Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
File: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft (raw, json)
Hash identifier: HBes/tvljBh5ge48MBQQwe+yIA2hr+3Ka7URK1L0DNg=
Subject key identifier: 25:D7:32:1C:F8:EC:E1:DF:4A:87:9B:0C:19:FE:03:18:F5:94:74:08
Authority key identifier: F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
Certificate issuer: /CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Certificate serial: 019E1E350A9D9B3E65C6918A6B4406DC080C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
Manifest number: 0FF9
Signing time: Tue 12 May 2026 22:00:52 +0000
Manifest this update: Tue 12 May 2026 22:00:52 +0000
Manifest next update: Wed 13 May 2026 22:00:52 +0000
Files and hashes: 1: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl (hash: gD3q0YJD8XHO1Y/1q1h5OkZBfiGX75FcZRsBJtmh4DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:0a:9d:9b:3e:65:c6:91:8a:6b:44:06:dc:08:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Validity
Not Before: May 12 22:00:52 2026 GMT
Not After : May 13 22:00:52 2026 GMT
Subject: CN=25d7321cf8ece1df4a879b0c19fe0318f5947408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:b0:fd:e5:a3:6b:fb:0d:f4:46:b2:f9:04:
1a:ec:bc:49:ff:1b:97:20:01:1f:a3:33:53:bb:d2:
ba:13:0a:15:9f:01:e2:62:b1:ee:c6:8f:a1:23:f7:
39:47:bb:4b:e1:da:45:e9:61:c6:72:6e:8d:99:29:
b7:5c:42:a5:7d:cf:bb:38:1b:d9:86:90:24:7c:00:
d1:b6:e6:4d:93:cf:e4:45:3e:d3:da:5b:5d:03:fd:
8f:0d:25:d5:28:70:31:10:5e:c7:08:d3:1d:bc:d1:
68:19:df:17:a8:7f:90:9f:fa:25:93:d8:17:0c:6f:
74:b5:aa:dc:28:ba:7e:48:75:24:6f:9d:cc:ff:81:
b0:b4:7a:ed:e3:41:8f:8b:9c:c6:84:bb:3c:07:12:
2c:60:43:3a:39:aa:4a:5d:e1:80:16:b2:96:3a:56:
1b:fb:3a:68:11:cd:1e:74:90:35:c8:be:0a:5d:b3:
59:1b:ce:ff:9e:15:45:e2:eb:9b:90:3d:4b:d6:eb:
4b:f3:50:83:68:9f:eb:cf:e3:7e:81:12:58:7c:02:
53:eb:f6:6a:5b:4d:c3:ef:e4:ef:d6:a0:56:53:53:
d4:f7:a1:a8:2f:ce:4c:d4:a4:67:93:54:0a:18:a1:
1f:09:f7:04:bc:24:8c:27:18:41:d6:91:de:68:73:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D7:32:1C:F8:EC:E1:DF:4A:87:9B:0C:19:FE:03:18:F5:94:74:08
X509v3 Authority Key Identifier:
keyid:F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:98:15:c4:5a:d0:43:e1:09:c9:5b:8d:60:1e:98:09:cb:f7:
6a:06:53:ba:77:3a:55:05:67:d4:ca:00:8e:7b:4d:c1:1f:89:
9f:a2:f7:6c:83:0a:2c:15:91:39:d0:9d:6f:ec:95:c1:ed:00:
fe:2c:5b:e2:12:81:17:01:c8:f8:89:16:03:3b:a6:a9:da:e8:
d4:c8:ff:27:54:9d:78:fc:96:cf:19:83:18:d5:2f:70:d1:69:
ac:90:db:ed:a9:c7:99:73:3c:84:3d:d3:87:54:17:31:6d:8d:
0d:bb:46:9f:88:ab:56:dc:a2:f8:d7:ec:00:99:d7:de:1d:62:
2b:93:5d:d7:ab:c7:c8:f5:da:30:c9:a4:9d:3e:5a:96:27:a6:
d3:12:7b:f6:da:c3:01:95:ba:9f:2a:d3:95:3c:bd:ec:88:0a:
a9:79:36:d0:94:76:15:63:8d:79:30:76:55:4a:e6:a1:cc:fb:
78:8c:10:51:d6:da:06:03:47:c8:ef:a1:14:e1:f3:07:9c:85:
1c:1c:00:0d:0b:a0:d4:ae:41:f5:23:7d:c0:d3:ca:82:f2:34:
92:5e:a5:59:29:78:41:c8:c0:5b:b6:54:f1:0f:8c:fb:4f:72:
79:47:f1:ff:c1:be:da:27:6e:fc:42:0f:6a:db:33:7c:78:c4:
a1:67:a0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:42:11 2026 by rpki-client