Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
File: Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft (raw, json)
Hash identifier: QKo5KLjApsE2Wx25Nw93Ayjsc67g1jjJxSAzRhNsUzM=
Subject key identifier: DF:E8:D8:60:4D:49:C5:04:7C:52:22:5F:29:23:E8:99:B6:65:1B:6E
Authority key identifier: 0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
Certificate issuer: /CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Certificate serial: 019D96CF24EFA40254EA5FF0F1975427D00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
Manifest number: AD
Signing time: Thu 16 Apr 2026 15:00:50 +0000
Manifest this update: Thu 16 Apr 2026 15:00:50 +0000
Manifest next update: Fri 17 Apr 2026 15:00:50 +0000
Files and hashes: 1: 1-ZA3tjZXtTnljb1_LyYKoCeyOLg.asa (hash: 1+ooJiGuRehijv0BAu/DjLMQWAM8WG1GvP8acPYp+Sk=)
2: Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl (hash: MDDMjH3Z1yeXyfbAZpiHypNEgMtryybowPjsBhHufTM=)
3: dO3RNAISfOv0O9_8IUROa2pKet4.roa (hash: C48BcGhKAuvtDpW8RyICY4ut3E1OUd47JnUb0vzluWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:cf:24:ef:a4:02:54:ea:5f:f0:f1:97:54:27:d0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Validity
Not Before: Apr 16 15:00:50 2026 GMT
Not After : Apr 17 15:00:50 2026 GMT
Subject: CN=dfe8d8604d49c5047c52225f2923e899b6651b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:c4:a3:2f:11:39:7e:d5:58:f0:e0:d2:da:
3b:3d:00:9e:e5:ce:8d:26:0e:2a:70:e2:8d:b4:8f:
75:94:09:aa:43:44:f4:18:ef:00:c5:f4:04:0f:b3:
0c:e4:a4:99:0c:52:82:f3:49:02:91:c5:28:e4:c7:
65:8d:b9:0c:95:46:51:c5:cb:b3:b4:84:5f:82:54:
38:f9:13:24:5d:42:03:3f:77:c8:aa:b8:d4:8d:61:
ce:46:25:13:f7:bb:a1:e9:48:ee:3d:7c:71:7b:79:
14:e0:19:2c:78:47:69:c1:74:18:68:03:57:a2:a1:
ef:27:64:a1:3c:6e:18:45:31:f2:6e:06:90:8b:62:
0d:6d:6c:ab:1e:74:be:a9:5d:b5:22:11:d5:79:4e:
f7:e0:4f:e9:5c:20:97:1f:6e:d7:a1:87:17:3c:7b:
8e:48:17:98:66:e1:36:30:5b:f5:7f:b5:4f:49:26:
02:30:29:f3:42:9b:e8:4b:c9:52:43:12:46:9e:68:
9d:69:3e:de:dc:d9:80:3d:ff:70:aa:dd:89:b7:3a:
04:02:a8:06:9c:e1:98:48:6c:41:0d:43:36:98:a7:
b4:12:36:cb:0b:41:0d:d7:51:1c:f5:f6:0b:ad:41:
05:39:97:85:5b:56:f2:a0:83:5d:c5:c2:4c:c2:f9:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E8:D8:60:4D:49:C5:04:7C:52:22:5F:29:23:E8:99:B6:65:1B:6E
X509v3 Authority Key Identifier:
keyid:0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:50:0e:ea:b6:4a:ca:a3:86:a2:60:4d:7c:db:00:4f:41:a2:
3b:57:ee:ce:1a:b1:29:7c:5d:88:22:91:91:bd:74:57:8f:22:
29:94:80:3c:7f:7f:84:e7:84:24:a5:c0:d6:79:7f:ae:48:fd:
7c:d1:da:7f:c7:eb:22:d6:59:8a:3f:10:94:47:8f:d8:9d:f7:
57:a8:14:d3:7d:48:79:8d:2a:69:8e:2f:50:fd:c0:60:20:f6:
37:61:f3:de:f6:89:a2:fc:79:1b:47:80:58:b1:9e:6a:2c:cb:
58:00:df:85:91:b6:f1:ab:8e:9e:1b:df:13:2e:ee:5d:98:2f:
93:2b:ef:63:83:ca:9b:aa:5c:5d:44:43:07:f3:3a:ee:0d:57:
40:cd:74:38:54:3b:ae:6e:28:e6:19:3f:00:17:95:8d:b5:68:
5e:ec:2f:e9:35:1e:b7:eb:55:20:f9:cf:7a:a0:13:d7:56:c1:
a5:62:e5:6f:d8:f9:af:0f:3d:55:7a:1f:1f:0f:88:36:92:ba:
22:84:89:68:9f:b3:2c:9c:36:75:1b:35:9a:93:d8:4f:3b:b3:
ec:0f:c6:8f:94:cb:3b:4b:1c:cc:af:1d:04:8a:3b:0d:04:57:
57:2a:a4:75:50:ea:9d:48:cf:1e:ca:32:3f:66:90:88:18:dd:
15:91:4f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:44 2026 by rpki-client