Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
File: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft (raw, json)
Hash identifier: bQ0HUZZh8gmkEzV2pabhH/fAUalGRmw77+08c8txpzQ=
Subject key identifier: 5E:EC:2B:80:7D:BF:21:7C:68:A9:49:0C:17:10:E3:8F:85:AC:17:E2
Authority key identifier: 75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7
Certificate issuer: /CN=754c57866e97aadaad75decc69d0df072d506ee7
Certificate serial: 019D31F5F4F0D5A3C8A536FA09E7FC3A4D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
Manifest number: 0368
Signing time: Sat 28 Mar 2026 01:01:35 +0000
Manifest this update: Sat 28 Mar 2026 01:01:35 +0000
Manifest next update: Sun 29 Mar 2026 01:01:35 +0000
Files and hashes: 1: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl (hash: JROGZxO5dM+VOeAb9Qegm2fjS/HCNWqUlCEbk3wUE/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:f4:f0:d5:a3:c8:a5:36:fa:09:e7:fc:3a:4d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754c57866e97aadaad75decc69d0df072d506ee7
Validity
Not Before: Mar 28 01:01:35 2026 GMT
Not After : Mar 29 01:01:35 2026 GMT
Subject: CN=5eec2b807dbf217c68a9490c1710e38f85ac17e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:87:9b:ae:45:f4:e9:24:7c:4b:12:67:76:
8e:35:2a:23:61:92:93:49:17:68:06:85:dc:10:1a:
3e:95:bc:96:be:b7:08:f6:bd:34:87:4d:a4:3a:6a:
a0:e6:6c:26:4f:b4:68:2a:8f:e3:3f:b5:88:84:09:
75:55:d8:f5:41:1e:e3:0b:19:da:7c:52:d9:a4:46:
d5:27:a7:cc:3c:4d:82:d3:88:f0:af:2c:fe:12:24:
81:52:02:a0:e0:d4:33:51:24:d8:89:29:86:27:0b:
7d:2b:ec:4c:a5:c3:d5:3e:e4:d8:ab:a6:b7:fa:9e:
a9:5b:5c:1c:0e:5b:7d:1f:09:97:0c:92:69:e3:a2:
40:1f:b9:75:e6:65:6c:a3:36:ee:95:2f:14:72:3a:
48:c5:30:f7:36:a8:0a:25:bf:8b:ba:c0:7e:05:63:
61:bb:17:61:a3:89:f3:d7:c2:1f:c6:af:a4:8a:75:
38:7e:c4:33:42:c1:72:01:68:e2:82:61:71:eb:df:
dd:b0:3c:38:a2:f2:48:f4:8d:3d:bb:22:10:d8:69:
90:95:f8:02:4e:f2:0c:3c:2d:56:69:9b:c1:36:60:
d5:8b:aa:fb:4d:2c:6d:d0:97:1d:d7:1a:fc:f0:98:
82:7b:79:6a:a4:12:da:5b:ff:df:81:e7:e0:94:a1:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EC:2B:80:7D:BF:21:7C:68:A9:49:0C:17:10:E3:8F:85:AC:17:E2
X509v3 Authority Key Identifier:
keyid:75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dd:b0:54:ae:a5:f6:95:b4:3f:24:1d:7f:be:36:91:99:ce:
3d:75:8e:4a:a9:ae:48:59:84:b7:0c:37:40:26:36:15:fd:02:
32:1b:eb:78:f9:71:82:05:07:c6:70:f9:9e:86:22:c5:2b:26:
8a:e3:0d:fd:d1:87:e8:d7:bb:a0:d5:c6:9e:4c:0c:fb:e7:35:
cb:b5:26:7e:99:39:ed:de:7c:f4:b8:a1:11:ef:0b:78:b4:a0:
5d:a3:af:be:d2:b1:b8:c3:fc:85:05:32:d4:bd:7c:2b:ab:d4:
03:08:09:0f:2f:fe:e4:65:ee:a9:51:ff:5e:39:eb:94:d4:b3:
3e:06:5a:cf:cc:28:ab:b0:1d:8a:5b:44:e0:d9:74:f8:3f:04:
58:27:04:e2:d8:2e:31:42:90:37:c1:64:2d:56:92:0b:8b:f0:
f7:47:54:6c:94:e0:98:7d:cb:27:d4:84:0e:b8:3b:e4:21:a6:
c8:16:5c:b3:68:8d:d8:9e:57:60:83:76:64:ef:91:b3:bd:93:
32:50:ba:e2:3d:23:c5:a9:69:0d:5d:3a:97:dd:e4:28:a7:d6:
7b:17:e5:e0:47:5f:60:5a:ea:ce:06:88:aa:45:02:7e:a3:0f:
33:ad:86:f8:17:66:9a:0c:d7:48:9d:a5:d0:1f:24:1b:05:05:
6d:6b:83:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:23:00 2026 by rpki-client