Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: PRYM6SnxIgp8F6VEp1GYfYRFY6Fo2vkPXl1hcC+KMLs=
Subject key identifier: 4B:AE:CF:5F:85:24:56:2D:6A:FA:FE:3B:82:90:72:25:91:F2:18:FF
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 019D9B1A061F5B9F187161717F8112E59C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 133D
Signing time: Fri 17 Apr 2026 11:01:07 +0000
Manifest this update: Fri 17 Apr 2026 11:01:07 +0000
Manifest next update: Sat 18 Apr 2026 11:01:07 +0000
Files and hashes: 1: 9z2R7mR7CTqEMhJ2KlrHCYJ3vjc.roa (hash: FvuJb6Wc0/pGsiV3BQi7hOtAMeCwlp8+eAq8AekfMKM=)
2: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: quo5cO/MThoSaUXj8icx2EEUeieFa8k0l+BPzoCy9sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:06:1f:5b:9f:18:71:61:71:7f:81:12:e5:9c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Apr 17 11:01:07 2026 GMT
Not After : Apr 18 11:01:07 2026 GMT
Subject: CN=4baecf5f8524562d6afafe3b8290722591f218ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:d8:f0:89:93:f5:7f:fe:80:3d:a9:03:94:
b9:db:3f:a5:09:ba:a8:23:6c:d4:88:2a:d1:a5:23:
37:04:e7:6d:c5:95:ad:b7:27:f6:1b:3a:48:89:70:
1d:21:a2:09:04:44:b5:2b:4f:40:3e:70:f2:cf:89:
f8:65:d2:04:e7:eb:5f:88:38:7b:6a:1d:a7:d7:55:
cc:0c:83:3f:0d:24:69:14:8c:e2:74:62:2b:62:66:
30:2f:26:1c:5c:3b:4a:b2:11:ae:14:b2:90:48:ab:
81:ac:cc:8d:3c:42:7c:0a:c6:e5:73:e8:74:d7:c4:
06:98:ce:1b:b2:ed:78:51:8d:c4:26:19:98:0a:5a:
e0:2f:11:b4:86:27:32:83:0a:a8:c6:55:6a:0a:08:
69:ee:04:a4:aa:fa:af:11:6d:be:d1:aa:a1:3d:37:
fe:89:15:eb:bc:e0:66:53:0c:fa:3a:f4:4c:70:da:
70:de:57:67:06:0a:a5:10:ec:dd:51:64:97:97:10:
73:14:9b:1b:86:90:fa:6e:c2:e8:c9:44:49:06:dd:
ff:d2:99:30:8e:a6:b7:5d:55:2c:a1:cf:10:21:1d:
2d:2a:6d:79:70:f9:05:be:bf:3b:54:d2:42:29:dc:
7b:61:1f:a8:b9:c5:31:ce:75:08:11:1d:ec:a1:56:
b1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AE:CF:5F:85:24:56:2D:6A:FA:FE:3B:82:90:72:25:91:F2:18:FF
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:fb:1b:91:12:39:5b:c8:fe:a9:9e:02:9c:31:d3:84:77:a6:
ab:f8:2e:d1:91:4e:ba:2b:80:eb:88:8f:fc:a3:c5:dd:6d:6a:
70:ac:b4:97:54:d5:7b:5e:3f:55:ae:e1:3f:65:6d:16:bc:27:
9b:41:81:a7:16:f5:4c:44:d1:f4:6d:bf:51:63:51:32:1b:f8:
a3:ca:68:aa:8d:0c:d0:49:2d:ed:64:77:68:76:7a:82:70:32:
59:45:b6:ce:ab:6c:98:74:0d:b7:48:6f:87:67:bc:8b:8b:f4:
2b:71:58:25:82:19:72:27:0c:da:58:fb:c2:8b:09:bc:3e:9e:
2d:58:a0:19:4c:05:06:fd:36:6b:80:18:97:cd:df:df:cc:e2:
f7:b9:0a:b9:87:02:9b:f9:ec:c2:a8:23:ed:d2:aa:8e:da:15:
a9:0c:5e:89:fc:c9:91:0c:ae:46:04:10:9e:ad:12:18:2e:4b:
c7:f6:20:f5:c4:28:ca:e0:de:35:b2:89:1c:76:39:f6:76:7e:
7b:e3:fb:2e:a4:71:e3:45:ff:34:68:7c:e6:97:b2:05:b5:77:
22:24:16:46:db:83:bf:a7:0e:dd:92:dd:f4:b0:87:01:ab:44:
31:ea:97:d1:73:9e:48:a0:8d:29:90:29:78:e6:f4:16:8e:64:
a8:cb:e6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:51 2026 by rpki-client