Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: IoFA4kXVf2Vnknf4DJ1EG4ynM8H1Iz4jV5EfjKs9QRw=
Subject key identifier: D5:E2:0D:AD:BC:7F:47:96:8F:E0:52:5E:88:F5:30:A1:52:D0:B0:4F
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 019CABA22288270E339526338B2636C5DB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 23:00:55 +0000
Manifest this update: Sun 01 Mar 2026 23:00:55 +0000
Manifest next update: Mon 02 Mar 2026 23:00:55 +0000
Files and hashes: 1: 8TaBsBYidW6NwN4w-r-_-frpmPw.roa (hash: d3cj9imIBJIrG7w+OMuxucJCXGk/PoAG60c7YkaGWUU=)
2: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: W8Zey4ZZNCrhx5gAZi+Jz2e2XsVVAyLawTokfe9OZj4=)
3: cfuyV7WY5uCzefphkg9dkFiDF4o.roa (hash: 56j+8wClcw9KajdQHM4PT6tZ5VXaRrrlOf4m/1pMO8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:22:88:27:0e:33:95:26:33:8b:26:36:c5:db:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Mar 1 23:00:55 2026 GMT
Not After : Mar 2 23:00:55 2026 GMT
Subject: CN=d5e20dadbc7f47968fe0525e88f530a152d0b04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e5:77:0f:7b:2e:c6:8a:d3:0d:a5:3a:f4:ee:
81:51:82:9c:55:a1:83:ac:00:b8:6a:7a:9e:33:ac:
8e:63:4f:f8:4c:7e:e5:fa:7c:da:ec:c4:53:d7:a3:
1d:d8:2f:b6:fd:75:71:3e:4c:54:dd:7b:89:46:1e:
f0:ff:a9:51:45:45:ce:44:70:bc:a2:ec:e6:39:4f:
4d:8e:a6:b1:70:4c:38:7f:d6:de:ef:48:33:29:53:
77:60:75:da:19:9e:cc:d5:0b:68:bf:4a:7b:51:73:
dd:4c:8d:a5:29:8c:57:6e:f7:1b:51:b0:0e:66:8c:
c6:b2:93:e3:75:5c:72:50:fb:3d:3e:16:c7:a9:49:
87:da:5d:ed:db:fa:8f:ba:c6:d1:49:31:fa:e1:55:
f2:79:10:d9:aa:85:c3:0d:73:cd:87:0d:42:b5:78:
33:89:91:e2:c2:11:43:88:a9:36:45:d5:59:cb:46:
8e:a7:e2:a2:c1:5b:d7:8f:48:50:34:b8:a8:17:c9:
77:05:92:24:dc:4e:60:1f:94:fd:37:2d:06:6e:ed:
b8:bb:ae:0c:78:56:c0:61:a7:3a:8c:41:e1:4d:e1:
c7:c9:5e:c5:56:06:a8:fa:0d:ad:3d:e5:11:fc:b2:
68:bf:c5:8e:ee:75:d1:22:48:25:f9:33:7c:03:26:
73:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E2:0D:AD:BC:7F:47:96:8F:E0:52:5E:88:F5:30:A1:52:D0:B0:4F
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:65:7f:33:28:53:cb:d8:32:7a:b4:54:b8:4a:1c:23:ac:63:
c2:ac:d1:49:30:10:c9:63:e9:19:54:12:d9:f1:82:90:bd:41:
ed:e4:d1:7f:97:a4:ba:4e:19:a5:fa:f5:0e:c2:9e:f6:f3:ce:
6c:1d:a2:dd:df:3e:d7:4f:33:41:11:c4:2d:05:48:9d:fb:91:
5c:aa:db:56:16:37:1b:60:0b:7a:23:1d:ad:b0:33:65:c2:cb:
80:58:cd:a6:1c:24:be:10:c8:e0:8e:a0:9d:a5:21:af:82:c4:
8f:7d:34:68:80:70:53:70:0a:f5:60:bf:fa:26:da:c2:f4:10:
e1:5a:0b:85:ac:d5:ca:b7:b4:6f:d4:0b:6b:98:45:8c:23:74:
22:27:39:3d:a1:5f:b9:ad:a4:33:c3:8d:76:1b:b2:a1:7c:c1:
2f:93:49:9f:3a:f8:5b:49:fe:67:f8:c8:79:7b:8e:23:60:1c:
2e:a5:53:33:07:bb:27:c2:35:c4:80:54:20:33:0f:c0:74:8c:
7e:fd:d1:9a:fa:c4:6f:d5:e0:af:20:c8:c3:0e:77:67:07:15:
5b:17:cf:0f:8d:b8:07:7c:86:4c:13:73:1f:45:84:72:ae:2d:
f2:6f:e6:d4:86:e2:15:b0:c5:0e:9b:01:47:54:3f:4e:0e:21:
26:4e:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:56 2026 by rpki-client