Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
File: Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft (raw, json)
Hash identifier: fVArT7FNkax3AWkkzXZzPpMz53I1bB7VATyvei/4WJ0=
Subject key identifier: B2:52:C8:B4:BD:86:81:64:75:23:51:4E:8F:DC:F0:91:77:E0:CF:58
Authority key identifier: 0E:09:BD:1D:8F:52:F3:2E:1A:66:C9:1E:43:89:1D:CD:3C:B0:69:3F
Certificate issuer: /CN=0e09bd1d8f52f32e1a66c91e43891dcd3cb0693f
Certificate serial: 019FA90729F6ED73891C6B64D88767090815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
Manifest number: 4E
Signing time: Tue 28 Jul 2026 14:00:46 +0000
Manifest this update: Tue 28 Jul 2026 14:00:46 +0000
Manifest next update: Wed 29 Jul 2026 14:00:46 +0000
Files and hashes: 1: Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl (hash: G5hEsg74MTGWTBHT5PtxdZwEEm2Ah+txUtjxc2mMF3M=)
2: P0TSUa_O2R0WqImkYTbqNvp_xSA.roa (hash: FdEGT+YAusCANOcQeGpBhtrd2xw82WN4CDsU+y058Uk=)
3: _Q5u_aa4oQ-ih3YeJ-eiQhiEGDA.roa (hash: R9XukPe4DSAWpgSPkCL5g1hxeUwcjBv75r2z5QRzV8A=)
4: fz3IBcPUYgyEi3HKy3o15CbAZtg.roa (hash: Xf1iCJJHpif2NVYysmUBCRlEjnut8UfGRj8zHdLVVNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:29:f6:ed:73:89:1c:6b:64:d8:87:67:09:08:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e09bd1d8f52f32e1a66c91e43891dcd3cb0693f
Validity
Not Before: Jul 28 14:00:46 2026 GMT
Not After : Jul 29 14:00:46 2026 GMT
Subject: CN=b252c8b4bd8681647523514e8fdcf09177e0cf58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:28:81:cb:06:8c:42:b7:f3:23:ef:fa:85:10:
d0:13:f7:e1:7f:f9:b1:8e:53:77:23:79:6f:cc:29:
f3:99:bd:46:d3:3a:70:dd:9f:de:98:00:5a:52:31:
a3:d9:d2:9d:44:22:99:17:db:2f:cc:9b:44:84:30:
23:d3:34:e8:9d:9b:ff:47:79:67:cd:56:42:d5:44:
38:92:8d:b3:8c:95:1f:24:de:2a:01:84:f4:7e:ba:
6f:f4:66:99:07:b8:52:ef:c0:0d:9b:1e:00:05:f6:
32:33:03:43:c9:25:9d:81:24:e0:10:56:ac:04:9e:
43:77:f1:ca:9f:72:fb:9a:24:4b:91:d4:24:11:13:
05:f7:f7:4c:ca:46:b1:0a:7d:e4:60:a3:73:ec:aa:
e6:9c:b8:6a:f0:52:6c:fd:10:a1:24:eb:24:f3:ab:
ee:11:59:f1:56:e1:e4:89:ba:f4:5c:d9:a0:da:a2:
6a:b4:87:f3:f3:da:36:48:cb:50:62:44:d5:03:45:
8d:38:45:18:67:88:7d:2f:e7:61:a4:ca:0d:69:86:
68:5a:ec:29:fc:98:5d:aa:81:37:d4:76:26:00:4a:
4c:b7:fb:6e:05:d8:bb:d4:f7:2f:b7:75:28:87:cc:
16:96:09:e8:8d:f3:40:c9:16:a5:f6:c5:90:c9:e6:
62:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:52:C8:B4:BD:86:81:64:75:23:51:4E:8F:DC:F0:91:77:E0:CF:58
X509v3 Authority Key Identifier:
keyid:0E:09:BD:1D:8F:52:F3:2E:1A:66:C9:1E:43:89:1D:CD:3C:B0:69:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3d:72:83:e5:7c:48:54:76:a2:da:72:9d:db:29:4e:89:e5:
f6:eb:62:db:2d:2c:74:f0:5a:4e:f4:e4:73:80:db:16:49:7e:
d8:76:98:a0:dc:de:e9:41:88:14:4a:86:c4:66:06:20:ee:c2:
d7:99:e7:5f:ac:e4:5b:67:af:ae:d8:97:14:05:28:5c:3a:20:
12:dc:8d:60:0a:a3:78:e8:77:f7:54:40:42:65:97:6b:08:19:
b7:76:a2:f8:d6:a5:75:a1:5b:78:f1:31:fa:e8:0b:4f:6e:66:
0f:49:de:62:f5:45:11:b4:07:4f:25:86:58:cb:b9:b0:df:12:
6a:f1:54:44:ca:98:63:5d:53:da:83:eb:f4:c9:c1:4f:13:13:
17:14:74:cd:f1:7a:ef:43:45:a3:83:db:ac:05:6f:d6:15:99:
88:52:c8:94:74:5f:71:4c:d5:c4:d4:59:66:76:0e:89:ef:91:
ba:95:11:10:05:e2:0a:e1:bb:22:69:94:58:c3:ea:ad:8a:65:
34:96:9a:65:a2:5e:ca:52:4e:eb:0b:6d:9d:f5:ac:7c:38:e1:
80:7b:e6:3e:93:e8:81:42:2e:6d:ce:af:6c:e3:c9:86:cb:39:
b0:b9:34:26:1c:48:13:13:d5:ec:05:73:34:30:b1:1f:59:11:
0b:bf:9d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:55 2026 by rpki-client