Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: +1/k3FRczK+mWNfP6+bdaRS0C4QzcavcwMJlxLX505I=
Subject key identifier: 31:1C:2B:FF:5D:C0:2C:73:B8:16:60:0B:9D:1E:65:97:BA:BD:1D:14
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 01A0BE797913AFE80EF48CEF99F8969C2670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 0B02
Signing time: Sun 20 Sep 2026 11:00:26 +0000
Manifest this update: Sun 20 Sep 2026 11:00:26 +0000
Manifest next update: Mon 21 Sep 2026 11:00:26 +0000
Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: mNUTVel6ME/fKAgRJAwty2+63Q4GxNzVmGI5ER4DpTk=)
2: qdFP8iSD0Z_J4wvN-DjLd-7BFwQ.roa (hash: 0D/tNJqnYIvzeRQq9p/CHZuxh+SBEqxg5rvNHFpn3cY=)
3: vrCign6erTM1LbQRKP4h0IonXBQ.roa (hash: AQYpWzYbq4r9zz5A/4U8pWZOmJvv2qppgX/OMFbKwks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:79:79:13:af:e8:0e:f4:8c:ef:99:f8:96:9c:26:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Sep 20 11:00:26 2026 GMT
Not After : Sep 21 11:00:26 2026 GMT
Subject: CN=311c2bff5dc02c73b816600b9d1e6597babd1d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fd:c3:cb:0d:83:7e:4f:66:2a:32:2f:3d:14:
0b:da:62:e3:62:80:12:6d:eb:16:37:52:2b:85:c9:
9b:a5:ac:7d:9b:3c:6d:b5:dd:fd:6e:33:bb:af:58:
0c:41:c2:02:69:b5:fa:ec:16:59:66:38:e3:84:07:
92:d9:b9:f9:cb:53:45:6b:95:e1:59:a7:82:e0:64:
ca:8a:08:84:9a:ef:7d:96:92:87:ba:6b:f5:d6:36:
ce:e2:a3:f8:d0:e5:b4:bd:90:36:80:d0:eb:83:5c:
5e:63:2b:55:f1:56:a6:fe:d8:56:eb:f0:dc:4f:e6:
fd:d9:d2:6d:72:0c:8c:cc:d4:63:e3:2e:9c:b9:fa:
0b:be:8a:c6:32:09:a8:94:7e:26:a4:1c:3c:80:d4:
e4:2e:43:8d:b3:f5:68:6c:10:e4:3e:fd:c2:ae:16:
43:a7:e5:2f:7a:0c:2a:81:e8:bf:01:ff:20:96:cf:
8b:9b:67:46:6d:82:e9:00:cc:27:c7:09:24:28:18:
2e:0a:90:e2:09:c1:a0:d1:8c:ef:ad:ca:ca:ab:28:
80:e3:1e:c5:38:ba:8e:3f:84:d7:1f:8f:3f:86:46:
2e:7f:4e:5e:c9:6c:65:ab:ce:01:c9:c1:e1:9c:fc:
75:87:33:c0:37:9b:6b:71:98:c3:69:a0:a9:41:5c:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1C:2B:FF:5D:C0:2C:73:B8:16:60:0B:9D:1E:65:97:BA:BD:1D:14
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5b:c1:12:5c:b8:b3:83:5e:18:7e:f9:42:d8:a1:f7:bf:08:
46:47:1e:0b:cf:6f:c5:94:2e:39:cb:ba:4c:b3:da:fc:92:e5:
d1:b6:56:3e:4f:b2:14:ba:20:81:a7:1a:85:0a:5b:e5:3a:28:
18:bc:6a:96:56:8c:e3:be:17:79:be:06:2f:b0:32:f8:7b:e6:
19:62:53:89:d9:c0:ce:54:d1:3d:f0:5c:cc:b8:87:50:07:1f:
8d:78:dc:4a:96:f9:61:79:57:59:ed:05:f8:8c:2d:06:d3:28:
1f:30:fa:ea:05:bb:d8:10:61:f9:04:8e:bf:a0:1f:54:13:cf:
1f:fc:86:0e:75:32:2e:fb:ca:c7:9e:41:8a:2a:3c:d4:88:7e:
3c:f1:e6:06:f1:03:ec:2c:86:d1:33:98:f5:37:13:d2:dd:c3:
b2:86:06:12:30:35:a5:38:a3:a7:5f:f1:fd:5d:a4:e1:07:12:
f2:9e:04:ce:c9:9c:2a:3b:c5:6c:06:6d:0c:dc:98:ef:93:4a:
e4:a3:87:6b:71:b6:1f:b2:dc:88:17:49:35:f2:61:49:1f:c2:
fc:8f:f9:21:33:20:e3:c6:c3:e1:cc:35:1d:c2:d5:5d:04:75:
5c:96:bc:e7:3f:87:83:26:ab:f4:4a:88:06:71:b8:d4:cf:56:
8f:51:f1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:42:17 2026 by rpki-client