Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json)
Hash identifier: Utianw7lMrS8BEo0AIi3zAJxiSaN5Gv9qeO5sWDR+nw=
Subject key identifier: C3:90:F6:94:70:F2:EC:DA:1E:25:D5:44:99:82:54:A0:E2:5A:6E:0A
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial: 019D29298C6DBBAE45F5AA4823054FC29744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
Manifest number: 0FA5
Signing time: Thu 26 Mar 2026 08:01:21 +0000
Manifest this update: Thu 26 Mar 2026 08:01:21 +0000
Manifest next update: Fri 27 Mar 2026 08:01:21 +0000
Files and hashes: 1: D0GEjoznOI2frIxZsC2NiRuqe58.roa (hash: izqFp+9eKQWS0LIy0mUZV6cpF1Hakb27ARgQaCVrstg=)
2: DXniqTjiM_fLeFwbMoM6gQE-lG8.roa (hash: pstH5qAZQNYtXKP4tLhcl9j2PXNJLupw87wVdJwV48s=)
3: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: zTTmHpZ5rLl0pgF/kwBZ0PU96U57fEbwxsfa7LYdNdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:8c:6d:bb:ae:45:f5:aa:48:23:05:4f:c2:97:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Validity
Not Before: Mar 26 08:01:21 2026 GMT
Not After : Mar 27 08:01:21 2026 GMT
Subject: CN=c390f69470f2ecda1e25d544998254a0e25a6e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:ce:1f:04:2b:95:a0:79:50:ac:32:90:ac:
cc:c9:38:e3:fb:22:4c:12:9f:0e:84:aa:77:1a:94:
d5:ad:2c:53:6a:89:83:94:10:59:56:36:dc:35:fd:
af:79:2e:81:34:d0:a9:88:9d:ab:da:b3:ab:10:ad:
da:60:39:81:04:3d:12:5d:6d:3a:1b:c0:6b:c4:bd:
72:1b:40:af:8f:4f:f2:85:7f:82:2a:1f:94:8a:2e:
53:85:38:d6:d2:67:22:15:73:07:2a:a2:94:f3:e4:
5b:e4:87:77:93:ee:e6:d6:c7:3b:4b:de:66:a7:40:
73:39:b9:37:65:31:c4:fe:74:32:4a:1a:71:24:77:
dd:19:45:ce:b8:e3:b5:7b:cb:f2:42:f1:d2:4d:3e:
18:7f:58:08:3b:e0:e3:ea:35:49:30:7a:13:6b:88:
39:27:e9:b5:6e:96:00:c1:d4:d4:00:c8:56:95:b8:
e5:59:68:26:72:f5:db:d3:df:f9:8f:18:aa:bb:a7:
bf:65:a1:6a:a1:12:6c:25:bc:5a:ee:50:25:b4:e0:
44:56:1b:46:38:b4:a1:ef:bf:73:4f:74:c8:87:17:
3e:ca:95:c5:9c:c0:c4:16:ac:93:f0:cd:24:0a:68:
bd:3f:e0:f0:5f:fa:92:86:85:7c:3e:e7:42:6c:8f:
b7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:90:F6:94:70:F2:EC:DA:1E:25:D5:44:99:82:54:A0:E2:5A:6E:0A
X509v3 Authority Key Identifier:
keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:04:1e:8b:05:b0:24:23:33:12:86:ec:de:12:a7:ec:84:df:
3e:95:4e:cf:20:4f:d2:d4:3d:21:7c:e9:7c:ce:1f:f4:ea:b6:
d6:fb:a4:c0:2c:c2:96:a5:e0:5c:99:e5:5b:3e:5c:e7:4d:15:
d6:92:8f:85:e0:ee:be:e4:8d:bb:57:66:d5:ea:3d:a2:2c:7e:
37:c0:b9:b5:45:14:0f:5b:26:57:2a:30:1b:6f:7e:42:27:54:
61:bd:ea:9a:e6:21:e9:89:61:0e:65:1a:60:0e:2e:8f:89:bf:
4a:7b:8f:2d:21:e3:49:8f:34:65:fb:dc:ff:fd:57:41:f6:04:
e2:f3:06:53:9a:60:f9:7f:ae:72:b6:63:d3:9e:0e:a5:17:be:
38:10:ac:90:35:54:41:97:09:13:29:13:40:49:59:64:f4:8d:
4f:30:da:a3:a7:73:ae:22:f8:c9:76:29:3f:ee:54:54:fe:2b:
fc:c3:d0:8f:6c:07:5d:61:29:54:10:74:35:21:a1:bf:01:aa:
22:fe:dd:d3:00:0d:fa:43:a3:22:92:f3:22:85:7d:ef:d3:b7:
61:c3:94:d1:fc:39:e0:64:d7:0f:28:c8:15:33:0e:95:7a:11:
11:41:73:74:99:ee:53:19:a5:29:78:31:32:73:2d:62:09:c0:
90:75:2d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:13:20 2026 by rpki-client