Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json)
Hash identifier: 3tdwoxpZAU8iFVcudJj3aPsGIank3tcJIxLd3E0tOWc=
Subject key identifier: B7:07:82:68:5A:81:F5:4B:26:80:5D:16:AF:6A:37:C3:3E:A8:DB:EF
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial: 019EC0A3CDE8D5825365FCEA46C51796541F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
Manifest number: 1078
Signing time: Sat 13 Jun 2026 11:00:20 +0000
Manifest this update: Sat 13 Jun 2026 11:00:20 +0000
Manifest next update: Sun 14 Jun 2026 11:00:20 +0000
Files and hashes: 1: D0GEjoznOI2frIxZsC2NiRuqe58.roa (hash: izqFp+9eKQWS0LIy0mUZV6cpF1Hakb27ARgQaCVrstg=)
2: DXniqTjiM_fLeFwbMoM6gQE-lG8.roa (hash: pstH5qAZQNYtXKP4tLhcl9j2PXNJLupw87wVdJwV48s=)
3: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: bc9uL/OF5PjHwpmfkfy41ridGFmwPWpuAwNoJorA4GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:cd:e8:d5:82:53:65:fc:ea:46:c5:17:96:54:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Validity
Not Before: Jun 13 11:00:20 2026 GMT
Not After : Jun 14 11:00:20 2026 GMT
Subject: CN=b70782685a81f54b26805d16af6a37c33ea8dbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:e6:af:5b:57:d4:55:ab:68:37:07:1a:41:
70:26:39:44:a0:43:36:af:c0:43:cd:3a:44:bd:f4:
ee:fc:60:b0:7d:39:ea:5d:1f:ed:25:01:eb:f4:10:
fd:6b:9a:b7:fb:ac:15:c7:50:e5:1c:99:05:92:b6:
cf:db:9e:44:ec:51:bc:49:0e:8e:05:05:36:1b:66:
22:5e:34:21:74:b0:ed:f4:1e:79:4b:4c:52:4c:50:
0b:21:b4:92:a9:82:80:00:8a:a2:24:9d:60:1e:89:
0b:24:6e:ff:4b:85:c5:ef:4c:7e:72:2d:98:85:e5:
19:b4:db:4b:8c:32:28:56:41:9a:45:13:c0:45:f5:
0a:f1:88:8b:59:e9:ba:33:64:af:6b:ac:b9:c9:c0:
b6:b7:ff:fc:03:3d:fa:66:d8:4f:b8:10:39:ba:dd:
28:d4:4d:29:a9:54:a4:a1:67:1a:29:df:8a:d0:2b:
46:b9:3c:c3:e6:43:d1:0a:41:d3:27:68:81:c1:7e:
f2:cf:81:73:8a:ce:1d:83:da:d6:1a:ce:bb:22:b4:
6f:36:79:8a:b1:65:3f:43:ef:9f:25:fb:54:bb:4b:
af:ae:0d:c1:48:8d:9c:de:92:fd:2f:a7:ef:77:f5:
ba:33:c0:53:cc:03:99:96:13:82:6f:d7:db:4d:0a:
f4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:07:82:68:5A:81:F5:4B:26:80:5D:16:AF:6A:37:C3:3E:A8:DB:EF
X509v3 Authority Key Identifier:
keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2b:14:68:a6:4b:96:38:20:bb:1a:f5:b4:c2:a2:26:f7:90:
bd:a4:7f:0d:36:f7:3a:c8:16:3d:39:b4:e2:38:29:cf:57:f2:
c6:a2:5f:56:55:c4:e9:ed:23:66:5b:46:d0:cf:23:f3:34:a5:
86:48:96:33:93:1d:d8:9f:c8:0b:5b:51:c1:ca:12:95:cb:6f:
53:04:33:fd:d5:ce:ef:7b:05:7b:3d:ab:f5:35:ec:90:0e:af:
f1:8e:38:58:13:0d:ef:d6:71:79:e4:20:2e:19:bc:66:29:44:
e7:7e:f6:ef:4e:a4:1b:9d:2b:7a:c0:9e:cd:95:65:1b:ac:b2:
a8:a6:a0:5f:66:e1:58:ea:42:f9:2f:9e:85:be:4f:b0:74:05:
96:d5:00:51:61:2c:43:e7:3a:d1:65:50:ab:27:3f:d0:2f:50:
71:d8:b1:f1:77:86:88:63:20:ee:3d:39:9f:25:9e:dd:e0:83:
eb:10:fc:28:64:46:ac:58:06:14:b8:2b:91:bd:38:95:ea:ee:
59:77:e1:42:07:28:6e:2b:0f:b6:e1:52:0a:7c:c3:31:07:73:
88:f1:90:6a:2e:81:e0:c0:7f:13:de:63:24:ef:20:3d:95:aa:
bc:a2:45:9c:4c:c7:f5:7b:91:80:92:6e:74:81:92:a1:1b:f5:
f0:7f:b8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:56:35 2026 by rpki-client