Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: 1EtIldvc/TD/sckHZGIc+xFScjHURXfc35RSoUg7hhk=
Subject key identifier: 8A:C7:E5:3C:EC:5F:D8:21:2A:95:84:1C:9D:20:E6:04:F6:10:56:EC
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 019D265FF512A362964B350E7AE973A0BADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 15A9
Signing time: Wed 25 Mar 2026 19:01:56 +0000
Manifest this update: Wed 25 Mar 2026 19:01:56 +0000
Manifest next update: Thu 26 Mar 2026 19:01:56 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: YNwuEGlsYsX1ZBU4fsJhbHvnZ25K2UEyTd8vDerGQdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:f5:12:a3:62:96:4b:35:0e:7a:e9:73:a0:ba:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Mar 25 19:01:56 2026 GMT
Not After : Mar 26 19:01:56 2026 GMT
Subject: CN=8ac7e53cec5fd8212a95841c9d20e604f61056ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:58:41:ec:8b:2e:6c:d7:a1:7f:dc:21:57:
40:33:06:7a:bc:ae:12:99:43:a3:7d:d1:20:59:34:
98:fe:12:de:a9:65:ca:2e:66:4d:24:e0:f0:15:8a:
a6:16:75:04:58:a9:8e:f4:03:bd:60:37:b4:7a:a5:
e5:61:9b:20:6d:cd:5d:56:a3:54:9b:8a:ba:7b:7f:
03:d0:40:85:7b:3c:9c:35:5e:05:04:2b:79:1a:9a:
81:d6:55:c0:6a:83:b8:6d:24:7d:3d:f0:16:ce:41:
47:93:cf:91:42:79:06:23:c4:f9:b9:03:0a:8d:33:
54:14:de:af:eb:ad:68:3b:54:7f:0b:ab:88:34:f7:
34:18:df:8f:6a:2c:6f:51:61:a1:bd:00:67:6a:33:
25:e3:21:3f:91:38:cb:0d:30:9c:7d:d6:77:06:71:
f2:7b:c8:14:5f:2a:54:2b:16:60:f8:63:f1:18:a3:
eb:8e:81:d9:e8:e4:4a:eb:33:2c:63:34:1f:68:f6:
44:01:af:13:a8:2a:e8:e0:56:93:4d:58:ac:c9:03:
19:c8:ee:48:81:96:fb:d2:a7:0e:ab:09:a5:f4:c3:
4d:e4:f3:77:0b:1b:8c:59:e5:ca:69:7e:f4:b8:4b:
d0:03:a2:5f:48:e6:0d:6c:48:77:8e:f2:b2:4d:5a:
07:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C7:E5:3C:EC:5F:D8:21:2A:95:84:1C:9D:20:E6:04:F6:10:56:EC
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:af:49:67:e8:83:da:77:23:41:7e:d9:d0:9a:91:4a:9e:40:
23:a4:5c:15:7f:65:4e:6a:19:d5:dc:37:3d:f9:04:9b:b0:7f:
75:c9:39:8f:36:53:97:dd:97:cb:a8:e7:73:98:80:82:c0:d2:
29:58:6d:ce:6c:cc:44:8d:3f:f1:ab:1a:a2:df:4e:6c:7e:cb:
41:62:b7:1d:57:d1:64:ba:cf:d7:db:52:0b:32:52:da:34:bd:
4f:89:5c:c4:6b:9f:2f:85:6e:3e:6b:ad:87:bf:45:83:f5:85:
17:22:3f:99:1a:69:1a:e3:d7:45:df:c3:0d:a8:5f:ac:4f:b3:
11:6e:c2:0a:73:f4:8a:46:8b:14:9f:4b:84:26:e8:a5:70:8a:
d0:44:05:17:5d:63:2e:a2:98:30:39:2d:72:da:71:b3:e9:1f:
99:7e:d5:6d:ba:95:fb:24:c9:5d:39:a8:33:61:00:5b:fb:09:
83:03:89:0a:47:96:de:e6:ad:c2:f8:4a:0f:03:d7:04:1a:0a:
21:43:39:e7:f5:07:b5:8d:82:e2:3d:92:4f:a5:70:15:17:67:
c4:6a:b6:0d:15:f7:24:32:57:52:02:b4:90:2b:ea:a9:ee:f3:
41:aa:91:e7:f1:db:c0:90:8b:e8:c7:a0:39:7d:47:cc:77:6e:
b9:a4:47:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:58 2026 by rpki-client