Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/fc2474-5cd2-4eb6-bf95-0a1c457e47d0/1/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.mft
File: Dgmu0Jy-UP0gOzsJglgH-jfKWNw.mft (raw, json)
Hash identifier: zv4AMKfEt2I8Jn4EVWjqL/2i/4naAOsRd7ka/jMtGJs=
Subject key identifier: C4:55:30:24:9A:E9:33:7B:E2:70:07:E0:82:F0:AF:1F:F0:8B:D5:14
Authority key identifier: 0E:09:AE:D0:9C:BE:50:FD:20:3B:3B:09:82:58:07:FA:37:CA:58:DC
Certificate issuer: /CN=0e09aed09cbe50fd203b3b09825807fa37ca58dc
Certificate serial: 019D322BF020AB238ABD19100875E34DE6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/fc2474-5cd2-4eb6-bf95-0a1c457e47d0/1/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.mft
Manifest number: 2D
Signing time: Sat 28 Mar 2026 02:00:33 +0000
Manifest this update: Sat 28 Mar 2026 02:00:33 +0000
Manifest next update: Sun 29 Mar 2026 02:00:33 +0000
Files and hashes: 1: Dgmu0Jy-UP0gOzsJglgH-jfKWNw.crl (hash: KC1iWm7E09pELyEin5Gr+HYnjXg1Mef5CwThRmIEy3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/fc2474-5cd2-4eb6-bf95-0a1c457e47d0/1/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/fc2474-5cd2-4eb6-bf95-0a1c457e47d0/1/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:f0:20:ab:23:8a:bd:19:10:08:75:e3:4d:e6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e09aed09cbe50fd203b3b09825807fa37ca58dc
Validity
Not Before: Mar 28 02:00:33 2026 GMT
Not After : Mar 29 02:00:33 2026 GMT
Subject: CN=c45530249ae9337be27007e082f0af1ff08bd514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:f5:32:0b:67:71:23:15:ef:d0:50:49:78:
3f:e1:92:db:e7:69:c6:3b:c5:48:99:f4:94:0a:9c:
a7:91:18:b0:7f:11:f2:da:1d:67:05:ac:a4:c7:d1:
b6:cc:dd:89:a2:50:98:5a:72:e5:c9:f9:87:11:47:
58:86:89:4b:93:7d:fe:bb:2f:6b:43:3f:54:66:81:
e2:05:21:30:f5:68:4d:16:7e:11:fb:bc:11:8c:51:
2a:82:a4:e1:f8:2c:b6:c3:3b:e7:73:5b:2a:da:0c:
78:ca:75:13:e5:42:ed:b4:37:aa:81:d7:f1:2b:fb:
b3:d9:7b:9b:b0:95:03:92:cb:4b:10:84:29:c3:a2:
08:23:3f:fc:c3:e0:f9:fe:d9:d5:83:73:05:ea:85:
01:14:96:7e:4e:a1:fa:e7:93:14:8b:eb:a8:cf:0a:
9c:41:17:7d:d0:6d:83:07:c8:6e:89:96:31:c7:cf:
94:bc:4c:cb:13:41:87:f0:7e:20:01:f6:9b:5f:e7:
48:07:10:23:65:de:b0:a3:88:be:de:e5:43:b6:65:
b9:ac:72:9b:9e:78:5a:aa:14:2c:b1:69:bf:66:7d:
6a:ac:74:3e:55:46:53:ec:29:33:3c:52:47:97:53:
d0:6f:4d:a5:76:d1:a9:0b:88:63:96:cf:60:c9:13:
88:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:55:30:24:9A:E9:33:7B:E2:70:07:E0:82:F0:AF:1F:F0:8B:D5:14
X509v3 Authority Key Identifier:
