Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json)
Hash identifier: Rt6vyUIHTVS2Kt5LR91tuJs2PJfsiGc1rI2gDdSTf5w=
Subject key identifier: 41:1F:D4:B7:28:CC:54:3C:F9:E7:E6:FC:A8:AE:10:63:3B:C0:66:BF
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial: 01A0DF4EF304FD051D5003E0D1DACD296BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
Manifest number: 1191
Signing time: Sat 26 Sep 2026 20:01:28 +0000
Manifest this update: Sat 26 Sep 2026 20:01:28 +0000
Manifest next update: Sun 27 Sep 2026 20:01:28 +0000
Files and hashes: 1: D0GEjoznOI2frIxZsC2NiRuqe58.roa (hash: izqFp+9eKQWS0LIy0mUZV6cpF1Hakb27ARgQaCVrstg=)
2: DXniqTjiM_fLeFwbMoM6gQE-lG8.roa (hash: pstH5qAZQNYtXKP4tLhcl9j2PXNJLupw87wVdJwV48s=)
3: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: 7ckt+2H+0YAitBbiIqqHSQbUvvRhZP4E3zzqmlU5zec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4e:f3:04:fd:05:1d:50:03:e0:d1:da:cd:29:6b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Validity
Not Before: Sep 26 20:01:28 2026 GMT
Not After : Sep 27 20:01:28 2026 GMT
Subject: CN=411fd4b728cc543cf9e7e6fca8ae10633bc066bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:df:89:21:e3:93:3e:b1:9f:f4:1d:0f:6f:
91:ac:35:d4:dd:97:d6:8c:a3:93:21:4e:3d:0b:47:
d4:67:a7:19:7d:1d:66:03:cf:62:d3:32:66:19:d9:
b4:53:71:8e:60:ee:bb:e3:ca:96:94:81:df:7a:ff:
56:9b:7b:d9:4c:9c:c7:b9:00:0b:c1:4b:dd:3f:78:
fb:fe:e1:4f:06:c5:b9:39:64:73:9e:3e:56:5c:c9:
87:0b:44:07:62:1f:ae:f3:3a:5e:cb:f5:44:fb:e2:
55:56:1d:bc:ec:bb:42:4a:f6:a9:2b:5c:b6:d0:6b:
12:63:33:c8:20:2e:ac:19:38:6f:a5:29:83:08:55:
a6:7e:b9:61:7b:c4:c1:65:9a:9c:39:44:e0:32:86:
c2:95:d6:4c:fd:c4:92:80:13:6a:0e:de:b8:de:80:
6a:5f:b7:a0:60:b4:d1:37:77:4e:a1:7a:c0:be:79:
9a:7b:53:3d:17:22:46:b2:dc:5c:c8:e6:f9:c5:7a:
03:0e:52:bb:82:75:f1:9f:c7:0a:b6:7f:2b:71:11:
82:4a:41:ab:cc:cf:fb:c4:4d:fa:c9:60:21:a2:d4:
70:7b:56:c2:f8:ce:fa:ea:1b:4c:f8:e6:41:6b:15:
2a:4b:96:22:dd:0a:a6:d8:35:77:4a:aa:e3:96:63:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1F:D4:B7:28:CC:54:3C:F9:E7:E6:FC:A8:AE:10:63:3B:C0:66:BF
X509v3 Authority Key Identifier:
keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cf:63:5c:b0:de:b7:7b:06:c7:7f:8e:67:ac:88:2d:40:5b:
c2:a7:3e:c2:d6:12:1b:0c:bd:9b:64:51:8e:bb:56:7e:b1:6d:
a7:4e:67:a2:4e:7e:57:71:e0:fe:b3:49:23:fa:4b:36:71:8c:
6b:8c:8d:54:1a:1f:04:d9:c5:88:7c:e0:75:f6:2f:3d:2f:1d:
53:79:9b:44:7a:a5:eb:49:fe:a8:82:ca:ff:69:2e:d6:32:4f:
2e:12:a1:9c:26:33:0d:a3:1c:a7:e7:ac:f6:69:4b:95:6a:92:
72:00:c0:90:9c:04:32:b6:cd:f9:f3:01:39:da:fe:c2:1f:80:
e7:84:67:54:e5:78:76:4b:1f:11:6f:a9:06:69:ad:10:08:2d:
10:18:4a:22:86:b9:27:c9:28:d2:8b:89:4e:b1:97:0f:32:8f:
6e:bb:fc:85:81:a0:cd:14:a2:c1:96:17:ab:b1:0b:48:be:59:
61:cb:71:75:f8:cd:2d:2d:27:15:d3:f4:64:6f:30:99:4d:88:
fd:0c:cf:8c:3f:5a:e0:6e:29:27:59:2a:d7:fc:9d:f1:46:c4:
8e:c6:30:8e:f1:58:49:91:89:6b:7d:bc:d2:67:d8:e2:dd:b6:
b0:89:83:8b:0a:bd:fa:97:08:d3:eb:71:ce:4e:90:7b:92:34:
98:b6:bb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:44:01 2026 by rpki-client