Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier: 4zozi1OlIDQKN2aTxfzqulZdyOGQ/mMtUgMdzb8/XZc=
Subject key identifier: 9B:20:2E:45:19:A3:F9:9C:11:70:CE:99:9E:8E:37:0A:44:71:D2:36
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 01A0D15BF17BDA679631A40DC2DCD1713444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number: 1896
Signing time: Thu 24 Sep 2026 03:00:58 +0000
Manifest this update: Thu 24 Sep 2026 03:00:58 +0000
Manifest next update: Fri 25 Sep 2026 03:00:58 +0000
Files and hashes: 1: 5JNKBp2r9M45FJugrqd38a7ElEI.asa (hash: MvuXBFRNg5JF/r2GjsNqe9ohlNYkSIF8QFqYGxrBem8=)
2: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: yKW//k8zNuaF0NKJBg5BFYdrHjoY15G14yV8+53tG3Y=)
3: swjIGqN6DN3Ca974iRXFGBijp9c.roa (hash: rW/KrfsjqzaW573dxssu8kVIiwDSL2ZDsZ8f8WBDZhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:f1:7b:da:67:96:31:a4:0d:c2:dc:d1:71:34:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Sep 24 03:00:58 2026 GMT
Not After : Sep 25 03:00:58 2026 GMT
Subject: CN=9b202e4519a3f99c1170ce999e8e370a4471d236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:96:9a:b6:97:76:33:7f:94:73:ba:7d:a3:4d:
15:b5:1b:65:cd:8a:78:8e:5c:23:3e:60:18:bc:38:
30:14:87:e7:a0:02:40:6b:92:e5:b1:71:c8:aa:18:
1c:c4:cf:ac:3a:59:e0:6c:b7:fa:cf:7e:5f:2b:17:
a6:c5:a6:fa:cc:02:66:a3:5e:fe:b1:fa:aa:d3:89:
9b:7f:48:65:18:33:ed:5c:4f:73:87:ee:7f:92:8e:
36:bb:b7:8b:46:d1:a9:8b:63:5f:83:df:d5:4f:41:
9d:d3:00:a0:75:0e:26:c5:d7:40:02:04:b4:1f:82:
19:7c:21:ce:b5:8d:91:17:3e:d0:c0:71:2f:6a:35:
64:4b:23:a4:b4:75:25:70:7e:9f:2e:ca:d4:e2:cc:
7e:e9:72:3c:1b:96:58:c5:1e:40:fc:ff:f5:b5:3a:
fb:5f:f0:a0:50:1b:c9:0c:19:d5:22:75:07:ad:24:
78:49:c1:fe:fc:6c:ec:72:f9:30:a6:30:1e:d9:44:
a3:a7:05:6b:50:47:86:08:6f:60:29:c0:17:b0:3a:
b6:f5:bf:59:10:eb:3a:a1:2c:8d:5a:79:78:78:35:
48:c5:ee:89:ec:55:5b:2b:6e:9a:0c:c2:d4:07:6a:
1c:94:5d:99:f5:b7:ed:d6:92:f6:e2:c7:57:81:c0:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:20:2E:45:19:A3:F9:9C:11:70:CE:99:9E:8E:37:0A:44:71:D2:36
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0a:c7:1c:a3:47:b2:ee:7e:04:39:af:a0:4b:a9:a6:25:7e:
ac:8a:ef:52:16:78:ae:53:8c:22:df:ef:94:33:1b:57:7e:54:
02:4f:8a:44:90:86:bf:5b:91:ae:be:ea:28:04:93:0c:e2:4f:
f0:3c:76:b2:9d:0a:d5:f1:55:0a:5b:0c:33:9d:90:2f:b4:ab:
f2:7f:55:41:91:34:29:30:7b:75:40:0a:ea:78:84:71:de:2d:
93:9f:85:1f:7e:0d:10:cb:9a:cf:f9:5b:7c:8b:a0:0b:91:84:
e6:42:fb:52:7e:d5:85:14:5e:6f:74:ea:21:d3:5b:f4:c6:4d:
a2:04:c8:65:12:e9:c5:41:32:98:94:83:54:c7:3f:1f:b3:c5:
aa:57:64:6c:c1:02:10:4e:ab:83:26:c2:3a:64:79:cd:77:7b:
03:90:db:41:75:a1:aa:d4:72:43:22:43:4b:fe:84:70:15:3d:
d9:8b:47:64:1f:14:18:ed:ad:20:08:1e:62:de:77:75:07:2d:
04:32:a1:88:c6:37:16:6e:e6:16:5d:5d:00:b4:64:f4:af:49:
56:61:aa:51:e6:ad:69:68:ec:27:66:d8:75:7d:72:67:18:48:
49:84:79:ee:53:cf:40:40:47:f5:db:b8:fb:cd:e7:b4:c5:34:
4c:ab:65:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:53:33 2026 by rpki-client