Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.mft
File: DC984BAE2D6EE548FC806DCECD402B71C73734A0.mft (raw, json)
Hash identifier: YVLpiyx3/GhS9MGVB2wwtgKHNHIDjw0haBPb3Ix2x5M=
Subject key identifier: 8F:FB:F6:2F:8D:DA:52:62:85:3A:9C:78:C6:B0:11:EB:24:FF:71:E2
Authority key identifier: DC:98:4B:AE:2D:6E:E5:48:FC:80:6D:CE:CD:40:2B:71:C7:37:34:A0
Certificate issuer: /CN=dc984bae2d6ee548fc806dcecd402b71c73734a0
Certificate serial: 6703BCB49AF81348C69DB240792128E5EA75308B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JhLri1u5Uj8gG3OzUArccc3NKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.mft
Manifest number: 8C
Signing time: Thu 23 Jul 2026 21:33:02 +0000
Manifest this update: Thu 23 Jul 2026 21:28:02 +0000
Manifest next update: Fri 24 Jul 2026 22:44:02 +0000
Files and hashes: 1: DC984BAE2D6EE548FC806DCECD402B71C73734A0.crl (hash: Fc/B25fkugq/8o5+rXReLsaoKyvzZNvYFf0a79J8FS8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.crl
rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JhLri1u5Uj8gG3OzUArccc3NKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:03:bc:b4:9a:f8:13:48:c6:9d:b2:40:79:21:28:e5:ea:75:30:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc984bae2d6ee548fc806dcecd402b71c73734a0
Validity
Not Before: Jul 23 21:28:02 2026 GMT
Not After : Jul 24 22:44:02 2026 GMT
Subject: CN=8FFBF62F8DDA5262853A9C78C6B011EB24FF71E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:79:47:ff:c6:bb:68:6d:46:b5:22:ed:1d:
80:f4:dc:bf:f0:32:9d:22:b3:1e:4a:f9:e9:be:0d:
7b:9b:d5:72:d9:46:ad:5a:65:68:81:36:e9:a3:fc:
9c:16:ce:26:ad:99:a5:33:91:17:c9:ac:21:72:f2:
ee:3d:98:07:3a:1a:2f:94:3c:7a:ac:4b:a9:ec:43:
df:60:4f:66:fe:65:32:4b:78:87:bf:a7:a7:16:90:
c2:fb:1a:2c:cf:b2:3e:2f:ad:4a:49:b6:89:e9:c8:
34:10:79:fb:1d:c0:bf:8b:30:3f:2d:3c:cc:1c:5d:
a0:73:1d:b6:6e:7b:a5:a7:6e:97:00:9a:f9:87:12:
a2:dc:41:06:8e:96:2c:25:1d:0b:74:cc:37:24:52:
d9:99:c3:77:f6:6c:c8:5d:fb:73:e7:c1:8e:c2:fc:
56:1b:4e:a7:f7:7b:a1:59:81:49:13:79:eb:d1:ad:
aa:63:7e:23:be:57:0d:7a:c8:e5:93:fe:90:34:af:
ec:77:fe:57:4e:1d:30:1a:97:09:c2:00:5b:2b:e3:
50:b3:5d:46:ed:5d:3a:94:e4:11:df:39:e9:44:4e:
ff:7b:b7:f2:25:f9:bf:27:3d:d5:98:75:fa:0f:af:
59:eb:f6:2e:11:01:a0:e7:b7:86:3d:bc:ab:23:ec:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FB:F6:2F:8D:DA:52:62:85:3A:9C:78:C6:B0:11:EB:24:FF:71:E2
X509v3 Authority Key Identifier:
keyid:DC:98:4B:AE:2D:6E:E5:48:FC:80:6D:CE:CD:40:2B:71:C7:37:34:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JhLri1u5Uj8gG3OzUArccc3NKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:35:56:01:3c:84:00:84:59:b2:23:dc:73:3f:0a:d3:f3:99:
c4:13:6a:66:16:4c:67:cb:32:25:fd:05:c3:2b:6c:cb:44:46:
04:7a:f1:97:da:3a:7a:b7:39:28:8f:b8:e4:13:eb:29:bc:bb:
fa:d3:ab:fd:93:ca:1a:cf:f0:ee:b1:d8:04:07:d4:64:01:1e:
0d:43:92:3b:fd:70:d1:1d:9d:f4:c3:e6:96:2e:da:91:a8:89:
15:53:95:ae:b5:52:ba:0b:61:bf:1a:27:99:52:36:38:d9:a3:
bf:89:0e:d6:b5:e9:af:56:26:fc:6c:44:d0:df:f9:75:64:60:
fc:a1:ce:44:ab:a1:6f:e3:ef:de:1e:9a:3b:30:61:4e:3c:e5:
8d:52:4d:de:d5:84:3b:61:13:fd:1a:f7:f9:c2:b7:09:7a:18:
a1:5a:0b:56:a9:dd:19:dc:b6:7b:79:ff:ab:92:1d:94:4b:c8:
1a:46:d1:7a:88:29:95:2f:d9:4e:45:03:50:d0:56:16:76:c7:
70:95:ca:6d:99:12:9e:6f:f8:79:05:d8:1e:57:2e:f9:67:8d:
60:38:b3:d3:aa:4c:72:a1:54:bd:a6:9b:87:7d:e8:ac:71:f0:
b2:12:a0:06:65:8e:63:27:c3:2e:77:62:b9:ec:9b:e1:fc:cb:
63:34:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:44 2026 by rpki-client