Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
File: DgXmzqSzk0XOKQLJeh26vLRtKjs.mft (raw, json)
Hash identifier: 1blo6LDuwX9mRQ6q1D4FehKgajvE9Ve31hfz/WfPC2k=
Subject key identifier: C8:EC:EF:1C:88:60:10:F8:9D:7B:2E:E3:F4:2B:6C:C7:A9:08:76:22
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Certificate issuer: /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial: 019CAAC69B30975F61DF91434BC020E63674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
Manifest number: 17D7
Signing time: Sun 01 Mar 2026 19:01:08 +0000
Manifest this update: Sun 01 Mar 2026 19:01:08 +0000
Manifest next update: Mon 02 Mar 2026 19:01:08 +0000
Files and hashes: 1: DgXmzqSzk0XOKQLJeh26vLRtKjs.crl (hash: S9h02HB0YpgIah3inXxBdNOJ2fmadaeyxWEEn0rXTL4=)
2: euykxJ3WjspN-qBMxs7ZONHmb7U.roa (hash: TMaFLPTY6eGm7WPriyY/nMPS56Sk9q9sf1AwuMKPgDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:9b:30:97:5f:61:df:91:43:4b:c0:20:e6:36:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Validity
Not Before: Mar 1 19:01:08 2026 GMT
Not After : Mar 2 19:01:08 2026 GMT
Subject: CN=c8ecef1c886010f89d7b2ee3f42b6cc7a9087622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:0d:90:83:7e:8b:ef:51:d6:72:5c:48:42:
cd:b2:7c:eb:a7:eb:b3:3d:6b:b0:17:d4:3a:ae:9c:
f1:9e:1b:60:4a:ca:10:f6:b3:ce:95:68:dd:c0:c7:
99:1d:94:90:f1:b5:bb:45:67:f5:e6:66:fd:81:49:
2b:ef:9f:fb:b9:47:4d:b4:ed:fa:50:dc:93:e8:68:
4d:0a:d2:2b:a2:86:17:2e:3c:7e:50:88:19:3e:26:
f0:af:07:38:5c:cf:0f:00:76:8e:41:38:a3:4b:99:
a5:a1:8d:0b:92:77:b3:cc:8b:01:68:62:e9:07:1f:
4b:51:42:30:12:9f:02:78:83:60:43:5c:7c:c8:30:
69:ae:9f:0d:11:9f:25:d3:78:6a:50:08:72:83:a6:
47:07:b0:65:90:f5:fc:f2:1c:94:16:66:21:54:45:
ef:d8:f4:5c:35:5a:c7:ea:fd:70:90:4f:68:51:e6:
c6:e1:8a:a9:94:98:e0:3a:89:5d:5a:d9:d3:03:18:
f3:3e:8b:4e:f9:ac:51:52:4e:8c:fe:2e:2b:75:26:
31:8c:c3:17:41:52:1e:d2:90:62:fd:39:d6:ba:d9:
95:df:05:24:81:0d:f8:5c:b2:99:e5:1e:a9:6c:6d:
94:ae:36:87:44:6d:7b:86:52:10:74:3a:f9:b0:e8:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EC:EF:1C:88:60:10:F8:9D:7B:2E:E3:F4:2B:6C:C7:A9:08:76:22
X509v3 Authority Key Identifier:
keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:70:f1:45:26:7f:74:54:38:4f:f3:8b:b9:fd:aa:d8:af:72:
7c:a2:22:75:67:4c:c1:ad:5e:b2:83:ff:19:f3:ce:76:61:45:
f8:f7:d5:bd:c4:95:fe:7d:91:75:12:95:b8:e8:28:c8:06:e3:
bb:e6:86:bf:bf:9a:05:18:bd:e9:46:c9:db:c2:30:33:68:38:
f0:5e:37:f5:03:a6:ce:c8:db:58:11:24:e0:73:c2:3b:52:bb:
9a:58:13:7f:27:a9:be:7f:44:75:1a:a8:a1:4c:f3:93:1e:84:
e6:96:6c:75:24:ad:7f:5b:fa:79:db:3b:fb:a0:ab:cc:b3:a5:
f1:74:f6:e8:d3:3f:8e:9d:cb:21:7b:73:51:34:e3:f2:44:e7:
26:cc:1c:76:14:36:71:33:a4:1b:f9:1f:20:dc:6e:94:7f:65:
e0:c3:ef:2c:e5:35:dd:da:1d:0e:b9:d3:1e:15:a5:65:99:bb:
10:8e:0b:11:e9:b0:b0:4a:5f:fb:68:28:fe:54:f3:8d:6b:1f:
83:e2:65:a3:0f:4d:bb:a0:96:6c:1f:0b:ee:c1:73:e0:2c:53:
e9:7d:a1:e8:ff:19:c0:28:19:06:21:47:a0:16:21:c7:ab:de:
bd:9f:cf:84:83:a3:a7:74:c3:34:3a:0a:91:d0:77:49:f9:27:
66:10:bb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:15 2026 by rpki-client