Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
File: Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft (raw, json)
Hash identifier: ReXtma4axJiy9hbCg5/DYwdXH1d64eLT2YIckHcN5gA=
Subject key identifier: 18:E8:FF:51:99:DD:36:F8:66:CF:FD:DC:CA:52:E9:E9:25:A6:93:09
Authority key identifier: 0E:09:BD:1D:8F:52:F3:2E:1A:66:C9:1E:43:89:1D:CD:3C:B0:69:3F
Certificate issuer: /CN=0e09bd1d8f52f32e1a66c91e43891dcd3cb0693f
Certificate serial: 01A0E99BB061794B338153565FE9D69BBDE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
Manifest number: F4
Signing time: Mon 28 Sep 2026 20:01:29 +0000
Manifest this update: Mon 28 Sep 2026 20:01:29 +0000
Manifest next update: Tue 29 Sep 2026 20:01:29 +0000
Files and hashes: 1: Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl (hash: NWcl+e7pHtU1v2E2iV2GWA9FPnmEn73fVsZh+gPwzVU=)
2: P0TSUa_O2R0WqImkYTbqNvp_xSA.roa (hash: FdEGT+YAusCANOcQeGpBhtrd2xw82WN4CDsU+y058Uk=)
3: _Q5u_aa4oQ-ih3YeJ-eiQhiEGDA.roa (hash: R9XukPe4DSAWpgSPkCL5g1hxeUwcjBv75r2z5QRzV8A=)
4: fz3IBcPUYgyEi3HKy3o15CbAZtg.roa (hash: Xf1iCJJHpif2NVYysmUBCRlEjnut8UfGRj8zHdLVVNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9b:b0:61:79:4b:33:81:53:56:5f:e9:d6:9b:bd:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e09bd1d8f52f32e1a66c91e43891dcd3cb0693f
Validity
Not Before: Sep 28 20:01:29 2026 GMT
Not After : Sep 29 20:01:29 2026 GMT
Subject: CN=18e8ff5199dd36f866cffddcca52e9e925a69309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:5c:02:ba:b3:13:3c:18:2c:53:81:2b:4e:20:
ab:d6:d8:2d:ad:a5:f8:fb:f4:52:c7:7f:66:fd:f8:
dd:0c:a8:07:e7:de:4d:68:58:28:77:0d:98:d3:44:
ef:bd:6c:cb:14:56:ee:54:d7:0f:a2:2f:dd:71:1e:
33:ad:e5:1f:e1:d5:16:19:f2:1f:17:ac:2b:d4:b5:
9d:99:d7:e5:87:96:6c:33:0f:dd:89:04:bd:d4:dd:
e3:4b:66:1c:fb:f6:d3:18:f0:eb:07:16:74:4f:ca:
90:35:a7:ef:3b:6e:0b:6c:50:ac:13:e3:5a:5e:4c:
82:ce:a2:6a:b0:61:e4:8e:2e:90:06:df:f1:9e:d0:
23:91:49:88:72:14:b1:53:cd:d7:87:76:69:5a:27:
74:a8:14:91:5e:5e:ff:bc:de:ae:b9:0e:5f:74:5d:
c6:6b:db:93:db:99:25:88:e0:88:aa:0e:5e:a1:55:
0c:90:ba:40:da:f8:fe:b8:2d:ac:d6:d9:68:80:79:
d6:2d:8a:9b:b9:9f:ec:79:a6:6b:4b:77:81:ee:58:
fb:69:29:56:c1:dd:4d:45:f0:99:d4:f4:52:34:b7:
ff:9b:28:ec:60:87:80:b8:14:f1:92:e4:50:78:3e:
a9:26:8e:4c:59:8f:af:35:92:7e:6b:2a:9b:94:5c:
0f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E8:FF:51:99:DD:36:F8:66:CF:FD:DC:CA:52:E9:E9:25:A6:93:09
X509v3 Authority Key Identifier:
keyid:0E:09:BD:1D:8F:52:F3:2E:1A:66:C9:1E:43:89:1D:CD:3C:B0:69:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:98:82:40:86:63:19:fb:bc:93:7e:62:7b:8c:09:2b:8f:c8:
a2:1b:f9:8c:d5:d5:64:a9:3f:79:4c:85:ce:9a:26:71:15:9b:
da:da:4f:6f:8e:3a:49:56:2b:e2:ae:ad:8c:ba:ed:02:6c:37:
6a:2d:f8:9c:ab:db:e2:c4:cc:7b:0b:48:99:6c:24:31:30:3d:
34:fd:98:ce:26:8f:a5:0f:a5:99:c6:82:65:9c:37:8b:c9:6c:
9e:e8:08:e2:0f:38:86:f1:23:60:d5:77:ab:29:77:ab:0a:0e:
ca:57:40:41:83:a3:7b:38:91:3a:9d:f2:20:59:9c:f2:35:fd:
52:fa:2e:25:b2:4a:f8:34:4c:30:1b:a8:35:90:cf:da:fc:f8:
28:c9:a3:4a:09:e5:ab:d3:2f:36:5f:96:4e:6d:cb:01:fe:08:
c0:d3:9e:8f:5f:6b:d8:51:9a:24:1e:71:03:f4:97:be:1c:a5:
ac:eb:e7:61:fb:12:d8:3d:77:bf:46:06:85:3b:de:63:97:8c:
fd:0c:9f:20:57:f7:60:ac:a8:f5:14:2a:33:bf:e8:fc:df:03:
b6:06:2e:7f:74:37:82:e1:b8:ae:72:d6:60:b6:5a:62:1b:eb:
34:fe:d2:59:1d:7e:a7:58:ca:11:25:35:19:24:98:b6:1c:cb:
61:65:bf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:49:48 2026 by rpki-client