Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: fgMP1jMaNWOKVcs9JURxpb+jrHbuQNZ2Ni5wpKPmt0k=
Subject key identifier: E2:37:13:95:F9:6F:5E:1E:F2:08:4C:1E:53:70:CF:A2:73:50:10:47
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 019CA9B3BC3CC88727ADC7B7D17E0E9AE191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 12C0
Signing time: Sun 01 Mar 2026 14:00:54 +0000
Manifest this update: Sun 01 Mar 2026 14:00:54 +0000
Manifest next update: Mon 02 Mar 2026 14:00:54 +0000
Files and hashes: 1: 9z2R7mR7CTqEMhJ2KlrHCYJ3vjc.roa (hash: FvuJb6Wc0/pGsiV3BQi7hOtAMeCwlp8+eAq8AekfMKM=)
2: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: 1cbrteWZg2/QVE2x0qeAIxsHDpze5RDt8NHrcC2PxLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:bc:3c:c8:87:27:ad:c7:b7:d1:7e:0e:9a:e1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Mar 1 14:00:54 2026 GMT
Not After : Mar 2 14:00:54 2026 GMT
Subject: CN=e2371395f96f5e1ef2084c1e5370cfa273501047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:35:52:91:6d:b0:d4:7b:eb:d0:68:b6:fa:
50:b6:74:02:27:4b:f7:6b:9f:f4:f5:a5:9c:45:4c:
22:5d:98:5f:c8:2a:c8:42:e2:b3:90:ae:b0:68:f9:
cf:93:aa:b5:2e:df:a4:ad:30:f2:be:27:73:de:dd:
32:70:b9:34:75:e2:8e:d0:f1:d3:55:69:fd:d0:0a:
03:76:fd:84:b0:14:71:1d:8b:31:56:24:81:eb:7e:
4e:0c:81:7a:1d:34:38:8a:8a:34:6d:69:32:a3:d3:
79:83:8c:cd:f4:8e:46:8d:8a:7f:17:9b:00:3f:52:
cf:8a:b6:0e:b3:9f:7e:45:47:79:64:c4:5b:c7:ea:
96:f8:5f:8a:60:55:12:4e:79:3e:e1:20:a3:59:26:
e7:1c:3e:28:e1:c5:ca:bb:5c:a8:1c:e5:8c:f1:7e:
21:c7:0a:33:5b:86:e9:c6:5f:bd:1c:65:3a:82:68:
55:31:76:64:62:56:d3:c0:c3:87:84:89:ac:83:64:
8b:13:76:50:ff:6b:60:ca:0d:e2:74:ee:ed:0e:14:
19:8e:c7:46:b6:be:8d:ec:77:bf:47:ff:f1:77:19:
10:d6:10:e2:f1:38:ae:ca:09:56:84:d5:9b:5a:20:
75:f8:41:41:8e:05:3c:20:5e:31:e0:5e:38:0b:e5:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:37:13:95:F9:6F:5E:1E:F2:08:4C:1E:53:70:CF:A2:73:50:10:47
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a7:d4:15:37:74:fe:c7:bb:7b:2a:45:57:1f:2a:00:c4:d2:
a0:ae:da:73:c3:70:a1:24:6d:18:08:9f:db:0d:52:6e:91:20:
f7:9c:b8:e2:9d:19:89:8a:c1:97:11:55:11:f0:8a:b3:05:46:
25:36:8a:bd:3e:f3:d4:b2:4d:6c:15:ca:89:93:76:9d:7b:2e:
44:3a:6f:36:9b:b9:7d:05:94:63:4f:61:ee:e3:00:d8:d6:7c:
0d:6e:3b:a4:05:8b:82:a8:07:0c:cf:46:78:0b:77:13:fa:9e:
6a:06:09:f4:67:c6:6a:d9:b9:e8:47:01:bb:5b:34:84:1d:63:
d8:32:06:d5:fb:fe:74:53:c8:0e:f3:df:8c:a2:d7:6b:ed:d7:
27:d8:43:57:7e:9b:c5:cc:6c:1a:d2:86:9e:26:de:0a:2e:0a:
0d:2e:f2:4d:b3:1b:6a:9b:6d:27:92:e7:6f:88:7d:30:37:8f:
71:1e:0c:f8:d4:2a:35:77:10:f8:4a:bc:d3:c5:69:d8:03:b9:
53:21:44:1b:55:68:86:0d:50:9a:51:00:ca:d9:ad:35:9a:c7:
42:b6:dc:cf:95:00:49:39:5f:35:6d:9c:cc:46:76:ef:2f:64:
75:49:f2:a6:13:75:32:4b:5b:f1:74:81:27:dd:ca:16:94:93:
19:f0:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:20 2026 by rpki-client