
19:44:36:d3:a7:19:d3:a2:d0:7a:5c:07:6d:1f:57:
2f:eb:8f:0e:29:d5:5f:50:c9:90:b8:84:76:7e:77:
2f:6b:ec:0d:ff:9b:97:ed:b6:06:f1:bd:a5:c3:19:
8d:aa:5e:43:5a:b2:fa:6f:2d:21:0e:42:bf:ee:3d:
5b:8a:22:50:48:74:7f:d7:91:9d:c0:12:32:a9:d5:
13:80:6e:fc:24:f1:0c:a6:b4:d4:ec:b5:d0:66:03:
e7:c3:ec:32:f8:43:3b:a8:a4:99:2c:99:20:31:c0:
89:ae:b6:51:28:6d:58:78:21:63:b9:c7:0b:06:39:
1b:e5:44:d5:93:ac:26:43:f1:69:d2:f9:d4:7c:73:
08:08:b7:1e:b7:97:e5:21:68:5f:d7:37:d7:43:db:
3f:c5:ae:e7:0e:79:5a:57:a5:8c:6c:c8:72:76:08:
0b:a1:13:3f:db:25:39:7f:3f:1e:10:63:d8:33:e3:
cb:1a:f3:4d:cd:e0:3c:68:a8:5d:f6:72:8e:68:e0:
7f:22:5b:4e:82:0a:b1:1b:9d:11:0a:8d:5b:98:5e:
23:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E7:44:46:8D:3E:D0:DE:4A:D1:22:01:81:D6:97:CA:75:F8:77:5C
X509v3 Authority Key Identifier:
keyid:76:96:23:B8:B3:7F:C8:C5:74:5D:57:5C:09:EF:C4:CE:A8:B6:DA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b6:18:8f:1d:fe:1b:f0:f3:d3:50:c2:47:32:9b:cd:40:f0:
69:b9:11:09:f9:ea:43:f5:ea:76:a8:0f:bf:0b:e6:3c:9e:83:
c4:e5:03:b5:c8:d7:2e:16:ff:c9:55:0d:da:1e:d3:59:94:da:
f6:84:aa:df:95:94:5d:f4:de:09:92:c5:fd:bf:20:10:79:31:
72:93:cb:d1:29:e7:9a:97:90:09:6a:38:55:77:8d:8c:ba:11:
8f:57:6e:7e:9a:f9:f7:35:f2:50:42:5d:a8:21:5d:ca:e5:a9:
da:d7:0a:39:5c:d2:68:dd:20:bc:83:f4:59:84:86:4c:97:3c:
bd:3b:62:fe:ca:6e:d7:76:ee:29:df:60:f5:b8:00:86:51:d6:
ca:95:9c:6e:92:33:db:c0:0d:51:6e:bb:bc:b8:58:d4:21:bb:
8e:39:c4:28:26:42:11:64:85:80:68:b6:c1:75:90:ed:31:a6:
07:a5:81:d7:cb:1e:47:f8:bd:ed:63:ba:b5:9f:3f:8f:55:7e:
eb:7e:b8:bb:48:64:a7:a1:7f:d3:68:3b:48:10:66:f7:9f:e3:
fd:23:48:ac:7a:8b:c2:22:38:91:42:d7:17:1a:0a:65:f3:09:
6e:c4:39:8d:bb:45:a9:99:a3:aa:7b:ca:97:fe:c4:7b:ed:ac:
e7:3c:0c:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4Fqy2fI/Hv40FkKgJ2UvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OTYyM2I4YjM3ZmM4YzU3NDVkNTc1YzA5ZWZjNGNlYThi
NmRhMDkwHhcNMjYwMzI2MTYwMDM5WhcNMjYwMzI3MTYwMDM5WjAzMTEwLwYDVQQD
EygxMWU3NDQ0NjhkM2VkMGRlNGFkMTIyMDE4MWQ2OTdjYTc1Zjg3NzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1SLumBUk8lMhoWZX30uh6Ypq+jM
1NERTcA60t/0Tjme+tsEjkjNvw2yptEZRDbTpxnTotB6XAdtH1cv648OKdVfUMmQ
uIR2fncva+wN/5uX7bYG8b2lwxmNql5DWrL6by0hDkK/7j1biiJQSHR/15GdwBIy
qdUTgG78JPEMprTU7LXQZgPnw+wy+EM7qKSZLJkgMcCJrrZRKG1YeCFjuccLBjkb
5UTVk6wmQ/Fp0vnUfHMICLcet5flIWhf1zfXQ9s/xa7nDnlaV6WMbMhydggLoRM/
2yU5fz8eEGPYM+PLGvNNzeA8aKhd9nKOaOB/IltOggqxG50RCo1bmF4jhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHnREaNPtDeStEiAYHWl8p1+HdcMB8GA1UdIwQY
MBaAFHaWI7izf8jFdF1XXAnvxM6ottoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHBZanVMTl95TVYwWFZkY0NlX0V6cWkyMmdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kZGZmNTMtZDZhYS00OTU2LWJhNjAt
YjQzNjY1ZTVkYWQ2LzEvZHBZanVMTl95TVYwWFZkY0NlX0V6cWkyMmdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kZGZmNTMtZDZhYS00OTU2LWJhNjAtYjQzNjY1ZTVkYWQ2
LzEvZHBZanVMTl95TVYwWFZkY0NlX0V6cWkyMmdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErYYjx3+
G/Dz01DCRzKbzUDwabkRCfnqQ/XqdqgPvwvmPJ6DxOUDtcjXLhb/yVUN2h7TWZTa
9oSq35WUXfTeCZLF/b8gEHkxcpPL0SnnmpeQCWo4VXeNjLoRj1dufpr59zXyUEJd
qCFdyuWp2tcKOVzSaN0gvIP0WYSGTJc8vTti/spu13buKd9g9bgAhlHWypWcbpIz
28ANUW67vLhY1CG7jjnEKCZCEWSFgGi2wXWQ7TGmB6WB18seR/i97WO6tZ8/j1V+
6364u0hkp6F/02g7SBBm95/j/SNIrHqLwiI4kULXFxoKZfMJbsQ5jbtFqZmjqnvK
l/7Ee+2s5zwMVw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:49:37 2026 by rpki-client