Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
File: dBkW6TW7TmhYsdIjYVrONp7SaB4.mft (raw, json)
Hash identifier: 4EwkAyxrVk7eQdHol9x6rVZwqffDUGRfTdHUfmeAmGM=
Subject key identifier: 80:4C:04:75:CD:8C:BF:5A:1D:86:37:A0:1E:2B:05:AA:83:CB:AA:0C
Authority key identifier: 74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
Certificate issuer: /CN=741916e935bb4e6858b1d223615ace369ed2681e
Certificate serial: 019D29CDE04782D3E02DB5DBD24DF57E3B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 11:00:51 +0000
Manifest this update: Thu 26 Mar 2026 11:00:51 +0000
Manifest next update: Fri 27 Mar 2026 11:00:51 +0000
Files and hashes: 1: dBkW6TW7TmhYsdIjYVrONp7SaB4.crl (hash: /wYKb0l+3Z0YyySHkJE8PGi0SpM5/ZSSh8FlKwHBDqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:e0:47:82:d3:e0:2d:b5:db:d2:4d:f5:7e:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741916e935bb4e6858b1d223615ace369ed2681e
Validity
Not Before: Mar 26 11:00:51 2026 GMT
Not After : Mar 27 11:00:51 2026 GMT
Subject: CN=804c0475cd8cbf5a1d8637a01e2b05aa83cbaa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:6d:73:77:5f:27:e9:15:1a:a1:05:dc:09:
0e:9a:52:67:db:dc:a0:b5:27:5c:42:c0:94:cd:55:
3f:73:62:04:e1:43:84:36:95:59:7c:ab:ee:7e:4b:
9c:bc:3a:88:45:c1:b1:46:eb:f2:e2:a5:b6:05:36:
cb:2c:09:9d:c1:ba:1d:14:bb:05:49:7a:fd:b2:5a:
db:6d:c9:e0:d7:2d:9d:81:1d:74:79:4a:c6:1c:dc:
28:7c:23:84:10:fd:8b:84:76:40:df:e1:95:63:4c:
a3:eb:ff:5a:b7:3a:1d:13:4d:6d:fe:ef:b4:a6:ed:
f8:6b:05:90:a5:82:66:74:d3:9f:7f:d6:e7:32:53:
ad:45:62:d0:32:5e:98:eb:52:f4:bf:d0:77:8c:59:
5c:11:23:08:dc:39:5a:35:ca:d3:2a:f6:a1:d8:c2:
95:93:0e:c1:6b:73:c7:54:be:65:5a:73:b3:0e:e8:
e5:19:33:0c:64:99:ad:53:f5:ed:e5:9a:28:54:32:
ef:31:ba:e9:51:15:2b:8d:f4:b1:59:54:54:db:49:
35:20:5c:ff:29:b3:3f:bd:0e:f6:e6:93:62:57:d8:
10:6a:22:40:dd:7b:1a:45:3f:08:f8:de:bf:98:d6:
bb:1a:e7:40:01:be:98:f3:c6:a2:d4:b2:59:03:ee:
47:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4C:04:75:CD:8C:BF:5A:1D:86:37:A0:1E:2B:05:AA:83:CB:AA:0C
X509v3 Authority Key Identifier:
keyid:74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:20:b1:f9:49:a2:95:e1:55:cf:17:16:2b:14:9f:22:cb:f4:
1c:1e:51:16:29:fb:88:1a:cb:cc:a7:ce:7a:d3:66:58:7b:c5:
0e:4a:18:44:96:61:3a:56:1b:14:e4:27:70:b9:ad:75:b9:be:
8a:60:90:27:67:7b:39:99:c5:49:79:ab:bc:1d:b4:d9:9c:8d:
3d:75:f0:35:8a:89:93:6f:f1:74:0f:d9:9e:33:08:d1:e1:87:
93:90:2e:cd:6f:52:2a:58:c2:e4:cc:47:c7:4c:c3:60:14:3c:
c4:e5:01:48:2d:6e:69:b3:8c:d1:3e:8a:e0:e5:bb:34:62:62:
32:f0:f7:4e:10:3e:28:3d:5a:00:7c:b8:cd:dd:b5:ef:b3:e0:
78:b8:ef:e2:f9:59:62:7a:d4:a0:40:bb:03:03:d1:c9:11:94:
35:ae:b4:7b:dc:c3:72:d1:34:48:f8:ed:6b:52:60:a8:bb:c6:
d4:44:34:29:74:f1:d8:02:a5:5d:2e:53:5d:5e:64:57:3d:15:
9b:fe:b5:02:df:1e:ad:64:d3:bc:e2:14:1b:ea:02:e8:85:31:
c4:8c:f9:1c:c1:8d:77:07:96:58:9a:da:95:45:66:03:99:37:
36:3a:10:6b:5e:65:f9:5a:21:49:9c:4a:71:1d:af:52:44:07:
67:0c:7f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:27:57 2026 by rpki-client