Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
File: dYOxUbdLsu2w9c5rbpux4MPQrRs.mft (raw, json)
Hash identifier: QGgBtBcmWEqhDpQP/MrujFJPhZjazt0Qi+MI6df6BFo=
Subject key identifier: F4:E8:69:0B:94:BF:93:E8:08:04:2E:1F:53:13:1D:BF:10:06:92:E0
Authority key identifier: 75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
Certificate issuer: /CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Certificate serial: 019D3307830F04BFBA930C9BEC784BBD0EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
Manifest number: 1889
Signing time: Sat 28 Mar 2026 06:00:23 +0000
Manifest this update: Sat 28 Mar 2026 06:00:23 +0000
Manifest next update: Sun 29 Mar 2026 06:00:23 +0000
Files and hashes: 1: dYOxUbdLsu2w9c5rbpux4MPQrRs.crl (hash: 8pIHlSrOGj8PVRu1UbC8gjdlFySLJk+O1186VGHg9SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:83:0f:04:bf:ba:93:0c:9b:ec:78:4b:bd:0e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Validity
Not Before: Mar 28 06:00:23 2026 GMT
Not After : Mar 29 06:00:23 2026 GMT
Subject: CN=f4e8690b94bf93e808042e1f53131dbf100692e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e7:f6:be:ef:1b:87:a7:bc:53:d9:f2:87:c1:
65:b0:33:0e:30:f8:d6:60:3d:0a:4d:ae:3d:18:af:
69:db:56:b7:8b:dd:c7:6e:28:1e:ff:26:d2:d2:b2:
51:24:f5:25:8a:8b:24:bf:94:23:43:9e:4e:72:4e:
72:6b:1b:df:b1:2b:ea:01:6b:ca:a4:5a:e4:e4:3b:
5a:70:66:b9:d8:35:c4:2c:4c:41:ae:c1:dd:58:13:
ff:29:e4:d7:6a:a3:41:4e:91:9e:33:29:b0:0b:7e:
d4:52:56:71:eb:2d:84:2e:3f:e2:ca:27:74:3e:6a:
64:34:a5:56:6d:57:ce:a0:4a:e8:34:33:14:3f:20:
f2:12:97:fd:d7:54:6c:9a:e7:3d:c6:18:24:b4:00:
fb:9c:ba:bf:cf:0b:bd:52:3d:e7:60:04:65:e4:e7:
91:02:bd:72:3d:2c:00:70:a4:5a:7a:61:b8:76:b6:
4b:82:27:84:60:4a:2d:a8:cc:18:62:38:c3:7e:1b:
0a:80:a3:c6:8d:04:5a:19:3d:e3:0f:6c:58:a1:79:
53:c2:7f:d1:b4:96:10:07:ef:2d:c6:dc:d3:56:fe:
dc:f8:8d:af:3f:b0:e1:b7:f7:ef:23:8d:12:29:5e:
c1:b0:49:ee:ac:af:75:76:3f:cb:86:41:64:ca:c0:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E8:69:0B:94:BF:93:E8:08:04:2E:1F:53:13:1D:BF:10:06:92:E0
X509v3 Authority Key Identifier:
keyid:75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:bb:8a:08:29:24:a7:b2:2f:c0:2e:ca:1b:62:67:00:a0:bd:
f0:09:50:55:c2:11:5f:bf:8b:90:2e:04:fe:5c:b5:8e:b5:a2:
3e:13:74:1f:f9:24:e1:0a:5c:16:62:be:c5:40:f6:7f:a5:50:
54:c5:16:4f:5e:e1:e8:64:af:dd:c0:6b:eb:de:85:06:6b:8d:
e6:f8:16:68:a3:0a:f1:70:2a:16:b7:53:4f:70:81:b4:a9:17:
96:71:37:2e:c4:41:f6:f3:b9:e7:7c:d1:24:72:9a:ad:6a:65:
c0:d4:9e:e4:84:b6:e0:21:b9:28:b8:14:27:ac:fe:10:73:68:
60:4d:f6:5f:19:81:a5:72:e6:54:3f:a4:b8:a6:ff:49:f5:2c:
d6:e4:53:b6:36:6d:c7:ea:49:4d:bc:da:54:54:44:4c:48:6c:
99:d8:e5:58:07:1a:78:cc:7e:b0:d9:1f:66:a0:a0:d7:90:e8:
b9:41:ea:d1:e1:94:9e:c7:34:b4:49:1b:ed:35:ef:c4:54:38:
63:b0:9c:ba:33:8f:ce:b9:fb:de:bd:55:63:cf:6f:56:a5:f1:
4e:6c:b6:b0:d7:08:5b:3d:ad:54:7f:ff:e6:0a:1b:f3:b4:b3:
4b:9f:09:4d:33:ea:49:52:2d:4f:85:52:71:ab:a9:d6:c9:f9:
e9:d4:7f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:42:04 2026 by rpki-client