Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json)
Hash identifier: YVru26rFYnNrr2JxAlaZFbvGZ1RjCM9Y80IU1q/852Q=
Subject key identifier: F5:67:E6:74:14:1E:69:F8:F2:8F:CF:53:61:FD:CF:42:F0:75:B1:15
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial: 019D992B3C73C8B17FFEB09A63B878E9585A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
Manifest number: 0FDF
Signing time: Fri 17 Apr 2026 02:00:40 +0000
Manifest this update: Fri 17 Apr 2026 02:00:40 +0000
Manifest next update: Sat 18 Apr 2026 02:00:40 +0000
Files and hashes: 1: D0GEjoznOI2frIxZsC2NiRuqe58.roa (hash: izqFp+9eKQWS0LIy0mUZV6cpF1Hakb27ARgQaCVrstg=)
2: DXniqTjiM_fLeFwbMoM6gQE-lG8.roa (hash: pstH5qAZQNYtXKP4tLhcl9j2PXNJLupw87wVdJwV48s=)
3: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: iijNmKcfdRZ8NEMVUbSzjYyVGqZMADKTv/SCeqdKwDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:3c:73:c8:b1:7f:fe:b0:9a:63:b8:78:e9:58:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Validity
Not Before: Apr 17 02:00:40 2026 GMT
Not After : Apr 18 02:00:40 2026 GMT
Subject: CN=f567e674141e69f8f28fcf5361fdcf42f075b115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:03:7e:03:f9:93:f7:1d:4d:d1:64:5b:1a:
bc:86:1b:4b:c9:c1:b3:13:67:5b:5f:c4:91:c6:d7:
39:27:c0:be:6c:b4:1f:5b:ec:8c:f0:53:50:70:3f:
f0:ae:db:47:15:e4:81:d2:e6:2d:7e:a7:73:49:46:
e6:79:0a:03:c9:88:a9:d9:e7:a5:b5:fc:1e:7c:7f:
a2:0a:54:a4:97:b4:17:f7:84:da:ea:19:02:9b:0c:
6c:d3:1c:5b:f4:32:31:03:f7:54:47:f3:fc:d8:81:
4d:f1:c0:b8:a6:9e:31:5a:61:f0:f0:6f:69:f9:71:
81:2a:6e:cf:03:51:46:9f:8b:3f:bc:fc:76:5d:65:
47:58:3c:19:13:0d:9a:29:c4:6e:f7:82:ec:85:88:
1b:2f:aa:8b:56:bf:df:f0:61:51:75:75:2e:3d:69:
93:2c:73:a6:2c:7f:3b:a1:05:33:0f:6e:29:5b:18:
24:2d:38:46:4c:e4:4f:83:3e:4f:60:f7:28:4a:04:
56:8a:b3:c6:bd:88:37:09:92:76:59:be:25:4a:d0:
22:54:34:04:03:51:6f:ea:b1:9c:6b:f3:72:cc:f0:
ea:2f:74:f9:4b:d2:62:c3:cc:65:7c:0b:79:64:89:
1e:4e:0f:4f:ec:27:78:9c:27:de:96:d6:52:11:77:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:67:E6:74:14:1E:69:F8:F2:8F:CF:53:61:FD:CF:42:F0:75:B1:15
X509v3 Authority Key Identifier:
keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:df:a7:cb:76:01:34:37:3c:b7:de:b7:f9:e5:fe:26:17:fe:
62:62:d3:f9:31:13:69:ed:96:99:a4:2c:57:db:32:d5:14:30:
83:7c:c7:79:ea:ff:55:e0:78:3e:e8:35:f4:d9:68:56:38:a6:
77:de:65:77:a5:3d:11:98:c8:ef:f0:5f:a5:ab:19:e5:bc:c6:
81:8d:9c:fe:ee:36:f3:af:d2:ac:00:17:50:71:58:43:0d:0a:
7c:3e:64:9d:b4:72:c9:08:b2:ef:8d:99:fc:d9:e8:c9:2c:af:
6d:b8:36:46:06:60:6d:b4:aa:d4:3b:a6:ce:9b:c0:5e:38:a8:
8d:aa:c3:2c:38:fa:46:35:a1:8a:b2:a8:b7:a8:03:9c:7a:8c:
a0:68:b4:3a:47:06:cf:41:2b:b1:34:91:4d:ae:03:18:90:58:
76:84:ba:25:27:8a:32:cf:7b:08:d0:0a:30:4e:0e:6e:4e:da:
b5:3d:b3:72:4d:5b:a6:d6:03:63:84:03:b5:c2:7a:0b:2d:c3:
cc:23:fc:8a:71:c4:1f:77:9f:4a:67:cf:31:bb:a6:e8:c0:9c:
ea:b1:c7:37:a6:04:dc:b4:12:49:62:3f:73:7c:2b:1c:16:af:
a0:fc:c3:88:2c:4f:0b:e3:eb:ef:28:90:b1:15:dc:11:23:66:
41:c1:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:26:32 2026 by rpki-client