Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
File: DgXmzqSzk0XOKQLJeh26vLRtKjs.mft (raw, json)
Hash identifier: IDFSghEqWg1ebmP79cr2RgQkB3+UXEbPuaaJ36bTt4E=
Subject key identifier: 4F:9C:AA:5A:D2:C4:2B:71:14:97:AF:51:8D:31:07:F1:69:52:8B:86
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Certificate issuer: /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial: 019FA9752289D1D2288CE82D8DDF884232E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
Manifest number: 1964
Signing time: Tue 28 Jul 2026 16:00:53 +0000
Manifest this update: Tue 28 Jul 2026 16:00:53 +0000
Manifest next update: Wed 29 Jul 2026 16:00:53 +0000
Files and hashes: 1: DgXmzqSzk0XOKQLJeh26vLRtKjs.crl (hash: aWMaJhfdXCAcoZCXQMFGUkepR4elCh71F42xkb/zv/0=)
2: euykxJ3WjspN-qBMxs7ZONHmb7U.roa (hash: TMaFLPTY6eGm7WPriyY/nMPS56Sk9q9sf1AwuMKPgDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:22:89:d1:d2:28:8c:e8:2d:8d:df:88:42:32:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Validity
Not Before: Jul 28 16:00:53 2026 GMT
Not After : Jul 29 16:00:53 2026 GMT
Subject: CN=4f9caa5ad2c42b711497af518d3107f169528b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:31:4f:d1:08:fe:a1:e3:36:a6:c2:18:fa:4f:
c9:d1:fd:0d:1a:1f:fc:a9:d9:16:2e:48:ef:fd:26:
dc:7e:60:37:28:52:2c:98:56:f9:46:bd:86:79:ad:
d1:40:bc:84:7a:7f:11:c5:3c:16:b0:ee:28:1a:be:
be:07:f0:8b:c0:ca:1b:df:21:4f:dc:3a:80:9e:b0:
59:92:42:0b:6a:45:f8:f2:80:3c:8b:4c:10:d7:b2:
91:34:b5:be:dc:3e:76:73:9b:19:37:1b:bb:0e:3f:
6d:7d:f4:37:01:50:1c:29:5a:d4:4e:1b:af:e2:fe:
85:86:a3:88:1f:63:6e:ea:55:27:30:e6:d2:33:d8:
5a:1e:5d:ff:b4:aa:fb:09:e8:dc:f6:94:c2:f0:2a:
36:58:34:59:5e:07:96:b5:dd:17:ec:04:ab:c7:a9:
11:77:48:f2:40:51:cb:73:c4:ef:5c:ac:f1:e8:d0:
99:c6:ff:71:05:a8:cb:f5:09:f3:2c:93:4c:9e:ed:
4c:6a:e7:9c:8e:13:b4:ac:95:58:fd:6e:76:57:b0:
9a:53:94:5b:fa:00:73:d1:91:60:49:5c:9b:d6:21:
35:52:29:e9:04:50:f5:50:fc:25:40:fb:6e:41:87:
bd:4d:f4:fa:1b:51:85:18:79:3d:e7:7c:fe:bb:70:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9C:AA:5A:D2:C4:2B:71:14:97:AF:51:8D:31:07:F1:69:52:8B:86
X509v3 Authority Key Identifier:
keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ec:b8:c3:2c:5c:b0:3b:1f:5b:34:1c:d2:1e:63:d8:1b:c1:
41:7d:14:aa:5b:ee:8e:5d:b5:dd:6c:bd:22:6e:cc:5d:23:80:
08:51:63:c6:e7:9a:6e:24:73:b5:f4:1e:9f:a2:10:99:d1:10:
79:d2:fe:c2:1b:fa:e8:a1:ad:98:18:7b:ec:60:cd:23:41:61:
28:e9:fe:34:73:df:90:a0:68:52:c0:9d:4b:99:87:17:e8:fc:
6a:92:0b:9b:ca:47:88:a5:35:1d:5b:36:92:e1:11:93:8b:5a:
fe:56:ce:4e:8c:6c:ae:99:c4:6a:d7:ac:92:c1:90:58:47:d3:
c6:17:bf:84:75:a6:04:20:46:11:ea:a3:4b:4c:c2:d4:41:35:
5a:79:b7:20:ba:15:f4:98:46:01:e4:c3:4a:84:fe:5f:99:68:
1d:ec:47:3c:79:48:cb:27:de:8e:d3:56:cc:f0:a9:8a:19:11:
46:ca:e5:87:c7:12:b8:bc:30:14:98:81:cb:33:49:f1:fc:83:
80:02:06:bc:13:61:8b:04:4c:e9:e8:60:71:46:08:1f:2b:59:
b0:f5:4a:0e:46:14:c3:04:2a:44:ee:9b:5c:6c:0c:da:4d:ac:
f9:60:46:e5:57:ae:4a:e0:1f:e7:07:42:79:ed:5e:15:1f:00:
4f:5c:4d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:14:06 2026 by rpki-client