Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
File: dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json)
Hash identifier: oJuh+mhBCwkpejH8FGXg4HQGX1U5M2JY5Yw20O3HFpI=
Subject key identifier: 92:41:28:56:31:4F:AA:3E:09:70:2B:FF:94:88:80:FB:2A:27:55:86
Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
Certificate issuer: /CN=75caa7991288876680d7ac90a8569f3fc20387fa
Certificate serial: 019D2772569C21A7F3239B5F90AE64EFE761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 00:01:37 +0000
Manifest this update: Thu 26 Mar 2026 00:01:37 +0000
Manifest next update: Fri 27 Mar 2026 00:01:37 +0000
Files and hashes: 1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: aozM80v3L6zRZ/1Oag0BQxThWpuRGRyA7JCmevW6Ciw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:56:9c:21:a7:f3:23:9b:5f:90:ae:64:ef:e7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa
Validity
Not Before: Mar 26 00:01:37 2026 GMT
Not After : Mar 27 00:01:37 2026 GMT
Subject: CN=92412856314faa3e09702bff948880fb2a275586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:0b:49:25:ee:14:47:87:8b:8d:bd:ce:34:
fa:f1:10:9d:d2:30:87:e2:74:78:a3:b3:4f:5c:04:
30:c0:97:7d:fd:fa:71:e4:70:43:44:0c:21:7f:4d:
cd:d0:04:ff:05:95:a5:31:17:e6:4d:c8:7d:78:5e:
1a:23:a7:a4:db:1d:35:64:b6:bb:7c:fe:cd:83:ed:
99:5d:cb:5f:42:6a:de:b4:48:23:c0:55:65:dc:d6:
67:c0:bc:18:96:25:56:5b:c9:15:be:30:c6:16:ad:
bd:dc:c5:8a:2a:5b:3e:15:ba:14:9c:90:c2:9a:35:
e4:dc:6b:98:0c:b5:0f:a6:d9:4d:72:eb:fd:e3:d3:
c1:9e:8f:66:ce:a2:67:78:6d:62:83:c2:3e:16:c0:
8a:aa:96:47:a6:55:a5:2d:09:4c:92:aa:16:49:b9:
78:ad:9b:65:80:b4:53:ac:fb:6f:a9:b8:50:e2:7c:
75:9f:8e:24:da:0e:4f:ce:e1:71:10:a9:8b:fc:4c:
9e:63:08:d3:c2:be:13:70:c9:56:5d:2e:bd:e0:54:
d8:45:ea:6a:50:0c:19:cc:fd:26:1e:a6:05:a9:f6:
ee:e4:22:e7:d6:21:7a:bd:59:e8:bd:8b:7c:51:3f:
6a:c7:ba:1b:f4:bf:d9:9a:62:29:fa:5f:fb:41:7c:
12:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:41:28:56:31:4F:AA:3E:09:70:2B:FF:94:88:80:FB:2A:27:55:86
X509v3 Authority Key Identifier:
keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bc:17:0c:c3:5a:d2:46:11:f9:03:24:f4:1d:46:38:89:67:
eb:de:5f:d1:fb:29:2b:39:37:66:38:f5:55:1f:94:95:03:cd:
4a:c9:9c:0b:d5:1c:95:e8:e6:0e:f7:30:39:76:5b:79:09:bc:
3c:47:b4:75:db:11:f8:71:d7:99:0d:71:5e:f5:1b:01:98:42:
14:90:bc:3e:fc:e1:f5:26:72:c4:d8:71:a3:7c:8d:eb:50:82:
7a:44:03:b5:bb:12:cb:2c:9b:db:ec:fd:4a:f9:94:79:4f:45:
4a:12:3c:d8:5f:d2:53:37:3c:16:cd:c3:42:ca:02:9c:cc:68:
11:c7:a9:63:ee:b1:53:35:b1:8a:c2:4d:f9:41:29:f3:85:1f:
7c:76:f7:c4:c6:0b:6d:89:47:87:e8:b2:1e:dc:6f:f2:6c:a4:
bc:93:24:d7:dd:58:a9:f1:f5:dd:4c:c2:a5:12:a9:c6:b3:83:
4b:91:4f:7c:61:46:0f:dd:3f:d4:30:69:3b:99:36:fa:e6:ab:
7f:84:f3:00:8b:3f:71:cf:88:e1:64:e6:8d:84:29:2a:d6:6f:
d2:5a:0e:46:ad:b6:2e:d5:20:f8:53:0a:09:d2:c7:08:67:d9:
3f:0a:81:ad:38:69:51:7b:85:9d:5b:34:7c:b1:68:ab:60:b4:
65:9a:94:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:26 2026 by rpki-client