Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
File: Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft (raw, json)
Hash identifier: t5r6gKDhYUcTaJWEgT6SUhNl9fcCG+MvqWyEcdpqAiM=
Subject key identifier: F5:1D:9D:C7:BF:EC:BD:67:5B:D9:F8:9B:C7:52:8E:65:5B:9B:63:3E
Authority key identifier: 0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
Certificate issuer: /CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Certificate serial: 019CA9460A8D7FDC1C932929CD323040D18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
Manifest number: 32
Signing time: Sun 01 Mar 2026 12:01:05 +0000
Manifest this update: Sun 01 Mar 2026 12:01:05 +0000
Manifest next update: Mon 02 Mar 2026 12:01:05 +0000
Files and hashes: 1: 1-ZA3tjZXtTnljb1_LyYKoCeyOLg.asa (hash: 1+ooJiGuRehijv0BAu/DjLMQWAM8WG1GvP8acPYp+Sk=)
2: Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl (hash: V9TsSF9E1rBH8Zm57D1ZP1R0+Y/LEZZCX+tvhmJozjE=)
3: dO3RNAISfOv0O9_8IUROa2pKet4.roa (hash: C48BcGhKAuvtDpW8RyICY4ut3E1OUd47JnUb0vzluWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:0a:8d:7f:dc:1c:93:29:29:cd:32:30:40:d1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Validity
Not Before: Mar 1 12:01:05 2026 GMT
Not After : Mar 2 12:01:05 2026 GMT
Subject: CN=f51d9dc7bfecbd675bd9f89bc7528e655b9b633e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:08:34:6e:21:3c:c2:6c:a5:1e:9c:92:fe:
93:fc:a7:8f:c7:af:42:b3:7b:ec:44:b4:7a:66:b2:
66:4b:d3:af:42:45:a3:df:09:89:75:cb:5e:35:16:
3a:8e:31:f9:57:0f:2f:5d:c9:d4:a8:4d:50:32:c4:
83:b1:21:e2:fd:ff:7e:72:00:e2:c2:04:8c:fa:9a:
c8:e6:cd:33:7b:50:e6:19:e5:41:0f:8e:5c:21:c5:
94:7c:5d:c5:8c:cb:4e:5a:40:c2:0e:d0:fe:f4:06:
e8:ed:65:25:b5:73:87:89:c9:66:90:3f:b6:be:7c:
7e:b5:be:14:9d:2e:4e:48:26:6d:3d:ee:84:2f:62:
d9:ec:f3:d7:05:ed:d2:67:6d:91:a1:61:42:c2:54:
3c:74:1a:05:a4:68:aa:3d:61:bc:8b:f0:84:2a:6a:
44:89:3c:b9:db:0c:44:a9:c3:e7:de:b6:19:9c:f1:
34:a4:0e:42:5f:08:d4:1d:79:5a:5e:3c:bf:bc:1e:
9d:11:eb:4f:6b:48:0a:0b:89:70:1a:5b:63:f6:c1:
cb:c0:4a:a2:e3:57:09:ce:c8:b0:31:b3:c5:51:65:
37:bd:e6:96:f1:0b:5d:a0:24:44:4c:7c:b2:69:5d:
ff:33:1f:a7:06:cd:72:41:fb:4b:1e:1d:2b:ba:6f:
7b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1D:9D:C7:BF:EC:BD:67:5B:D9:F8:9B:C7:52:8E:65:5B:9B:63:3E
X509v3 Authority Key Identifier:
keyid:0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:12:e6:c3:ca:a4:2c:9b:11:72:ba:6d:45:e0:4d:08:1e:29:
0b:5d:78:b6:76:49:9b:d5:22:20:cf:c4:d6:93:ff:0e:fc:dc:
eb:f0:3e:f4:83:69:53:52:3a:99:e4:e0:e5:bd:e2:fc:69:31:
5a:2e:f6:58:d2:f8:8a:12:90:2d:c1:22:c4:23:ce:9f:ad:60:
da:9b:e0:83:4f:14:41:91:02:b9:09:37:76:d6:bc:a3:b0:8f:
68:80:59:3e:00:6a:e4:d8:a5:cc:cb:1b:9e:c3:ad:d9:f6:36:
09:45:ba:b5:e8:a1:15:89:3f:3d:16:83:84:1b:a4:75:a1:3e:
a3:80:52:e3:f8:32:bd:be:ca:a4:1f:0b:f8:16:26:0e:de:6e:
34:71:82:2a:31:ed:10:9e:2d:93:88:96:19:ec:8f:47:ee:fa:
00:bf:b0:fc:f6:bd:58:56:9c:b1:b5:3e:32:0d:d9:1c:bd:74:
e3:60:7c:90:8f:07:e8:a4:38:72:ac:79:66:a1:6e:6b:5d:b3:
3b:69:6a:10:a1:82:35:76:df:31:67:88:ce:bc:2f:8c:52:65:
b2:0d:ad:33:72:fd:8b:8d:b0:ad:e5:8a:7d:7f:2a:4a:63:95:
7e:2f:f3:30:a6:db:d9:a2:55:67:65:60:38:a6:49:d3:0f:d9:
55:0a:83:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:22 2026 by rpki-client