Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
File: DgXmzqSzk0XOKQLJeh26vLRtKjs.mft (raw, json)
Hash identifier: 9cGMjSOMa9497W2XYh1C7w5Zwc0vD9EQAf1PU9k40Dw=
Subject key identifier: 92:84:B2:24:EA:A0:09:F0:53:DB:5B:DE:95:67:00:B1:91:43:85:76
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Certificate issuer: /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial: 01A0C17B1097E25CF2866E78C599AB58EE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
Manifest number: 19F5
Signing time: Mon 21 Sep 2026 01:01:02 +0000
Manifest this update: Mon 21 Sep 2026 01:01:02 +0000
Manifest next update: Tue 22 Sep 2026 01:01:02 +0000
Files and hashes: 1: DgXmzqSzk0XOKQLJeh26vLRtKjs.crl (hash: jeBHu6mHZQrhuS9cgwyW5k/sACuPyqubDVfgCnkcsFc=)
2: euykxJ3WjspN-qBMxs7ZONHmb7U.roa (hash: TMaFLPTY6eGm7WPriyY/nMPS56Sk9q9sf1AwuMKPgDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7b:10:97:e2:5c:f2:86:6e:78:c5:99:ab:58:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Validity
Not Before: Sep 21 01:01:02 2026 GMT
Not After : Sep 22 01:01:02 2026 GMT
Subject: CN=9284b224eaa009f053db5bde956700b191438576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:3e:9a:c7:f7:c0:fe:92:ed:81:4e:aa:8f:
e2:61:01:10:27:52:79:b1:02:14:8e:0f:fd:8b:49:
22:ec:65:cf:21:2d:d3:0d:64:f7:c8:de:a8:b1:b8:
f2:be:79:a4:e2:20:b0:54:1c:e0:11:b4:22:a7:76:
32:4d:86:bb:5f:64:5b:68:1e:04:8f:44:2a:d8:af:
ec:c4:e2:76:5c:59:ad:30:9d:4b:68:d6:e5:f3:ba:
2e:e9:8c:17:f6:e0:c0:bf:2d:df:b4:14:94:53:9d:
5f:a0:26:da:6c:c4:14:2c:84:de:3d:d2:2d:14:f1:
3b:3e:7e:29:ce:18:94:65:b0:94:27:d2:8b:d0:56:
24:e0:ef:7a:72:36:78:4c:e3:0c:25:b1:eb:d6:2f:
0f:e4:c3:d5:a3:dc:53:e1:a5:df:1c:a6:f2:28:2d:
5e:ec:a9:b4:74:09:f9:79:35:2f:23:27:60:0a:66:
de:39:21:c9:35:93:66:0e:09:5a:fe:4c:be:bf:7d:
e4:cf:4f:ab:bd:bf:4b:f4:fc:ae:d5:9e:c3:ce:9d:
7e:f5:2d:55:75:68:7c:aa:56:37:1c:8a:cb:36:b1:
70:22:d3:61:2e:e6:77:12:b2:e0:f5:a6:02:5b:ab:
2e:78:86:9a:b1:4b:0a:33:67:93:dc:10:53:3d:2c:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:84:B2:24:EA:A0:09:F0:53:DB:5B:DE:95:67:00:B1:91:43:85:76
X509v3 Authority Key Identifier:
keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5d:0b:99:32:70:02:52:91:23:48:61:8a:a7:77:98:76:33:
f5:31:62:fa:36:64:bc:9e:cc:f0:22:8e:75:ef:22:fc:1a:6f:
d2:cd:88:17:d7:11:05:46:ef:8e:75:a1:de:8d:aa:4b:0e:ed:
