Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: Cd22pFLpm0+lAbsw93Dsn2PhaRuEz151zf2Q+G9niVM=
Subject key identifier: F9:BD:42:EF:BF:88:B5:DC:23:15:CA:9C:D5:EA:98:43:80:9D:73:A3
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 01A0D983FEA9E78F48C8A63E8C64E399A464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 14EB
Signing time: Fri 25 Sep 2026 17:01:41 +0000
Manifest this update: Fri 25 Sep 2026 17:01:41 +0000
Manifest next update: Sat 26 Sep 2026 17:01:41 +0000
Files and hashes: 1: 9z2R7mR7CTqEMhJ2KlrHCYJ3vjc.roa (hash: FvuJb6Wc0/pGsiV3BQi7hOtAMeCwlp8+eAq8AekfMKM=)
2: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: FuNnIEGcmO/IY69qT3tud4hFaRd+sZvlNIOmnpJGvXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:fe:a9:e7:8f:48:c8:a6:3e:8c:64:e3:99:a4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Sep 25 17:01:41 2026 GMT
Not After : Sep 26 17:01:41 2026 GMT
Subject: CN=f9bd42efbf88b5dc2315ca9cd5ea9843809d73a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:e6:c1:5e:1e:92:90:33:9d:50:b2:67:3d:
f8:1a:35:80:70:d7:6b:51:22:a3:51:db:0d:8f:b7:
57:d9:27:bc:2d:1f:44:2d:9e:78:73:15:62:93:a3:
98:d3:88:9f:f3:71:a8:ac:ee:3d:63:b5:4a:31:20:
3f:44:b7:3a:cd:5f:16:b8:28:31:ce:b1:2a:e6:2e:
5d:2e:d5:6f:05:09:ae:2f:c5:e8:ad:f8:58:91:19:
32:7e:c5:18:77:64:49:ab:03:39:8e:2f:b1:f7:01:
72:59:f5:8c:47:e6:c9:f3:e1:1b:bd:0f:5d:8b:dd:
1f:e3:ed:5c:9a:5e:33:55:9a:7d:7f:83:9d:48:f4:
0d:57:f6:fd:73:ca:8b:83:4a:c8:6e:c5:ca:78:2d:
96:34:39:f4:46:09:4d:4a:65:73:0e:a4:90:d4:60:
b7:25:a1:e4:c8:7c:38:aa:d7:b5:23:2b:0d:a0:e9:
22:b2:b5:0c:5b:80:b8:50:14:67:3b:3a:ab:43:62:
e1:98:07:68:9a:1d:9e:d8:32:5d:6e:bd:d2:49:c2:
7d:bd:fc:6d:e9:cf:a4:81:7e:01:d6:d2:87:12:5b:
74:a5:0b:3c:08:7b:d6:43:61:1d:0b:fa:ca:50:0a:
a9:07:78:0a:c8:64:6b:1e:05:82:bc:7c:86:e1:2d:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BD:42:EF:BF:88:B5:DC:23:15:CA:9C:D5:EA:98:43:80:9D:73:A3
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2a:63:30:03:6d:ed:41:9a:54:2b:eb:d1:71:ae:b7:88:92:
b7:06:b2:9c:8f:ee:6e:6e:1f:59:39:17:a0:97:b5:9a:45:bc:
33:fb:83:6a:66:3b:cf:b1:dc:61:25:47:0d:5f:7a:c2:1a:19:
6a:a4:19:b2:3e:6c:28:12:f6:74:d7:d2:f0:63:c7:21:99:a7:
45:71:14:b8:25:8b:9e:76:56:8d:26:9a:86:7b:ad:54:ad:bc:
dc:4f:da:3a:0b:96:39:fe:84:89:66:c2:e1:a5:24:14:22:a9:
b1:2e:71:bc:f6:c6:88:b1:8a:66:c6:c4:db:28:fc:73:a3:80:
da:94:57:66:fc:62:cf:ec:81:98:76:fa:82:f1:e4:0a:3c:38:
47:74:c8:55:f5:df:a2:92:ca:9e:84:99:1f:02:8a:e8:ea:d8:
02:9f:03:68:b3:40:01:68:be:04:18:10:63:05:3a:a6:8f:ac:
42:8f:05:1b:6d:5b:d7:0c:c4:ea:f8:b8:f1:16:81:6e:4d:45:
c7:90:99:60:36:16:d0:3a:26:cf:8a:18:c0:1c:b4:58:e6:de:
81:27:96:c9:8b:22:8d:d7:f2:2d:a0:61:be:0f:3d:db:5b:1d:
14:6d:94:fb:24:eb:31:81:88:b8:1a:4e:0a:32:3b:c0:b8:34:
bc:5c:96:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:33:00 2026 by rpki-client