Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File: DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier: 5HoivHKIbPU5aU0QqX/dEz0dWmnDTkuF+mHo3ubGaLQ=
Subject key identifier: 2A:3E:4D:77:12:6E:22:9A:7F:07:C9:7B:75:A6:4A:4A:E9:20:A4:2E
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer: /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial: 019D2703FEB944F1B93307CD2C0AC16A4D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 22:01:06 +0000
Manifest this update: Wed 25 Mar 2026 22:01:06 +0000
Manifest next update: Thu 26 Mar 2026 22:01:06 +0000
Files and hashes: 1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: v8KqrQuYfjuTle3BVPEBI/zuPBfrZAjWgvHdoR+g5VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:fe:b9:44:f1:b9:33:07:cd:2c:0a:c1:6a:4d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Validity
Not Before: Mar 25 22:01:06 2026 GMT
Not After : Mar 26 22:01:06 2026 GMT
Subject: CN=2a3e4d77126e229a7f07c97b75a64a4ae920a42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:2d:81:44:4a:dc:d8:6a:30:3a:af:f6:00:
2c:cf:51:23:b6:92:86:07:e2:e0:77:d4:fd:ae:8d:
f0:99:31:2e:d0:fa:a4:77:41:60:8d:b6:ee:82:07:
a7:84:ab:3c:7d:de:bc:bf:e4:bc:84:36:f4:61:82:
27:c6:db:67:69:46:eb:59:cb:45:d7:c3:e9:74:09:
01:6a:3c:0b:cf:75:ce:44:2c:45:65:36:80:ad:47:
78:f2:20:76:e0:01:b1:19:7c:b1:e9:c6:8b:e5:5d:
2c:55:dc:b5:f3:9e:f3:2b:57:4a:c7:b8:2e:8c:da:
57:e5:49:a0:19:b5:d6:42:bc:72:5f:ba:b7:ab:0e:
cd:50:57:d2:0c:2e:9b:a3:5f:9c:cd:5e:ef:51:35:
a6:7e:21:3e:cc:db:a7:e0:1a:e2:68:31:c4:f0:50:
4e:02:67:7c:29:71:74:fd:dc:2f:12:0c:18:6c:d7:
d3:89:24:c9:39:f2:93:a3:2a:4b:71:62:05:50:c4:
4f:51:64:89:69:10:1c:b7:72:96:14:53:63:5f:5e:
4d:c4:8d:d4:a4:0f:39:00:d2:c9:bf:90:55:62:64:
b7:9f:5e:22:95:ce:50:05:ca:b4:47:7f:69:89:5a:
2e:b5:39:49:02:a2:c3:30:fd:be:28:cd:04:a6:e9:
b0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3E:4D:77:12:6E:22:9A:7F:07:C9:7B:75:A6:4A:4A:E9:20:A4:2E
X509v3 Authority Key Identifier:
keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0c:d4:58:0b:a6:30:88:a7:c8:29:51:29:c2:67:d8:89:ca:
09:93:9c:e8:cc:98:bf:70:bc:ff:64:56:bb:45:40:a4:0f:a8:
72:84:2c:b5:50:66:f0:17:1b:8c:a5:a1:aa:c2:cf:31:82:e7:
6f:4c:ad:eb:82:b9:00:a5:0c:9d:c7:e0:8e:9a:fe:72:90:04:
eb:38:0f:d8:7e:7b:c6:11:3f:a3:02:1a:6e:7d:a5:e2:13:5d:
3a:04:c5:8d:bf:1c:46:96:48:9d:ca:26:c4:bf:ff:50:08:ca:
85:38:18:52:94:ae:9a:0c:00:69:26:ba:b4:2f:3d:ec:f8:ad:
35:15:f1:36:11:07:eb:0b:a3:21:b8:f2:72:17:4e:7e:b7:b5:
80:cc:73:e1:da:53:c9:99:b3:a8:ac:4e:7b:6f:f4:9a:07:ff:
9e:ae:95:ae:8d:f4:1a:88:a3:45:0c:f2:89:7c:2a:fc:2e:9f:
e7:ae:4b:79:d4:19:fb:a6:38:31:03:32:cd:67:73:51:a1:c4:
2f:64:a0:ec:4e:bb:80:ba:6b:26:84:56:af:a0:c9:87:52:e5:
3d:53:0d:d5:57:14:f1:c1:b0:5c:77:bd:05:a9:2e:ef:b5:80:
e5:88:84:64:8a:0e:d5:6e:a2:cf:a4:53:6b:81:37:cc:75:46:
5f:90:2f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:54 2026 by rpki-client