2a:3a:c7:68:23:a3:4e:be:f6:76:75:7f:a4:91:9b:74:b8:3d:
16:ef:e6:17:0b:f6:89:90:dc:ce:46:39:70:a9:0b:27:e4:2b:
f2:3b:9d:5c:e2:20:dc:fc:52:ba:09:e0:d6:b4:a6:1c:f6:5d:
c1:14:fe:f4:cb:df:c5:20:0e:5c:5f:78:e5:45:b1:23:89:46:
b5:0a:35:d5:63:20:6f:c5:46:a1:7e:d5:d2:60:de:d3:e6:7c:
e0:38:c6:a7:52:0b:f0:f2:59:55:df:89:35:a5:a5:29:f0:9f:
e7:70:7f:e6:2a:9c:2d:90:53:02:23:41:be:a4:42:b5:98:2b:
1d:d5:e0:11:0e:1a:55:2b:2c:6f:10:01:e1:67:1f:7b:7f:07:
f2:e8:56:ab:79:bb:c2:ad:ae:e5:a1:0a:80:6f:ab:b3:04:0e:
7d:1b:7a:d8:ff:8f:ff:d4:34:d8:08:b3:05:9d:f8:cb:1b:af:
7b:05:5e:cb:b9:4b:8b:35:64:d9:b9:f5:58:ae:06:27:b4:d2:
e3:41:72:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBexCX4lzyhm54xZmrWO4AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDVlNmNlYTRiMzkzNDVjZTI5MDJjOTdhMWRiYWJjYjQ2
ZDJhM2IwHhcNMjYwOTIxMDEwMTAyWhcNMjYwOTIyMDEwMTAyWjAzMTEwLwYDVQQD
Eyg5Mjg0YjIyNGVhYTAwOWYwNTNkYjViZGU5NTY3MDBiMTkxNDM4NTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHU+msf3wP6S7YFOqo/iYQEQJ1J5
sQIUjg/9i0ki7GXPIS3TDWT3yN6osbjyvnmk4iCwVBzgEbQip3YyTYa7X2RbaB4E
j0Qq2K/sxOJ2XFmtMJ1LaNbl87ou6YwX9uDAvy3ftBSUU51foCbabMQULITePdIt
FPE7Pn4pzhiUZbCUJ9KL0FYk4O96cjZ4TOMMJbHr1i8P5MPVo9xT4aXfHKbyKC1e
7Km0dAn5eTUvIydgCmbeOSHJNZNmDgla/ky+v33kz0+rvb9L9Pyu1Z7Dzp1+9S1V
dWh8qlY3HIrLNrFwItNhLuZ3ErLg9aYCW6sueIaasUsKM2eT3BBTPSwshQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKEsiTqoAnwU9tb3pVnALGRQ4V2MB8GA1UdIwQY
MBaAFA4F5s6ks5NFzikCyXodury0bSo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdYbXpxU3prMFhPS1FMSmVoMjZ2TFJ0S2pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8zNmQ3MGMtNThmMC00NWJiLWE4ZjEt
NzdlZWFiMjhiZTI2LzEvRGdYbXpxU3prMFhPS1FMSmVoMjZ2TFJ0S2pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8zNmQ3MGMtNThmMC00NWJiLWE4ZjEtNzdlZWFiMjhiZTI2
LzEvRGdYbXpxU3prMFhPS1FMSmVoMjZ2TFJ0S2pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIF0LmTJw
AlKRI0hhiqd3mHYz9TFi+jZkvJ7M8CKOde8i/Bpv0s2IF9cRBUbvjnWh3o2qSw7t
KjrHaCOjTr72dnV/pJGbdLg9Fu/mFwv2iZDczkY5cKkLJ+Qr8judXOIg3PxSugng
1rSmHPZdwRT+9MvfxSAOXF945UWxI4lGtQo11WMgb8VGoX7V0mDe0+Z84DjGp1IL
8PJZVd+JNaWlKfCf53B/5iqcLZBTAiNBvqRCtZgrHdXgEQ4aVSssbxAB4Wcfe38H
8uhWq3m7wq2u5aEKgG+rswQOfRt62P+P/9Q02AizBZ34yxuvewVey7lLizVk2bn1
WK4GJ7TS40Fy+w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:51:03 2026 by rpki-client