Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json)
Hash identifier: e20hKsdM7jEYbLqFrdR3HrvUD5s/FcItflKjR1g9Tsw=
Subject key identifier: 6A:A0:92:28:7E:0B:FF:C5:69:8B:AB:52:BA:5D:CD:7D:7A:21:CE:8F
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial: 019CABA273CC47A4E8C879FAFFAE90E93E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
Manifest number: 0F64
Signing time: Sun 01 Mar 2026 23:01:16 +0000
Manifest this update: Sun 01 Mar 2026 23:01:16 +0000
Manifest next update: Mon 02 Mar 2026 23:01:16 +0000
Files and hashes: 1: D0GEjoznOI2frIxZsC2NiRuqe58.roa (hash: izqFp+9eKQWS0LIy0mUZV6cpF1Hakb27ARgQaCVrstg=)
2: DXniqTjiM_fLeFwbMoM6gQE-lG8.roa (hash: pstH5qAZQNYtXKP4tLhcl9j2PXNJLupw87wVdJwV48s=)
3: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: DJojdUbKVuWdn8TcWkpi3+wkou2UzVmqNbzxQXnobi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:73:cc:47:a4:e8:c8:79:fa:ff:ae:90:e9:3e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Validity
Not Before: Mar 1 23:01:16 2026 GMT
Not After : Mar 2 23:01:16 2026 GMT
Subject: CN=6aa092287e0bffc5698bab52ba5dcd7d7a21ce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:e7:05:21:46:e2:30:13:ef:9d:39:29:64:
6a:12:2f:ee:35:5b:63:86:04:08:a7:1e:f4:c3:e7:
b6:e6:e3:1b:90:c5:f3:eb:62:e1:23:7c:be:c3:bf:
77:32:f6:ba:ac:e6:27:e3:00:e3:c3:a7:be:26:ee:
1c:e5:55:be:04:41:65:d5:12:94:f8:28:dd:ac:a9:
15:00:47:52:96:87:1b:d0:c4:a0:6d:51:de:7b:46:
92:44:bf:be:78:7b:ad:85:9b:49:f3:9f:0b:f6:f6:
81:31:af:e3:2e:0e:62:85:18:73:fb:e6:da:de:bb:
80:4e:38:34:51:8e:b7:a0:4d:11:41:33:58:79:b0:
6b:51:31:79:71:ca:1d:4d:86:32:c5:a9:a4:04:69:
a1:82:a0:91:2a:2e:46:cc:f9:89:b4:d5:c0:20:13:
3b:7f:39:c7:84:26:6d:1d:b2:d6:81:89:43:50:53:
65:2d:61:85:17:7c:dd:5b:f5:1a:78:f2:d2:c6:ba:
73:a1:98:83:96:92:f5:b0:11:13:05:56:32:6c:ba:
55:dc:d1:4a:62:71:cf:5a:87:28:a9:eb:f0:0e:71:
1d:c5:17:43:60:fb:70:0a:11:32:b6:3f:6a:69:b2:
fa:c6:bb:9b:de:c4:7c:d7:e5:f9:d8:ac:23:6c:41:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A0:92:28:7E:0B:FF:C5:69:8B:AB:52:BA:5D:CD:7D:7A:21:CE:8F
X509v3 Authority Key Identifier:
keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d1:d4:b0:f6:8b:cb:66:14:c1:23:eb:f0:6b:f2:f7:07:0a:
26:0f:c1:1a:2e:1e:d2:0c:2b:65:99:90:c0:b9:ee:18:c8:c2:
28:d2:28:d3:5d:ad:b9:8c:4d:13:af:62:8a:a4:51:81:9e:e6:
60:9d:59:c8:d1:04:23:0b:11:38:01:80:2f:56:fc:6b:79:ec:
47:51:98:a8:b8:2e:77:48:82:8a:18:b4:79:25:8b:0e:a5:18:
a6:cb:ab:5e:19:d8:e5:cf:75:d6:cd:0a:c1:c0:86:eb:8e:61:
25:01:4a:89:dd:a5:aa:fd:af:82:48:46:c1:ff:97:9a:e3:52:
69:ba:0b:eb:c4:a4:53:50:f9:b6:55:e9:95:20:cd:09:fa:fb:
52:4d:aa:41:ec:c4:a6:fe:ac:ed:dd:02:66:6e:d7:7f:87:4b:
1e:7b:87:a9:18:a7:ba:2b:77:4f:9d:6d:ee:0b:ed:0c:ea:68:
d9:4b:82:65:d3:05:07:c8:1d:3f:31:58:9a:15:aa:8a:c9:1d:
b0:ec:6f:84:ea:52:5e:ae:6a:a6:79:31:77:e9:39:67:97:2e:
84:76:b5:54:9b:df:05:50:6a:0c:a3:03:8c:c0:61:5d:01:d3:
78:3d:f8:d1:57:92:58:07:ec:5e:ee:12:34:7b:6e:19:cd:16:
be:eb:49:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:14 2026 by rpki-client