Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
File: DGgkFYtzDEQWfqdzqXchjMYvQWo.mft (raw, json)
Hash identifier: YFtF68j+mBo4TtvairCIAmwqi0X8SogLln7cHbFiXNQ=
Subject key identifier: F7:1F:E2:A8:DA:C5:7B:AE:CA:99:89:B8:3E:25:08:73:14:59:CD:47
Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
Certificate issuer: /CN=0c6824158b730c44167ea773a977218cc62f416a
Certificate serial: 019FA9E2E57564EA6A00908E705DAADFB13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
Manifest number: 0EDE
Signing time: Tue 28 Jul 2026 18:00:47 +0000
Manifest this update: Tue 28 Jul 2026 18:00:47 +0000
Manifest next update: Wed 29 Jul 2026 18:00:47 +0000
Files and hashes: 1: DGgkFYtzDEQWfqdzqXchjMYvQWo.crl (hash: 0MyxKvLMuaX1gqPE9XRsXYH5VROrhaxiu0OOVNx/AHQ=)
2: utyeED3clQkm3ZphFz4r6XrH5aM.roa (hash: 1/LGmMoXZvPyyNB1HdA73Zq1ZKG58JPMftBJCzzv2rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:e5:75:64:ea:6a:00:90:8e:70:5d:aa:df:b1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a
Validity
Not Before: Jul 28 18:00:47 2026 GMT
Not After : Jul 29 18:00:47 2026 GMT
Subject: CN=f71fe2a8dac57baeca9989b83e2508731459cd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d4:f5:17:fd:64:f9:17:4d:d0:1b:64:bf:df:
95:71:ec:4e:e3:cc:9c:e9:ec:6f:79:9a:a9:98:69:
34:98:42:0e:86:6e:00:78:23:76:05:42:71:f8:02:
d9:69:94:50:3b:fc:f3:c3:80:4f:cc:6e:72:bc:ea:
0d:51:6e:33:ae:8e:91:b1:8a:69:60:88:75:da:ee:
7e:47:d0:b8:04:9e:21:72:10:3c:2d:a6:55:ce:ef:
bb:5c:4a:9c:a5:ca:c7:7b:60:d5:4e:22:97:13:2c:
3f:bc:31:b8:fd:7e:49:a7:a9:3a:b7:74:71:7f:02:
9d:de:87:cf:27:4b:74:c8:0c:0a:20:e6:d5:15:c9:
a4:9e:a3:a1:e4:cf:82:0f:3e:cf:7c:cb:18:d7:69:
d3:42:c0:a9:a3:69:72:cd:5b:13:96:59:42:d2:07:
ad:40:6c:72:21:52:e2:54:a5:48:19:4f:85:cd:fa:
05:3d:d5:76:ec:40:92:e4:6d:72:d7:9d:7b:b8:a8:
16:e2:a5:69:99:9d:d6:df:31:83:67:af:a0:e0:c6:
05:6d:36:a6:20:db:e6:26:61:3e:0d:fd:dd:a5:d1:
85:4b:27:6e:bb:8b:57:32:0b:68:4b:bc:46:b1:c0:
15:08:9f:f2:3a:f0:aa:4e:84:05:62:76:63:3c:d0:
51:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1F:E2:A8:DA:C5:7B:AE:CA:99:89:B8:3E:25:08:73:14:59:CD:47
X509v3 Authority Key Identifier:
keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:63:cc:6d:05:5b:f6:9a:03:6b:0f:2d:0c:46:cd:9a:40:e5:
63:c7:a1:2a:ab:00:a1:c3:8d:8d:d7:6b:44:a2:6e:f2:cd:46:
57:43:1a:e5:2f:d8:59:ef:14:8c:15:40:1e:40:fd:7d:db:08:
94:f9:e4:81:e0:15:66:cc:37:86:b6:8e:37:3b:ec:0c:57:71:
01:23:e2:59:db:f9:f5:66:9f:56:59:95:33:ce:73:b9:b5:e8:
ee:56:7b:ab:01:59:8a:cc:4e:13:25:e2:28:ea:c3:be:96:5f:
61:3e:4a:a7:c4:fc:fd:83:30:1e:d4:c8:9f:90:ee:8e:86:d1:
c5:56:61:b6:3d:f1:32:1f:9f:30:e3:e6:fd:c9:6d:a2:15:44:
96:48:62:3b:10:53:47:36:96:a7:88:6f:69:9b:96:ed:11:a5:
e5:3e:0a:1c:2c:d2:c2:68:05:3e:da:d8:e8:58:83:d1:cc:9b:
dd:b6:84:a0:a1:fd:9d:82:c4:fd:d6:13:4f:ac:c4:79:19:33:
ea:7f:d0:0c:e0:c0:21:17:34:5b:3e:61:4c:94:e5:b6:66:82:
23:20:42:ce:58:e7:ca:8e:e3:53:9f:7b:d8:fa:e2:c0:45:6d:
02:3e:b5:47:55:d8:c3:6a:98:5b:ee:26:41:86:7d:44:68:ef:
16:f5:ad:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:51 2026 by rpki-client