Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
File: dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft (raw, json)
Hash identifier: +UWN0z5gkRUCOdC/lSOk7xAQc8s7W/kE5C3gFEOvIzo=
Subject key identifier: AF:AE:B9:F9:95:FF:79:05:EB:3F:6A:2D:60:7D:F4:AE:1E:80:9A:3D
Authority key identifier: 74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
Certificate issuer: /CN=742e571d0006fe7f660b0308ccc61a1699e34917
Certificate serial: 019D270427FBF14DE0A1B28117C2564376EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:16 +0000
Manifest this update: Wed 25 Mar 2026 22:01:16 +0000
Manifest next update: Thu 26 Mar 2026 22:01:16 +0000
Files and hashes: 1: dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl (hash: LrTOsjId2y1RDyb/Ra4UbCFhiJqQa1YO5ikYzNWjgfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:27:fb:f1:4d:e0:a1:b2:81:17:c2:56:43:76:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e571d0006fe7f660b0308ccc61a1699e34917
Validity
Not Before: Mar 25 22:01:16 2026 GMT
Not After : Mar 26 22:01:16 2026 GMT
Subject: CN=afaeb9f995ff7905eb3f6a2d607df4ae1e809a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:4e:53:7d:98:77:ea:24:9e:0f:95:a0:a7:
76:fe:2f:f5:37:45:b7:19:83:11:89:b8:26:47:de:
81:dc:55:a4:11:e1:1f:db:c8:64:b6:fa:c1:e6:39:
79:d3:62:66:f3:39:10:be:d4:cd:c1:73:fc:27:d8:
e2:6f:26:1b:25:7b:09:28:3e:e7:ee:f2:98:6d:32:
ef:27:87:e9:e7:a6:bf:af:c9:b2:1e:89:77:bb:89:
30:34:dc:98:b1:fe:62:66:57:8a:1e:65:9e:e1:7a:
71:12:2e:10:0e:ff:d4:b4:d4:b5:4a:0e:38:3d:2c:
13:ad:a1:4a:c5:45:bc:4e:d5:a8:50:eb:ce:a5:38:
35:27:c2:62:b6:23:8d:7f:b7:f8:93:08:e1:9d:70:
88:91:52:7a:a0:7f:e4:19:4d:6d:e1:9c:7f:b4:1a:
7e:4e:66:04:f3:34:be:92:ff:5f:d9:0c:81:0e:7a:
c3:4c:50:4e:d6:35:73:96:71:d3:07:09:8c:19:ef:
ea:27:b6:b4:4e:43:e6:12:2f:65:d5:50:9c:8a:85:
7b:32:f0:02:54:58:93:98:6f:7a:10:66:eb:f1:29:
ac:2d:95:a5:3e:8f:23:aa:20:ae:91:9f:79:3e:4d:
67:8d:8b:4c:4b:e4:e9:ad:e2:bf:85:09:79:cc:53:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AE:B9:F9:95:FF:79:05:EB:3F:6A:2D:60:7D:F4:AE:1E:80:9A:3D
X509v3 Authority Key Identifier:
keyid:74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:dc:c1:69:7b:da:c0:4a:c8:f9:fd:83:f0:10:44:d0:04:1f:
44:b4:5f:9d:0f:4e:42:ee:ab:37:17:63:be:99:f7:45:11:c8:
a9:25:7b:be:34:67:63:48:e8:f6:bb:50:c3:19:9d:60:95:6a:
73:b7:2c:df:5c:bf:1e:59:76:95:65:34:73:94:99:f7:e4:cd:
d2:ca:d3:a0:92:76:86:ab:a5:ac:d4:20:4b:5c:95:ea:39:0f:
74:88:93:82:da:09:f3:f4:f2:b0:e9:7e:f5:32:57:b7:f0:85:
ba:3f:fc:ee:d2:03:55:20:a8:67:3d:77:0f:a4:a9:34:bb:2e:
43:13:a0:d8:e7:e4:88:13:d1:33:77:75:7f:a8:55:4e:80:2c:
7f:e6:ed:54:f2:44:70:b6:85:79:4e:b8:00:ce:18:d2:1b:30:
d8:7b:b4:4a:aa:8d:d6:cc:03:3f:9c:e3:85:94:81:b6:4b:e3:
c4:07:ee:d9:39:c6:13:89:34:e4:3d:97:43:f5:76:60:69:be:
b1:dc:b9:8b:eb:93:3f:6b:76:45:8d:9d:e1:47:5e:cd:52:8f:
1f:d9:bb:95:f9:fb:29:e6:e5:a7:e0:eb:e6:2e:d8:44:30:f5:
56:eb:67:e3:ff:82:59:12:e6:90:a5:fc:0a:d9:61:e1:ab:9b:
c8:d7:01:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:14 2026 by rpki-client