Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
File: DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json)
Hash identifier: Wwq1rhHRIuuEuayY3teylCdwAU26cI4WdDJHwLeFzfs=
Subject key identifier: 1B:81:F3:E5:C7:70:30:2F:B9:7E:6F:49:41:64:2E:FD:A3:C8:22:FB
Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
Certificate issuer: /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Certificate serial: 019D29CDB8887F4FF3263D0055BDF70567FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
Manifest number: 10EF
Signing time: Thu 26 Mar 2026 11:00:41 +0000
Manifest this update: Thu 26 Mar 2026 11:00:41 +0000
Manifest next update: Fri 27 Mar 2026 11:00:41 +0000
Files and hashes: 1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: fvRIFOKthfmMbg7MO73ium5DJUx7OQnw2y26puPX04w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:b8:88:7f:4f:f3:26:3d:00:55:bd:f7:05:67:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Validity
Not Before: Mar 26 11:00:41 2026 GMT
Not After : Mar 27 11:00:41 2026 GMT
Subject: CN=1b81f3e5c770302fb97e6f4941642efda3c822fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c0:0d:6b:8b:05:a3:2b:6e:da:f0:16:4f:6f:
15:03:e6:bb:eb:6d:9e:42:5c:42:2b:8c:10:26:5b:
86:8c:f8:46:08:6f:55:3a:1c:3a:87:f9:c4:79:61:
02:6f:0e:a8:a1:8f:b0:43:3d:c8:b2:2c:02:8b:04:
32:b0:cf:07:ec:f2:36:7a:87:c9:fe:b4:d4:58:92:
9a:1b:7f:57:91:26:7b:8e:29:f7:43:36:e0:1e:b7:
48:17:36:f4:9b:86:47:e7:b9:ab:4c:e7:19:60:ea:
7d:35:54:14:39:d4:7f:ac:b9:5b:37:20:dc:3b:4a:
c3:cf:bc:60:c9:84:26:78:9e:2e:fe:66:c8:4a:e8:
45:db:2f:6f:3e:2d:80:35:09:2f:d0:a6:6e:89:c7:
cf:ef:de:42:92:35:bc:ce:b5:19:93:0f:9d:6a:1c:
a0:27:56:2a:ad:77:7c:00:ff:13:8e:7f:4f:70:05:
31:97:16:84:41:20:f1:9d:be:ed:0f:1f:7c:64:63:
a6:15:2e:85:c9:00:ad:6b:02:7c:07:8d:1c:4a:9b:
6c:87:6f:91:ab:ce:b5:89:5a:96:46:69:ef:7d:2f:
3c:89:ed:d1:75:b2:6b:ce:e9:58:89:f2:d5:08:6f:
4b:64:31:44:66:77:89:85:17:79:3e:82:0b:41:00:
fe:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:81:F3:E5:C7:70:30:2F:B9:7E:6F:49:41:64:2E:FD:A3:C8:22:FB
X509v3 Authority Key Identifier:
keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2d:32:ab:64:4c:a6:d4:f5:fd:68:b0:3d:08:64:e5:96:ab:
a5:33:81:03:03:be:2c:a3:a6:00:57:c2:2b:c5:9c:17:c7:6e:
70:80:bf:ba:66:7d:fe:3c:b4:8a:8e:4d:48:6f:74:a1:05:62:
96:8d:28:dc:29:33:bf:78:fd:3b:d2:ba:bf:ef:91:0b:33:62:
f4:9d:f6:34:19:52:17:37:ed:45:75:20:ca:f0:8a:6d:e0:8d:
45:04:72:b9:4f:ee:2f:87:1b:20:9b:9f:eb:04:ed:62:50:89:
f1:ae:aa:d8:a0:51:d4:96:bc:85:9a:8a:e8:62:3e:fc:0d:bd:
a5:ee:b4:b0:95:fa:ed:5b:1d:ca:93:51:6e:4d:01:4e:1b:91:
a7:98:78:78:e7:7b:87:4e:40:1c:2f:54:0f:69:a7:ef:41:84:
09:89:ba:02:f6:99:ce:68:90:93:7e:e0:fe:79:6a:f3:fe:37:
3c:af:73:51:9a:31:c9:2e:3e:ef:b4:6f:67:18:17:5e:5e:ff:
8d:d2:44:50:a0:a4:08:9b:76:af:3a:33:93:a9:69:46:02:d8:
eb:f4:6e:6c:f9:d2:63:d0:5e:37:96:1d:c9:82:03:2f:c6:e3:
bb:28:4a:8b:3b:f6:06:10:16:b8:d1:10:bc:ac:dc:f2:87:c2:
4c:9e:b3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:21 2026 by rpki-client