Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: 4KrpfXeEF44NhTMeEYcKlYjQY21hSPINFBfigOugO2s=
Subject key identifier: E1:34:13:4A:9A:74:EC:30:43:98:9A:26:6B:4F:22:28:8F:DC:BF:04
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 019FAA5061F9C1E7BAC5673709676C3855F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 0A73
Signing time: Tue 28 Jul 2026 20:00:22 +0000
Manifest this update: Tue 28 Jul 2026 20:00:22 +0000
Manifest next update: Wed 29 Jul 2026 20:00:22 +0000
Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: Rb2fNwQtzDi4JuGhmrDRzJaDpleoY1M6bKetVrqFMYk=)
2: qdFP8iSD0Z_J4wvN-DjLd-7BFwQ.roa (hash: 0D/tNJqnYIvzeRQq9p/CHZuxh+SBEqxg5rvNHFpn3cY=)
3: vrCign6erTM1LbQRKP4h0IonXBQ.roa (hash: AQYpWzYbq4r9zz5A/4U8pWZOmJvv2qppgX/OMFbKwks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:61:f9:c1:e7:ba:c5:67:37:09:67:6c:38:55:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Jul 28 20:00:22 2026 GMT
Not After : Jul 29 20:00:22 2026 GMT
Subject: CN=e134134a9a74ec3043989a266b4f22288fdcbf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:89:e7:fb:70:38:9b:b3:8f:46:e0:b2:b7:
3a:91:60:61:2a:ef:25:fa:fd:d1:58:51:9d:2f:8c:
9d:7f:be:75:55:3a:19:9f:d2:02:c4:f8:0c:9c:5c:
fa:0d:db:81:67:8c:d1:8f:e6:ee:23:41:1b:86:47:
19:58:3e:da:67:17:53:28:84:84:20:9f:3f:65:f7:
59:ea:fb:5f:e8:03:38:fd:f0:d0:d3:83:d7:ca:68:
6c:dc:9d:25:32:ff:90:9b:b5:18:6c:61:9b:b0:52:
62:50:7f:6d:5d:f5:fd:38:ea:62:15:fc:31:92:06:
fd:a6:45:7e:51:38:cc:86:3b:4e:f8:b7:72:15:08:
d3:d6:3d:08:4e:51:c7:ac:39:a2:e6:8b:cc:79:e2:
f3:eb:43:84:25:66:9b:17:5f:31:7e:ca:17:a3:d6:
57:3f:85:9e:ea:c8:93:31:b0:cf:26:4f:ae:41:74:
c2:a6:08:07:b3:42:fe:1d:bc:8f:f4:fd:89:41:75:
83:94:40:f9:b6:1c:00:ec:2d:07:cf:ac:cc:ff:00:
c2:39:00:36:25:32:13:0d:58:b6:e6:0b:7e:63:39:
e5:43:45:83:e2:a8:b4:52:c9:7f:ae:73:ea:9d:20:
a0:79:d2:e2:51:5d:da:1d:c0:a7:6e:73:f0:37:c6:
04:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:34:13:4A:9A:74:EC:30:43:98:9A:26:6B:4F:22:28:8F:DC:BF:04
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0b:4b:66:cd:64:03:a8:f6:c7:dd:a9:b4:32:4b:65:58:e0:
bc:97:8c:88:b6:e5:4e:5c:5c:e2:3f:38:c8:1d:42:e4:c2:41:
92:72:59:49:ae:c0:6d:78:6e:c8:d9:cd:5e:9c:01:38:aa:a6:
6a:0d:1f:dd:f1:de:ce:9c:93:39:5e:6c:bc:ca:19:95:78:52:
48:6f:80:e9:83:ea:49:12:7e:d5:38:76:9a:93:61:53:91:f1:
40:09:0d:fc:3f:cf:57:39:f6:88:1e:45:e7:1f:0e:1e:25:ce:
d2:36:ed:10:4c:30:c5:05:cf:9e:e4:97:b2:0a:27:63:72:c9:
3c:2f:40:1d:9d:4b:cf:fc:ab:a1:1e:21:88:ae:f8:82:4e:34:
e7:c6:5a:4a:15:4e:a1:79:0e:e9:5c:03:5a:f6:fa:19:1d:34:
95:dd:53:94:72:e3:7c:ce:17:00:8a:35:e9:4d:5a:a2:44:a0:
d7:59:07:a1:6c:c5:8f:7a:e5:f6:f7:68:0a:a4:2e:16:24:44:
6e:25:c9:3e:1d:81:03:bc:b1:61:64:a8:94:64:52:c8:4e:f7:
2d:65:60:58:5f:f0:73:6c:10:d4:11:99:34:0a:a2:3e:67:6d:
f3:b8:5e:e4:9c:0c:3f:70:a1:a0:57:07:d7:67:76:eb:b5:24:
45:be:ea:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:59 2026 by rpki-client