Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft
File: dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft (raw, json)
Hash identifier: oBv4ABPSe56rNyLafGfFMtVMYPqLYokDPxD+MDEmLm8=
Subject key identifier: 61:33:B1:EA:B5:B1:68:7E:C1:5D:0F:CE:20:41:56:42:78:4C:06:D0
Authority key identifier: 75:38:C4:79:0D:6D:D9:3B:93:0E:5C:DD:20:F5:03:E2:02:91:F7:B4
Certificate issuer: /CN=7538c4790d6dd93b930e5cdd20f503e20291f7b4
Certificate serial: 019D26CD6BE20E836C80A62ADA56F9FFAFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft
Manifest number: 0230
Signing time: Wed 25 Mar 2026 21:01:29 +0000
Manifest this update: Wed 25 Mar 2026 21:01:29 +0000
Manifest next update: Thu 26 Mar 2026 21:01:29 +0000
Files and hashes: 1: dTjEeQ1t2TuTDlzdIPUD4gKR97Q.crl (hash: gxTwahaqWjMzemOke6VzcFsy+L8VQkS1W1sMTDooWXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:6b:e2:0e:83:6c:80:a6:2a:da:56:f9:ff:af:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7538c4790d6dd93b930e5cdd20f503e20291f7b4
Validity
Not Before: Mar 25 21:01:29 2026 GMT
Not After : Mar 26 21:01:29 2026 GMT
Subject: CN=6133b1eab5b1687ec15d0fce20415642784c06d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:86:7b:a9:e3:74:ae:bb:b8:b6:01:d2:2d:
f1:b1:25:48:c9:55:b9:94:c9:0b:00:0d:d9:cc:f3:
75:3d:3e:d5:4d:0f:2e:37:4a:88:d7:01:a7:8f:1f:
96:72:93:41:0c:5a:ae:9b:7a:50:22:bd:de:26:4c:
51:c7:d4:ad:45:d3:82:dd:c5:7c:9e:5d:8a:a0:6e:
3d:1d:18:78:16:35:ee:40:6f:b2:9e:cf:ae:22:af:
33:f7:c9:4c:89:aa:91:e5:bd:12:46:b1:39:58:d7:
57:11:dc:1d:29:a6:20:d7:9d:8b:2b:fd:4a:91:72:
b3:c2:ad:63:e9:18:aa:1d:e6:07:16:4d:2b:e5:14:
49:11:71:9b:a5:b6:e3:8f:75:e3:fd:3a:5a:55:d4:
62:48:d9:5b:4e:e3:fa:79:b4:2e:4a:34:71:87:2c:
6b:7b:b7:f7:98:cd:75:a2:63:4c:ac:0c:04:2a:87:
a6:31:aa:90:63:db:80:61:ad:af:61:d4:24:cb:d9:
88:d8:dd:f5:05:0d:42:d5:2f:38:a3:c9:61:51:51:
38:3a:0e:c9:9e:fa:f3:5b:9d:aa:c6:12:73:80:4b:
53:b4:0f:80:df:1a:72:31:1e:7c:c7:4b:3a:fc:91:
b0:de:76:95:07:43:c4:b9:37:9d:83:ae:9b:65:c9:
4e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:33:B1:EA:B5:B1:68:7E:C1:5D:0F:CE:20:41:56:42:78:4C:06:D0
X509v3 Authority Key Identifier:
keyid:75:38:C4:79:0D:6D:D9:3B:93:0E:5C:DD:20:F5:03:E2:02:91:F7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d1:61:b8:f7:80:85:65:2a:46:69:de:51:76:57:fe:b0:f8:
12:11:be:c0:05:d6:c6:86:34:e3:ba:c9:d1:a2:d2:81:bf:c0:
ad:24:f0:51:da:9a:32:95:9d:40:1d:16:10:a0:d4:e1:97:03:
a2:7a:e9:e9:62:d5:da:07:63:e2:45:da:b3:08:4b:3a:08:15:
1a:74:e3:00:57:a2:43:94:a8:30:c1:f1:c1:1f:5d:ec:c8:b4:
ed:38:0f:9b:54:15:00:e5:9e:d9:87:e1:86:1d:ac:77:57:88:
5c:61:6f:fc:16:0d:75:3c:0a:41:e2:c7:0e:71:34:8f:df:25:
b2:1a:7a:6c:0a:79:17:f6:f4:91:9e:2f:a7:c3:f9:2e:b3:a8:
42:e4:55:b9:2d:29:d4:57:fc:1b:eb:e4:44:6b:51:96:04:09:
cc:68:a6:ef:49:08:2d:a9:db:0b:e0:21:8f:c0:c3:2d:60:9e:
5f:f7:0c:31:f0:0e:2a:82:64:0b:c7:f8:b1:a3:e2:1f:cc:3c:
e6:12:f9:ca:0f:4a:4f:8c:57:a9:3b:57:a4:d5:b5:7f:77:d3:
a7:14:5f:bd:af:6c:36:ae:8d:27:7e:75:49:b7:f3:d3:ab:d2:
28:8f:2e:cc:60:83:cc:ff:5f:ea:45:bb:1a:b6:ed:00:f9:0e:
f7:98:91:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:35 2026 by rpki-client