Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
File: D1pCPdyX3TDeyLhnPCSWjic3JnY.mft (raw, json)
Hash identifier: vxQlHlKFvhI5QYsO2WaCfEZHZlYMkOo+1r+LJkTPVWQ=
Subject key identifier: 41:C7:D8:A6:D2:9D:EB:FA:CE:16:D8:E8:FF:04:FF:A7:82:1B:34:AC
Authority key identifier: 0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
Certificate issuer: /CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Certificate serial: 019D29CDDA4F7AA2D54749AFC61CBAFC3C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
Manifest number: 034B
Signing time: Thu 26 Mar 2026 11:00:49 +0000
Manifest this update: Thu 26 Mar 2026 11:00:49 +0000
Manifest next update: Fri 27 Mar 2026 11:00:49 +0000
Files and hashes: 1: D1pCPdyX3TDeyLhnPCSWjic3JnY.crl (hash: OKm/o5SEaxOnm2aAbYCgkrCCRZr+1QOfU+XjT0w64Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:da:4f:7a:a2:d5:47:49:af:c6:1c:ba:fc:3c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Validity
Not Before: Mar 26 11:00:49 2026 GMT
Not After : Mar 27 11:00:49 2026 GMT
Subject: CN=41c7d8a6d29debface16d8e8ff04ffa7821b34ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:42:8d:09:47:24:86:54:6d:66:c3:b9:76:
4b:02:38:97:33:75:77:8f:3d:ed:1c:63:0d:c0:44:
09:58:f8:5f:b4:33:4b:1c:1d:d3:5a:1b:0e:df:3e:
5f:09:68:95:c5:4e:f2:8f:24:42:d6:3b:b1:7f:51:
eb:9d:2e:dc:07:a4:a3:08:15:c7:d0:d2:1f:29:b7:
30:31:c1:bd:2b:61:51:73:fb:ba:a9:f6:73:45:12:
8c:f5:db:76:a4:5e:4d:aa:6d:3c:6e:14:8b:3f:ff:
62:0a:cf:f8:aa:4c:5d:33:5c:5b:3f:7f:d7:79:a5:
f2:39:e8:ee:6b:42:6e:8a:a3:62:94:59:5a:25:5a:
4c:59:e9:6a:66:c4:3c:18:18:c7:da:6c:6a:92:e8:
75:a5:8f:49:1a:a8:1c:e7:72:dd:3d:a2:ff:91:46:
3e:7f:ea:cd:cd:ab:23:c7:80:d0:b1:28:c5:d7:16:
96:01:de:54:8e:15:56:65:3b:71:f8:3e:09:f7:0c:
0f:71:92:49:f3:2c:66:08:f0:65:99:a8:10:dc:ef:
d7:da:c4:2d:ea:ad:ba:5b:3e:34:08:e2:9e:7c:fb:
c4:7a:0d:73:db:6e:48:68:4e:5f:44:b4:f2:65:bd:
9e:4f:cb:64:33:49:c5:42:52:7b:21:03:75:9e:aa:
53:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C7:D8:A6:D2:9D:EB:FA:CE:16:D8:E8:FF:04:FF:A7:82:1B:34:AC
X509v3 Authority Key Identifier:
keyid:0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5f:3e:3a:09:14:f5:57:da:c1:f3:a9:b3:35:30:58:f4:55:
a8:08:19:26:c6:39:b8:07:63:04:dc:b3:a6:3a:44:93:8a:6a:
35:73:ce:ea:4b:89:e8:0a:24:85:56:23:3a:90:ee:6f:09:8f:
e8:e3:a2:ae:d5:d5:5b:6f:07:1f:a3:c1:3f:2d:65:63:9d:63:
d1:98:dc:04:a8:98:fc:86:8b:ed:ea:dd:9a:0a:18:86:5b:15:
d5:d3:f3:c8:6c:28:03:24:59:2d:9b:c9:db:73:f6:de:ef:50:
61:9d:99:75:75:2d:cf:36:78:45:f4:14:30:ff:79:dd:7b:52:
07:03:21:06:84:11:89:07:e3:9d:f6:ee:85:22:43:df:9d:a9:
22:aa:9d:88:16:74:c8:a7:9a:ca:d7:99:a6:84:17:b5:8b:1f:
4b:bb:11:67:ba:64:0a:f0:96:13:a0:8c:58:e9:cf:39:6e:d9:
f4:85:65:10:0b:b0:25:12:e5:0c:aa:c4:a7:e0:7b:50:27:77:
aa:ba:b6:fb:fc:fe:3f:06:b5:cd:b2:75:4a:aa:1c:7b:7e:6d:
77:72:81:3e:55:d6:87:5c:55:24:a0:e7:f6:b3:46:e1:6d:20:
21:28:c2:43:a6:7d:8b:23:ad:d8:a6:1b:dc:ed:d6:03:b2:50:
20:12:f8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:26 2026 by rpki-client