keyid:0E:09:AE:D0:9C:BE:50:FD:20:3B:3B:09:82:58:07:FA:37:CA:58:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/fc2474-5cd2-4eb6-bf95-0a1c457e47d0/1/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/fc2474-5cd2-4eb6-bf95-0a1c457e47d0/1/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:83:ec:3a:77:0f:7f:8a:ce:e1:44:8a:e4:51:7e:10:a6:cf:
06:32:71:9a:06:c1:6a:74:da:d6:7a:74:d5:5a:0e:0d:b5:62:
3f:e7:06:42:c4:40:9a:3f:10:83:44:01:4a:c5:3a:db:4c:ad:
97:14:28:6d:8d:5d:4a:ab:b2:17:c5:4a:ce:63:8a:8b:ba:d7:
de:07:f1:e6:74:c1:63:70:ec:32:ac:da:ec:7e:7a:91:f3:b1:
9b:6d:de:03:49:e3:b8:28:d7:a2:17:aa:a6:5a:b6:5b:68:a0:
5b:cc:1e:95:ef:1e:b0:2a:e1:c3:2c:ef:3a:21:e4:73:d1:76:
ab:b7:53:6c:c4:e3:21:92:9a:04:2a:08:b5:1e:77:ae:af:ef:
02:57:89:c9:e5:27:ec:a8:8a:05:ae:49:6e:f8:0b:49:66:06:
47:6d:e6:46:d5:2d:c4:f7:22:01:53:06:fb:31:45:05:cb:aa:
29:bd:40:f7:69:22:bc:4a:05:0c:51:70:f9:b2:9b:26:f4:2d:
c6:25:b9:b9:84:42:85:6a:23:e4:d9:0b:a3:dd:a7:bf:b1:7d:
91:94:a1:09:82:3c:14:a5:5a:38:0b:8b:81:c8:50:52:9d:75:
1d:33:15:95:b2:f1:fe:e1:fc:ec:c4:ce:9e:59:2c:07:75:f0:
42:36:32:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yK/AgqyOKvRkQCHXjTebLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDlhZWQwOWNiZTUwZmQyMDNiM2IwOTgyNTgwN2ZhMzdj
YTU4ZGMwHhcNMjYwMzI4MDIwMDMzWhcNMjYwMzI5MDIwMDMzWjAzMTEwLwYDVQQD
EyhjNDU1MzAyNDlhZTkzMzdiZTI3MDA3ZTA4MmYwYWYxZmYwOGJkNTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTH1MgtncSMV79BQSXg/4ZLb52nG
O8VImfSUCpynkRiwfxHy2h1nBaykx9G2zN2JolCYWnLlyfmHEUdYholLk33+uy9r
Qz9UZoHiBSEw9WhNFn4R+7wRjFEqgqTh+Cy2wzvnc1sq2gx4ynUT5ULttDeqgdfx
K/uz2XubsJUDkstLEIQpw6IIIz/8w+D5/tnVg3MF6oUBFJZ+TqH655MUi+uozwqc
QRd90G2DB8huiZYxx8+UvEzLE0GH8H4gAfabX+dIBxAjZd6wo4i+3uVDtmW5rHKb
nnhaqhQssWm/Zn1qrHQ+VUZT7CkzPFJHl1PQb02ldtGpC4hjls9gyROIyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRVMCSa6TN74nAH4ILwrx/wi9UUMB8GA1UdIwQY
MBaAFA4JrtCcvlD9IDs7CYJYB/o3yljcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdtdTBKeS1VUDBnT3pzSmdsZ0gtamZLV053LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9mYzI0NzQtNWNkMi00ZWI2LWJmOTUt
MGExYzQ1N2U0N2QwLzEvRGdtdTBKeS1VUDBnT3pzSmdsZ0gtamZLV053Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9mYzI0NzQtNWNkMi00ZWI2LWJmOTUtMGExYzQ1N2U0N2Qw
LzEvRGdtdTBKeS1VUDBnT3pzSmdsZ0gtamZLV053LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4PsOncP
f4rO4USK5FF+EKbPBjJxmgbBanTa1np01VoODbViP+cGQsRAmj8Qg0QBSsU620yt
lxQobY1dSquyF8VKzmOKi7rX3gfx5nTBY3DsMqza7H56kfOxm23eA0njuCjXoheq
plq2W2igW8wele8esCrhwyzvOiHkc9F2q7dTbMTjIZKaBCoItR53rq/vAleJyeUn
7KiKBa5JbvgLSWYGR23mRtUtxPciAVMG+zFFBcuqKb1A92kivEoFDFFw+bKbJvQt
xiW5uYRChWoj5NkLo92nv7F9kZShCYI8FKVaOAuLgchQUp11HTMVlbLx/uH87MTO
nlksB3XwQjYyEw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:25:21 2026 by rpki-client