Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier: FlrWaQj8nh37wPpy2PQvuoB4a7F0VLg3zwNtap84neY=
Subject key identifier: AA:A1:67:82:75:E9:FB:77:C2:A0:EA:94:4F:13:C8:D3:9C:32:A8:27
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial: 019E205A590A44A4F69FF8BC7DF14EB909D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number: 0DC3
Signing time: Wed 13 May 2026 08:00:52 +0000
Manifest this update: Wed 13 May 2026 08:00:52 +0000
Manifest next update: Thu 14 May 2026 08:00:52 +0000
Files and hashes: 1: KMvjq5V4Ksx01k9TjiIKtXCe5pA.roa (hash: 1beuOrWqdA+O+erqVb2gqs5tEOIpMoZMwqBtE6QzSbA=)
2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: uUe/IFDnLqbjWal1Mz/5/QyA5z6N0MS9w8eY9VF+0iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:59:0a:44:a4:f6:9f:f8:bc:7d:f1:4e:b9:09:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Validity
Not Before: May 13 08:00:52 2026 GMT
Not After : May 14 08:00:52 2026 GMT
Subject: CN=aaa1678275e9fb77c2a0ea944f13c8d39c32a827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:af:40:54:4d:15:69:d9:a4:3b:09:bc:fb:
27:3f:89:35:19:8b:fe:86:9b:e6:6a:c9:29:36:eb:
23:5c:3a:c1:35:40:65:0a:94:7f:15:53:95:15:ca:
5b:8e:d2:79:14:bc:3d:92:62:38:ba:2d:25:35:7e:
58:95:e5:2b:c0:54:e0:81:fe:d8:81:66:b7:c4:2d:
21:60:ac:1f:9a:d6:64:36:b4:5a:c6:bb:65:81:44:
a9:50:b1:e3:3e:85:75:93:47:66:13:ff:4f:fc:b0:
10:aa:cb:8a:bb:4f:63:a8:e4:aa:12:e4:6e:5e:da:
96:3f:d4:fa:a6:51:74:5a:a0:15:96:6f:51:37:f0:
f6:59:13:6c:6a:3e:f3:21:4c:09:81:52:69:68:44:
c6:d4:f6:0f:f5:c4:98:eb:06:39:d9:c0:7e:f2:3e:
cb:d8:0e:2f:25:9e:fc:e0:d3:d8:0b:4f:57:ec:98:
2d:6e:56:bf:cb:1d:90:34:2a:4a:00:20:f4:79:b1:
dc:4a:13:55:bd:d6:a9:03:da:ab:54:06:e3:a6:db:
f9:32:44:85:09:b7:9b:4e:7b:f6:20:a7:64:42:6f:
10:79:ef:d3:52:c3:ce:d4:e2:0f:e2:05:d5:0e:51:
a7:38:1f:f6:40:bf:78:0c:85:8e:c8:ff:36:f3:79:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A1:67:82:75:E9:FB:77:C2:A0:EA:94:4F:13:C8:D3:9C:32:A8:27
X509v3 Authority Key Identifier:
keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ba:92:eb:c9:9f:fb:b3:90:b2:67:62:a4:ca:8d:d8:c3:20:
ae:66:16:22:88:33:a9:42:fa:69:f6:52:98:31:4d:ea:ab:f7:
31:79:52:d3:64:94:ab:60:c9:13:7b:1c:a5:89:88:6f:6c:07:
b9:a7:c0:e6:78:82:a8:3e:dd:4c:8b:40:32:5a:6d:7b:13:e6:
b2:38:d4:a4:5a:6c:bf:d3:c6:a5:65:30:30:81:b8:80:65:b5:
2a:47:ca:5e:13:d7:65:50:45:ab:e6:2c:ab:c5:92:7a:f1:5e:
7b:47:ff:32:7b:4e:05:d1:d6:2e:bc:ef:c8:cd:0d:2a:cf:72:
dd:1e:3c:7d:d2:d2:64:a1:65:b5:35:32:29:8a:d9:c5:8c:b7:
e0:7b:92:c1:b7:c7:f4:82:da:bb:7a:90:b8:0e:f7:aa:7a:a4:
46:2f:05:92:94:20:54:26:ee:18:28:ee:e3:3c:20:14:e4:1c:
76:7f:7e:c2:3c:dd:e1:1c:72:30:33:55:b1:a7:f3:97:91:f3:
f6:c3:09:5f:6f:3c:0d:c7:6e:e1:6a:21:e8:bf:48:8f:e4:5f:
7d:74:6c:7c:d5:2d:ef:be:b7:32:8f:af:4f:ec:2a:72:8b:ce:
02:e2:d4:c7:7a:97:bd:c4:be:1e:f6:ec:bf:30:e5:fc:ba:f2:
77:91:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:38 2026 by rpki-client