Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier: Y8khqLR3LAl5K1pAIj52DKZZm46QPu/G9Td4cL28UwE=
Subject key identifier: AC:49:56:4F:3D:6A:6E:14:82:21:81:A3:6E:F1:61:7F:E2:FA:54:15
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial: 019FAC3EE13DE7864F3D54BDEE418281EA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number: 0E90
Signing time: Wed 29 Jul 2026 05:00:29 +0000
Manifest this update: Wed 29 Jul 2026 05:00:29 +0000
Manifest next update: Thu 30 Jul 2026 05:00:29 +0000
Files and hashes: 1: KMvjq5V4Ksx01k9TjiIKtXCe5pA.roa (hash: 1beuOrWqdA+O+erqVb2gqs5tEOIpMoZMwqBtE6QzSbA=)
2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: dgMH6O6NPXt+JUao6zFzexovchjE1i4T0UP7TwIKZxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:e1:3d:e7:86:4f:3d:54:bd:ee:41:82:81:ea:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Validity
Not Before: Jul 29 05:00:29 2026 GMT
Not After : Jul 30 05:00:29 2026 GMT
Subject: CN=ac49564f3d6a6e14822181a36ef1617fe2fa5415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:0d:7c:91:fd:cf:b1:0a:a3:7f:2c:24:a6:
42:89:65:84:49:1a:38:a0:24:3c:29:7c:a6:52:d8:
44:4d:4f:d5:30:7b:d7:57:69:fc:11:b7:2e:89:bf:
38:5d:a0:a7:25:04:a5:f6:c9:fc:23:c1:ee:9b:4b:
f1:e2:b9:04:72:c9:40:c5:3d:5b:a6:31:21:e4:d4:
2e:fd:12:bb:0c:2b:cc:c0:8b:c3:fd:19:4c:7f:9b:
63:c6:c7:41:d3:47:73:ce:b6:89:a9:a3:81:04:c0:
1e:42:b1:18:0d:c8:6f:e1:52:e0:c1:87:c3:b8:c3:
89:a5:e2:d6:03:92:36:4b:e6:c8:cf:a5:bf:c7:f6:
99:1b:b6:16:44:ca:51:16:92:d1:6a:7e:66:19:d4:
9c:d5:88:b0:98:67:29:3e:0d:38:61:74:47:59:42:
6f:46:7e:82:48:f8:da:2f:18:66:5e:db:e3:95:57:
21:06:d8:4f:87:63:02:55:e9:63:90:c2:c6:25:fc:
9d:56:09:91:48:98:c5:30:fc:53:46:82:66:f9:0f:
ca:4c:a6:d5:d5:30:01:d9:9e:b7:7e:9e:25:2a:2e:
00:e9:2c:07:b9:ad:21:9f:2f:e2:39:1e:62:7c:12:
22:15:d4:11:0a:38:c8:62:69:b3:06:bc:c1:23:2b:
74:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:49:56:4F:3D:6A:6E:14:82:21:81:A3:6E:F1:61:7F:E2:FA:54:15
X509v3 Authority Key Identifier:
keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e2:aa:35:02:d9:c7:3b:8d:e0:7d:8b:05:9a:d1:2f:1e:6c:
52:95:59:dd:1c:14:06:7a:b8:b0:d6:51:1e:b2:1d:20:5c:1d:
b5:6e:93:40:01:8f:a3:ee:09:b7:ee:a3:63:99:a5:06:c9:b7:
88:13:f8:30:13:c8:16:5a:9d:d7:96:80:50:d2:3f:4f:24:86:
21:47:c8:5e:05:44:30:d6:e8:fb:6c:fe:3d:5d:14:7b:56:aa:
c2:af:4d:d9:66:6d:b6:72:b1:6a:29:c5:5b:bd:a2:b8:ea:7e:
3e:69:62:78:81:2c:16:92:91:8c:28:64:f4:75:24:4a:e8:74:
d1:4b:f4:63:fe:25:54:58:a2:c1:2f:66:9a:ad:0f:d0:e4:25:
b7:d9:b6:0f:cd:05:36:5e:a7:60:d7:5d:e4:9e:b2:2e:ef:f7:
2a:a1:36:b6:07:63:f7:6f:15:12:f0:b9:b5:b5:e8:91:19:2f:
9c:a2:7f:a1:e0:b9:9b:b2:55:b2:d1:0a:21:8f:0f:9c:87:01:
dc:e3:22:46:d0:b2:87:86:f8:50:ae:bc:20:76:18:c1:9c:e6:
5b:56:0e:3a:40:d3:3f:a4:da:e7:7c:35:8c:81:8e:f4:a8:8b:
59:e7:eb:9f:f6:a6:02:dd:19:6a:63:4a:1f:ef:17:4e:67:99:
b3:53:68:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:50:12 2026 by rpki-client