Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: pycy35aEsJG3RdQ4Jkyw2ChKSZ75uLlWOWwYwoJkrJw=
Subject key identifier: 5E:2F:7C:BE:D3:19:40:CA:53:5A:B6:DA:02:B8:22:9F:16:68:35:94
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 019EBEB615A480209DA4E891829C2EEDE550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 13D4
Signing time: Sat 13 Jun 2026 02:01:04 +0000
Manifest this update: Sat 13 Jun 2026 02:01:04 +0000
Manifest next update: Sun 14 Jun 2026 02:01:04 +0000
Files and hashes: 1: 9z2R7mR7CTqEMhJ2KlrHCYJ3vjc.roa (hash: FvuJb6Wc0/pGsiV3BQi7hOtAMeCwlp8+eAq8AekfMKM=)
2: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: flXEqEKurccrrVhCljLghoXJsLRpKo5DlkG127raqek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:15:a4:80:20:9d:a4:e8:91:82:9c:2e:ed:e5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Jun 13 02:01:04 2026 GMT
Not After : Jun 14 02:01:04 2026 GMT
Subject: CN=5e2f7cbed31940ca535ab6da02b8229f16683594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b1:be:77:3c:dc:e8:43:9b:f1:7c:e1:b9:70:
97:25:79:08:d5:a5:a4:79:51:94:ce:f4:97:cc:64:
c9:f1:f3:ea:93:1e:cf:c0:a7:47:8a:c9:2d:b9:fe:
6b:1d:a1:11:5c:6f:82:ad:bc:ff:e8:cc:b5:92:6c:
1d:66:cc:cf:91:cd:35:7c:09:9f:3c:79:f1:d1:f0:
de:07:6e:7d:47:ee:c7:d4:6a:1a:89:5d:24:cb:63:
7d:c3:51:e6:f8:12:2f:31:7b:a9:5a:5e:ad:4d:3f:
e7:30:06:78:3a:c9:57:e1:34:c3:ab:dd:cb:4e:db:
33:67:80:9f:27:56:ad:98:60:2a:33:b7:36:5c:0e:
15:c4:b2:c5:23:bb:6f:cf:79:e2:81:e1:d4:50:3c:
42:85:e3:39:0e:ff:fa:0e:67:2c:12:2f:54:19:e2:
c5:71:92:0a:20:ae:d3:80:3b:c2:44:3f:cd:19:7d:
b8:6f:be:e8:b7:2c:af:a1:4e:35:5c:2e:6d:16:28:
55:fc:ae:06:72:cf:ce:c9:0b:a3:98:79:9b:b2:35:
4c:16:e1:9c:ab:b3:60:bf:de:78:ab:6a:82:6f:b7:
e2:46:cc:9b:e3:53:90:da:e5:4e:c3:68:a7:99:cc:
77:e0:60:79:a2:8a:46:5f:cd:71:b0:40:42:08:8b:
86:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2F:7C:BE:D3:19:40:CA:53:5A:B6:DA:02:B8:22:9F:16:68:35:94
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e4:db:2e:59:d7:76:e2:3d:a5:7f:93:1a:df:f5:58:62:47:
af:ad:8d:3d:ba:8d:9d:42:c2:60:e5:d1:c8:94:b7:7f:9b:9d:
15:91:a2:f1:d6:cd:c5:2c:59:70:28:4c:43:a8:4b:c2:16:ad:
3a:34:94:73:9e:f3:6d:e0:09:78:d1:33:7b:c3:c9:ee:34:f2:
66:c7:03:13:99:f9:23:57:b2:7b:bb:ff:6e:80:2e:f1:01:83:
06:c9:76:3b:57:25:38:76:41:87:be:9b:f2:0d:93:66:bb:ab:
c4:1c:f4:72:6d:d9:ab:55:d6:a6:10:ff:fa:df:e9:a0:f7:c9:
78:0d:9d:e4:26:f1:f4:dd:77:a9:b4:3f:cc:16:6d:78:50:b8:
d4:97:85:a1:53:55:61:aa:39:68:14:99:76:8e:db:cd:ee:0c:
9b:02:69:bc:5a:58:fd:64:54:2d:b0:d5:1e:89:7c:63:26:39:
11:72:4a:4c:84:e5:e0:db:9c:2d:23:c5:a3:9c:6d:ce:2f:a1:
e4:0c:06:be:2e:14:9c:89:57:5b:09:cf:0f:28:e9:ef:cf:b5:
02:95:e5:74:d0:38:80:e6:bc:f9:83:ea:17:1d:ee:a1:ab:a0:
60:57:3b:7f:be:c7:39:70:47:b8:bf:bd:8b:4d:9d:95:87:e2:
eb:f4:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:01:12 2026 by rpki-client