Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: M9p/1VW/blhlbACoeVipGfUR9yB4ZGJAs1zP0VTncZQ=
Subject key identifier: 8F:38:98:B3:84:70:4A:E7:C7:63:FC:49:35:FC:2C:7A:06:BB:20:AA
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 019D27044ED805E9848C18295FD05E33B358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 1881
Signing time: Wed 25 Mar 2026 22:01:26 +0000
Manifest this update: Wed 25 Mar 2026 22:01:26 +0000
Manifest next update: Thu 26 Mar 2026 22:01:26 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: C41uaZ8jJBAnxVcdJq4J4F+cAgs3mlIvTKsZzyCc51g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4e:d8:05:e9:84:8c:18:29:5f:d0:5e:33:b3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Mar 25 22:01:26 2026 GMT
Not After : Mar 26 22:01:26 2026 GMT
Subject: CN=8f3898b384704ae7c763fc4935fc2c7a06bb20aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:4f:d7:3e:57:2f:18:fd:c5:6f:71:d9:2b:
42:7c:6f:a2:fd:72:3e:cb:60:28:7e:86:2e:06:60:
8a:ca:ba:e1:35:70:d3:8f:5f:41:b1:13:4a:e7:d8:
3b:8d:7f:9f:5f:01:be:17:84:d8:21:0a:a3:84:66:
f3:53:09:28:48:bd:34:e9:55:f0:19:fa:08:cc:31:
e3:80:14:c3:16:29:db:a4:6a:c5:2c:f4:44:19:6a:
ef:f2:81:d8:46:06:0d:df:6d:eb:91:6b:fb:01:4c:
78:4c:0c:4e:27:d4:0b:69:2a:8b:3b:34:8f:56:3d:
57:6c:b4:1a:e5:d6:59:b0:45:b6:5b:30:7d:ae:52:
85:ce:62:5c:71:e8:15:c2:c7:43:c1:88:fa:bb:57:
f8:84:11:a0:b9:f9:a6:75:ef:ca:66:49:0c:a6:7a:
3a:25:eb:79:b2:bb:58:37:c1:8a:2c:19:47:fa:2e:
8e:0e:4d:e8:d5:09:b4:cc:fa:a3:10:59:b0:e5:8b:
51:a5:7c:50:c2:35:e5:63:26:14:c7:f7:63:f2:77:
10:f3:4f:5f:a2:01:ca:12:4c:e4:56:59:8a:cb:64:
8d:d6:af:75:7c:42:e3:93:3c:97:32:b4:06:28:f0:
23:3e:c4:35:9c:a0:95:9c:cb:dc:20:94:75:c0:6f:
78:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:38:98:B3:84:70:4A:E7:C7:63:FC:49:35:FC:2C:7A:06:BB:20:AA
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:27:16:be:82:5d:ba:7e:d3:9e:5d:03:c5:05:31:69:53:62:
9a:9f:e6:50:f2:16:ae:dc:2e:b5:6c:5a:83:10:0a:77:27:b1:
8e:fb:f7:fb:56:b3:55:b6:17:bc:d3:e8:b2:6e:37:3d:0d:00:
aa:48:f0:62:f7:07:71:4c:a1:6c:84:85:2b:e9:ea:79:ae:3d:
a7:4a:56:fa:22:76:2b:98:aa:98:a1:9d:6d:31:a9:6f:13:4a:
cf:9b:27:b1:51:ce:f2:d3:9f:29:82:11:52:a9:4d:32:94:46:
f5:5e:05:6c:9e:81:f0:ba:6f:ca:c8:d1:dc:3e:8d:51:80:fe:
59:ae:6a:61:d5:0d:75:af:fb:ec:a5:cc:b3:e6:43:bd:8d:2f:
ed:3e:96:f1:51:5e:3f:58:bf:69:e9:5b:eb:26:79:8c:06:18:
bd:89:65:2b:38:c2:6e:eb:0c:cc:72:87:4e:8c:12:09:be:a4:
fc:80:e7:ed:e6:8a:34:91:c8:8c:47:2f:09:7e:d7:54:e5:70:
8f:27:cf:74:75:95:99:ee:d1:82:dc:19:c1:52:db:ef:a3:ad:
a4:80:19:61:d3:a9:9c:64:6c:0c:f9:32:ff:45:73:9d:a6:e4:
d8:c1:c6:fb:41:29:09:a9:12:22:27:33:34:b0:8e:93:9c:e8:
21:db:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:40:53 2026 by rpki-client