Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
File: DZxWoYyYei0aLnBEt-MbMhv3rBY.mft (raw, json)
Hash identifier: HruDiLdJkPcLH3fZ82fFmvpe/HmUh4K9Id+QWkTjqa4=
Subject key identifier: A6:18:C3:CE:FB:CC:A6:66:80:DB:D6:41:DE:9D:EC:ED:73:28:DE:3F
Authority key identifier: 0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
Certificate issuer: /CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Certificate serial: 019D2704CA43827C88DC40FBE131A1DDD3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
Manifest number: 0A17
Signing time: Wed 25 Mar 2026 22:01:58 +0000
Manifest this update: Wed 25 Mar 2026 22:01:58 +0000
Manifest next update: Thu 26 Mar 2026 22:01:58 +0000
Files and hashes: 1: DZxWoYyYei0aLnBEt-MbMhv3rBY.crl (hash: 0YUKaBGqqxXqEl3Z2WwU28HZAAzQeZ1JKMAuzKkNFfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ca:43:82:7c:88:dc:40:fb:e1:31:a1:dd:d3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Validity
Not Before: Mar 25 22:01:58 2026 GMT
Not After : Mar 26 22:01:58 2026 GMT
Subject: CN=a618c3cefbcca66680dbd641de9deced7328de3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f3:b4:ee:d7:66:24:8d:72:a6:59:f3:b0:8b:
41:0d:ad:5b:61:09:f1:ba:26:af:c8:56:65:d9:28:
9c:10:93:54:67:6d:6c:41:9b:52:3a:a6:02:2e:9b:
e0:4f:98:49:03:54:46:ef:f7:fb:f2:10:ed:a0:d6:
e4:ef:09:ac:44:36:c6:6b:d3:14:a2:98:90:64:b2:
f3:46:f4:7f:c9:f6:c8:58:db:5c:fc:b7:94:1e:6e:
ad:0d:52:5c:18:8d:55:27:15:58:69:3e:a2:9c:4b:
49:95:c2:44:49:25:8a:c4:5b:dd:7c:d7:3d:55:61:
2e:ec:70:9b:14:a1:2a:e2:12:4e:c0:8b:6c:a9:69:
b0:b3:bd:f4:75:3b:26:0e:3b:30:a0:fc:76:b0:43:
80:fc:ec:13:97:06:60:d6:c2:77:66:b6:f8:54:60:
4a:d2:58:7a:17:49:2f:de:3b:e1:a5:49:3f:17:4c:
84:91:9e:07:dc:19:4b:f8:25:5a:1e:9a:a2:f9:82:
75:8c:45:3f:00:21:04:6a:a2:e3:50:b4:b8:dd:c0:
d2:55:4b:f5:7c:d0:73:db:19:26:3a:c8:12:78:ba:
44:14:fe:b0:29:c9:56:d1:92:c2:e3:13:f8:94:c8:
8c:12:ca:40:cc:1b:c3:93:61:53:3e:c5:5e:22:57:
fd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:18:C3:CE:FB:CC:A6:66:80:DB:D6:41:DE:9D:EC:ED:73:28:DE:3F
X509v3 Authority Key Identifier:
keyid:0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:68:4a:b7:00:72:b4:22:c5:88:cd:39:f3:12:c2:c6:e3:ab:
c3:5f:33:2d:a1:1f:ad:b9:78:3a:72:b0:6a:0d:1b:c5:05:43:
bf:a4:54:84:ed:91:01:66:37:15:7d:cf:e6:75:54:19:ae:8b:
f4:52:4b:f5:12:dd:41:04:33:cc:06:9d:ac:75:82:6e:66:f1:
f9:c7:f4:d7:0e:ca:26:67:a6:57:26:44:96:7a:89:59:30:40:
6e:b4:ce:7b:98:c7:39:43:32:d5:55:04:4e:d9:fb:55:d7:80:
c3:b8:ae:de:4f:62:85:91:15:9f:af:ba:1e:86:f7:a4:a1:90:
11:e9:38:fe:9b:67:f7:21:c6:58:a2:c4:e0:96:40:a3:45:b0:
9f:20:96:67:62:5a:28:8b:e8:de:e6:e1:c7:9c:81:e0:75:fa:
f2:c4:05:4f:43:5f:3c:e8:bb:19:70:f4:1e:87:14:d0:c7:a8:
e2:48:27:12:6e:2b:58:da:04:9c:ef:7f:b0:e7:4d:d4:7f:98:
ed:c1:00:8a:c4:4d:d7:2c:20:78:c9:b1:ec:c2:97:42:2a:0b:
3b:4a:26:48:a3:d6:80:23:f3:a6:67:25:ce:25:75:0b:8e:9b:
89:dc:30:57:16:cf:98:f0:f2:a3:f7:d5:62:01:87:b8:3f:43:
e5:3c:dc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:03 2026 by rpki-client