Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier: zHl7bOKDWaM3sfEKNJp+lr8Cvq0d19mcSQCTIq5OjJw=
Subject key identifier: 72:58:80:38:22:9C:E2:CF:66:AE:0D:55:7F:69:B2:16:C0:8D:A2:A1
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial: 019D992B28568FBEB1DEDF2EF85F934F5B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number: 0D7D
Signing time: Fri 17 Apr 2026 02:00:35 +0000
Manifest this update: Fri 17 Apr 2026 02:00:35 +0000
Manifest next update: Sat 18 Apr 2026 02:00:35 +0000
Files and hashes: 1: KMvjq5V4Ksx01k9TjiIKtXCe5pA.roa (hash: 1beuOrWqdA+O+erqVb2gqs5tEOIpMoZMwqBtE6QzSbA=)
2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: Z02ASINEprDGktvWtANd9ubEiVPHjAyBPzwvhc7rYnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:28:56:8f:be:b1:de:df:2e:f8:5f:93:4f:5b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Validity
Not Before: Apr 17 02:00:35 2026 GMT
Not After : Apr 18 02:00:35 2026 GMT
Subject: CN=72588038229ce2cf66ae0d557f69b216c08da2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:3a:fa:42:54:28:da:8c:46:9c:28:2a:ee:
d8:17:c9:33:bd:7d:0b:c4:95:1c:30:2a:ed:e7:81:
57:ea:d0:c9:46:ff:2b:b0:39:5f:03:8a:40:23:71:
53:04:ae:1b:ee:84:ef:d4:09:52:45:5d:d6:f8:a2:
78:78:d3:6f:f3:0c:f6:42:14:34:86:62:52:ad:b2:
46:d2:aa:73:a6:87:a1:9c:6c:aa:b7:f8:13:1a:16:
5f:a5:55:0b:c0:c5:bb:14:0f:8d:a3:07:bb:7c:ab:
cf:8f:c0:a0:67:61:e6:cd:9d:83:a2:07:69:e1:06:
b2:66:9c:04:89:d5:f1:60:66:26:75:63:a8:79:a0:
43:35:4a:77:2c:03:b5:73:b4:1b:d8:b9:5d:36:8b:
90:66:c6:86:ad:a6:06:13:4e:16:59:ce:9a:e5:a4:
18:b0:f6:ec:25:d2:f0:59:90:94:16:82:1f:9f:d8:
24:66:32:2f:74:ec:bb:44:e0:eb:df:6b:f4:92:b1:
7c:8e:e4:83:b1:b3:fa:87:6c:b6:9f:52:02:4a:80:
aa:e9:59:73:84:94:04:5b:cd:12:d1:8f:b2:22:b5:
01:90:e6:3e:65:de:93:5f:90:b5:d8:ac:f2:a2:26:
27:30:6c:b1:b4:7a:2c:90:02:cd:56:54:3a:6f:23:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:58:80:38:22:9C:E2:CF:66:AE:0D:55:7F:69:B2:16:C0:8D:A2:A1
X509v3 Authority Key Identifier:
keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:61:c2:fa:af:08:fa:e1:b3:a1:ad:2a:84:56:1a:07:50:c3:
37:1a:19:6e:5c:97:e7:68:53:a6:59:41:23:3f:5c:b1:5b:a5:
1d:48:d9:59:aa:21:0b:cd:4c:45:c3:bb:b8:7d:61:ab:35:35:
48:75:ca:13:84:87:91:5b:8c:1b:c7:d6:14:a1:3d:c9:97:e9:
d2:e1:df:83:9f:98:8e:a2:03:d0:e0:17:7e:59:84:27:37:00:
1d:b5:ef:9e:91:9d:5e:9b:ac:ff:6b:64:97:80:8a:fe:79:78:
20:04:ed:72:76:bb:fb:e5:7d:3d:e0:f4:d1:d5:08:dc:a4:0e:
97:8d:c1:b3:2c:2d:bd:f1:b0:5c:74:28:e9:b0:bc:b3:c5:4e:
30:b4:8f:dc:75:d4:3f:a4:33:0d:32:7f:60:f2:f3:43:3d:4c:
7b:a4:4e:72:1f:77:90:58:ce:1f:5c:ef:d7:a6:b0:f0:4e:c5:
25:0e:d5:0a:40:d0:27:e3:de:94:d7:20:eb:aa:88:00:d4:4e:
94:f5:ae:63:26:2c:44:95:48:d0:02:86:78:5b:ef:aa:61:3c:
30:d3:e7:77:b6:ee:88:f0:9f:e5:00:42:58:31:f9:18:57:7b:
7f:75:84:1d:80:9d:d3:fc:3e:db:f4:5a:90:88:cb:41:dc:23:
e1:87:72:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:52 2026 by rpki-client