Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
File: Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft (raw, json)
Hash identifier: R5DQVtRUR3c7WSlIZoAPlWRdVJI117sernQAOEKx6g8=
Subject key identifier: A4:8C:4B:58:79:86:B0:A4:26:4C:4A:E2:FA:DF:D3:9E:9A:80:EB:06
Authority key identifier: 0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
Certificate issuer: /CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Certificate serial: 01A0C3A0395157FF831F3B564925431DE306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
Manifest number: 0252
Signing time: Mon 21 Sep 2026 11:00:52 +0000
Manifest this update: Mon 21 Sep 2026 11:00:52 +0000
Manifest next update: Tue 22 Sep 2026 11:00:52 +0000
Files and hashes: 1: 1-ZA3tjZXtTnljb1_LyYKoCeyOLg.asa (hash: 1+ooJiGuRehijv0BAu/DjLMQWAM8WG1GvP8acPYp+Sk=)
2: Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl (hash: Qf4iwHuwttzIL4ZPwqyMAv3QJw7ob0M1CE2zIddiw0Q=)
3: dO3RNAISfOv0O9_8IUROa2pKet4.roa (hash: C48BcGhKAuvtDpW8RyICY4ut3E1OUd47JnUb0vzluWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:39:51:57:ff:83:1f:3b:56:49:25:43:1d:e3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Validity
Not Before: Sep 21 11:00:52 2026 GMT
Not After : Sep 22 11:00:52 2026 GMT
Subject: CN=a48c4b587986b0a4264c4ae2fadfd39e9a80eb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:f1:f0:29:37:37:e1:94:1a:92:e7:80:5b:
ef:2d:d3:d0:33:4e:12:6e:fa:b9:8d:49:30:8a:25:
9e:8e:ba:82:58:34:55:8f:ca:cd:9d:3b:51:cf:31:
3c:e5:6f:27:58:66:da:5c:b2:07:25:35:6a:f6:eb:
82:94:3d:82:17:53:fb:b0:cf:a9:aa:eb:6a:50:5b:
b3:f3:e2:16:a6:ef:89:d7:fd:76:d7:21:2b:5e:96:
c8:d3:d7:2c:62:2f:d4:df:65:fb:ae:87:b2:f1:67:
79:e7:ce:dc:2a:c7:51:74:39:57:4a:ca:d8:27:60:
ed:76:bd:87:f6:5a:c6:bf:97:01:6c:36:92:90:dc:
76:45:97:44:5c:fd:88:7c:39:8b:09:0d:57:37:5b:
22:db:a3:5e:77:8d:c0:14:9c:68:cf:90:6e:6c:21:
14:cc:f7:8f:29:39:b8:ed:f2:3d:dc:35:94:32:89:
df:db:10:05:c1:d0:7d:19:29:15:85:80:87:45:f9:
6d:d0:92:a1:1b:b7:75:d4:de:ef:09:e8:01:10:f3:
e2:27:60:7a:8b:84:7e:84:0c:ad:bf:56:20:10:55:
e5:14:32:5c:2d:b7:d0:73:1e:e6:c9:ca:fe:0d:15:
8e:ea:9a:f4:1d:5f:ff:56:19:54:9f:8c:7f:52:ec:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8C:4B:58:79:86:B0:A4:26:4C:4A:E2:FA:DF:D3:9E:9A:80:EB:06
X509v3 Authority Key Identifier:
keyid:0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b9:4f:fa:33:cc:b5:d5:c3:bf:52:8a:ec:b7:09:7d:4a:37:
37:e7:08:24:b3:97:dd:ae:ad:a5:6c:f8:15:6c:88:89:6b:e1:
a8:e7:3c:e7:a4:5d:e7:ce:67:53:9b:08:e5:df:43:3e:56:10:
4d:3b:c9:23:d9:0e:a1:cb:d0:a3:37:56:00:1c:96:b5:4a:e3:
35:05:de:98:f4:16:c7:41:e9:8e:3b:6c:c7:c5:3c:8f:2b:60:
4a:5d:16:df:df:05:52:d9:02:2a:53:3c:1d:ea:7d:25:8a:16:
6a:32:9e:8d:80:32:5c:69:3d:c5:7d:1e:a0:84:e2:df:a0:0b:
bc:62:25:4f:b5:3b:55:c2:12:94:3e:19:7a:f2:9d:62:4b:46:
f2:00:b7:eb:3c:c3:98:47:d8:25:e2:a6:4e:5d:19:a8:85:40:
e1:4b:41:06:ab:1f:d8:f4:fd:f1:ee:97:e5:8d:c3:33:74:6c:
1e:de:64:01:ab:f7:1d:e2:d0:c7:5e:64:3e:36:b6:d2:c6:1b:
b5:d3:d3:52:28:1c:0d:f8:0c:64:74:84:91:58:6d:03:84:b8:
e7:4e:cd:42:f8:4e:93:74:5a:e7:77:ec:86:32:96:78:c3:28:
4e:e0:cf:85:06:d4:10:c0:70:3a:d3:7a:be:c0:92:53:03:d8:
6a:0c:a1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:02:24 2026 by rpki-client