Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/DGEtRa7wHomBbymCLaqpuZS31Ek.mft
File: DGEtRa7wHomBbymCLaqpuZS31Ek.mft (raw, json)
Hash identifier: fPdqkK4wStGSwV5FGfzqNGqArd9NZe41ekErb1bEW5w=
Subject key identifier: 33:F4:9A:43:CD:49:A6:E5:96:45:12:64:6A:AE:57:32:83:36:35:37
Authority key identifier: 0C:61:2D:45:AE:F0:1E:89:81:6F:29:82:2D:AA:A9:B9:94:B7:D4:49
Certificate issuer: /CN=0c612d45aef01e89816f29822daaa9b994b7d449
Certificate serial: 019F905A055884B724EE2C593CD88565DE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGEtRa7wHomBbymCLaqpuZS31Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/DGEtRa7wHomBbymCLaqpuZS31Ek.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 19:00:46 +0000
Manifest this update: Thu 23 Jul 2026 19:00:46 +0000
Manifest next update: Fri 24 Jul 2026 19:00:46 +0000
Files and hashes: 1: DGEtRa7wHomBbymCLaqpuZS31Ek.crl (hash: 0f7ElYINe584K+sbKOjkR8rOPgQQaqSTVMImGMvX6yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/DGEtRa7wHomBbymCLaqpuZS31Ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/DGEtRa7wHomBbymCLaqpuZS31Ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGEtRa7wHomBbymCLaqpuZS31Ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:05:58:84:b7:24:ee:2c:59:3c:d8:85:65:de:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c612d45aef01e89816f29822daaa9b994b7d449
Validity
Not Before: Jul 23 19:00:46 2026 GMT
Not After : Jul 24 19:00:46 2026 GMT
Subject: CN=33f49a43cd49a6e5964512646aae573283363537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:62:dc:85:62:f3:73:6a:d3:45:c8:ab:8d:
78:04:93:f4:b5:3c:c8:3b:22:1c:37:ff:89:ae:59:
1c:4b:5f:d7:40:65:15:05:92:83:aa:c7:ff:82:c0:
2b:e3:b3:18:f7:60:54:3b:a4:56:64:d4:b1:d9:e4:
db:e5:7f:55:b5:db:11:c1:09:b3:87:11:7c:11:d6:
be:dc:41:b1:ad:48:ec:8d:9c:e0:f2:2f:3d:d3:f6:
fa:06:a7:c3:c3:db:98:7d:99:2e:a4:4c:8c:1f:14:
86:ca:00:60:74:76:01:52:8a:d7:2a:41:53:cb:9f:
6f:88:07:ee:17:96:74:49:e4:51:69:1f:f9:be:9a:
22:d5:f0:7c:a6:2e:b4:8d:b1:63:34:6f:e6:28:6a:
8b:79:21:ff:b7:28:cc:f1:9a:14:9b:fe:5d:16:1b:
78:1c:d6:c5:8c:c4:70:05:78:59:9e:12:1b:7c:22:
aa:12:36:a0:77:ec:97:fd:d8:68:53:6d:37:a8:4a:
06:49:3b:b9:87:78:98:cd:70:6b:b9:a4:cd:ef:29:
54:59:f9:69:96:92:42:ee:6d:65:20:ce:29:c9:6c:
5e:89:f7:76:38:8a:84:2e:5c:05:17:6d:c8:51:02:
80:6a:05:5f:29:c8:26:bd:3d:2d:a2:11:b6:f0:a0:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F4:9A:43:CD:49:A6:E5:96:45:12:64:6A:AE:57:32:83:36:35:37
X509v3 Authority Key Identifier:
keyid:0C:61:2D:45:AE:F0:1E:89:81:6F:29:82:2D:AA:A9:B9:94:B7:D4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGEtRa7wHomBbymCLaqpuZS31Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/DGEtRa7wHomBbymCLaqpuZS31Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/DGEtRa7wHomBbymCLaqpuZS31Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:71:ac:36:eb:2c:b3:d5:60:b5:96:11:8f:80:3b:41:f5:37:
d6:e1:dd:bb:f1:6d:4f:2d:6b:3f:2d:fa:9b:fa:2f:bc:29:63:
c5:95:ed:0b:72:2b:ea:5e:07:0b:13:20:37:6a:8d:05:e6:ef:
ae:54:96:9e:33:d5:fa:2c:18:4c:d3:6e:ef:ad:52:2d:72:67:
ec:12:bc:b3:57:df:e0:a1:74:0a:20:21:c2:52:e9:8a:50:c1:
2b:3a:2d:71:c2:67:82:55:a9:01:bd:fb:e9:53:da:ea:b1:f5:
89:ab:4f:47:11:30:f1:96:c5:66:72:b6:87:f6:ff:d7:24:a9:
f4:1f:dd:e6:47:a8:b4:ff:98:e2:5e:3c:63:cc:d9:4b:3e:6c:
b9:75:f9:c4:32:c7:e3:b2:11:c2:1a:b4:97:ce:d4:4a:54:21:
77:5a:03:dc:2e:3c:73:78:93:4b:44:b0:f4:ff:d5:1f:85:d8:
10:91:00:bb:06:b0:25:d6:3b:f1:e8:24:9d:75:20:6a:eb:f5:
bc:43:32:22:43:fd:34:bb:4c:57:7a:ff:b3:a4:81:b8:b9:f0:
4b:72:56:10:4d:ee:93:66:44:83:5c:b4:09:f8:53:6d:c5:a8:
23:89:18:bd:0e:f8:b1:e6:4c:4e:5c:8f:0a:6a:a1:b3:2f:71:
8d:a1:93:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:26 2026 by rpki-client