Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.mft
File: DC984BAE2D6EE548FC806DCECD402B71C73734A0.mft (raw, json)
Hash identifier: 7fU8O/IgD1cVTcoi3CBAcqmvcMX9i1t0IH75ZdH84X0=
Subject key identifier: E0:66:58:3D:9C:97:E0:83:43:E7:A6:04:04:E9:90:8C:29:6E:5A:9D
Authority key identifier: DC:98:4B:AE:2D:6E:E5:48:FC:80:6D:CE:CD:40:2B:71:C7:37:34:A0
Certificate issuer: /CN=dc984bae2d6ee548fc806dcecd402b71c73734a0
Certificate serial: 2CBC4137E4FFF11600D7C7D3B6093CCC44711EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JhLri1u5Uj8gG3OzUArccc3NKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.mft
Manifest number: 36
Signing time: Tue 12 May 2026 16:40:40 +0000
Manifest this update: Tue 12 May 2026 16:35:40 +0000
Manifest next update: Wed 13 May 2026 18:52:40 +0000
Files and hashes: 1: DC984BAE2D6EE548FC806DCECD402B71C73734A0.crl (hash: bsN/BkpVRPWZWDMRv7oKe8UyUzrlMPn/+jDuK2rvcOU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.crl
rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JhLri1u5Uj8gG3OzUArccc3NKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:bc:41:37:e4:ff:f1:16:00:d7:c7:d3:b6:09:3c:cc:44:71:1e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc984bae2d6ee548fc806dcecd402b71c73734a0
Validity
Not Before: May 12 16:35:40 2026 GMT
Not After : May 13 18:52:40 2026 GMT
Subject: CN=E066583D9C97E08343E7A60404E9908C296E5A9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6d:86:f8:96:ed:d4:28:4f:c2:b8:90:23:30:
6f:5e:f2:6d:05:12:e7:3d:63:08:28:bd:b8:0f:0c:
96:2f:f9:e0:cd:d6:2d:c4:92:4e:a0:4c:c7:af:08:
45:fb:c1:2a:70:af:43:0f:01:ee:62:99:33:e2:56:
e8:ac:05:fd:3e:9d:5a:a1:cf:1a:b3:92:67:60:a5:
a8:13:d8:c2:54:c4:99:a0:a5:0c:76:8f:3a:70:cf:
cb:07:26:e3:ce:b2:a8:6f:fd:c8:71:a2:b5:5e:3d:
42:e8:b1:19:c7:f0:e6:a4:84:e0:15:af:54:53:75:
07:0b:d7:b1:79:c4:7d:c3:91:46:cc:3a:cd:a3:8f:
a4:5e:04:e4:8e:d1:76:bb:03:c9:70:8f:49:22:5b:
a5:06:e9:51:07:4a:99:50:eb:ea:97:30:2a:5b:57:
78:d5:01:c7:dc:0e:c4:ca:39:42:64:81:a5:e6:a1:
4e:09:87:b6:ee:2c:51:e1:25:8e:68:f5:e2:72:2f:
de:c7:62:ca:c7:39:55:64:d3:4c:dd:7c:2b:86:10:
20:9a:66:3f:95:cb:3a:b5:b7:65:f0:9d:64:4f:8c:
97:ca:e6:cd:bd:0a:50:30:d6:3c:b4:b9:0d:22:34:
e8:9e:fc:20:ca:ed:fe:bc:bb:ff:10:7b:06:ad:72:
51:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:66:58:3D:9C:97:E0:83:43:E7:A6:04:04:E9:90:8C:29:6E:5A:9D
X509v3 Authority Key Identifier:
keyid:DC:98:4B:AE:2D:6E:E5:48:FC:80:6D:CE:CD:40:2B:71:C7:37:34:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JhLri1u5Uj8gG3OzUArccc3NKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf84f2f2-4673-44e6-ac23-7ff954a103f8/1/DC984BAE2D6EE548FC806DCECD402B71C73734A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8c:3b:38:40:8b:5e:83:9e:c3:78:f0:c6:ae:8b:c5:21:11:
f8:08:ae:a9:dd:42:d1:d8:8f:d6:66:03:88:90:b8:93:64:d5:
13:a5:76:02:fc:bf:82:ea:85:e2:81:2b:fe:98:90:e8:3e:91:
b2:2e:00:9e:be:01:c8:9d:d9:b9:7d:9a:a3:11:ae:b5:20:5d:
72:d5:db:04:00:4d:51:94:4a:9c:1d:b9:0b:0c:0e:23:57:b9:
72:f2:3f:54:ca:c5:58:21:71:7f:f2:d9:72:62:1d:f6:a8:7c:
3f:1a:0f:6c:2b:8c:52:26:12:75:5b:dc:0e:bb:29:a9:a2:6b:
7d:9c:66:cb:c7:55:2e:91:5a:98:68:25:05:2b:a0:4d:7f:fe:
01:d0:d6:a4:76:35:24:28:d9:06:19:7c:a3:6c:cd:50:b1:6d:
e0:a8:33:bb:64:6a:8c:e7:ec:ff:17:96:c1:4c:b7:b0:a9:99:
eb:56:18:46:12:e6:48:00:f7:e1:fb:2a:d8:9b:dd:57:c5:10:
f0:d2:32:0b:a4:98:62:94:2b:9a:8e:29:66:9d:4e:90:f6:75:
90:d3:9f:d3:80:98:7a:b4:a6:46:bd:dd:3a:65:13:08:37:11:
57:ae:f4:26:81:a8:05:aa:e4:4f:03:c2:3b:f7:89:c0:19:fe:
36:3b:61:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:03:15 2026 by rpki-client