Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: s8rByf5hQJobaqkQzw62DB2p78IVYnkh1vwhYnysKHA=
Subject key identifier: 24:E2:1B:0A:4E:66:FF:DE:BA:91:B5:D2:B4:DD:01:68:9C:9D:15:BE
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 01A1DE39CBF3E9AA9CF3080381708C86A3C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 0B97
Signing time: Sun 15 Nov 2026 08:01:32 +0000
Manifest this update: Sun 15 Nov 2026 08:01:32 +0000
Manifest next update: Mon 16 Nov 2026 08:01:32 +0000
Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: b2mn87/qojHD/joRHv7gJ4Y9PRe857vDG3k8WHxjxRk=)
2: qdFP8iSD0Z_J4wvN-DjLd-7BFwQ.roa (hash: 0D/tNJqnYIvzeRQq9p/CHZuxh+SBEqxg5rvNHFpn3cY=)
3: vrCign6erTM1LbQRKP4h0IonXBQ.roa (hash: AQYpWzYbq4r9zz5A/4U8pWZOmJvv2qppgX/OMFbKwks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:cb:f3:e9:aa:9c:f3:08:03:81:70:8c:86:a3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Nov 15 08:01:32 2026 GMT
Not After : Nov 16 08:01:32 2026 GMT
Subject: CN=24e21b0a4e66ffdeba91b5d2b4dd01689c9d15be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:2f:cf:0d:9f:6c:7a:ed:9e:33:dc:2d:65:
5e:f7:c7:0b:ee:fa:f5:09:cf:fc:20:55:d2:8e:04:
95:20:43:3c:18:a9:ef:06:16:04:b1:56:1a:d6:ca:
11:ab:f6:a4:2d:9b:c1:23:b7:91:c6:5d:59:8f:2f:
3d:ed:76:a1:58:52:f4:fe:d5:1e:c2:68:41:59:fc:
87:8a:6f:05:cb:e2:23:f2:5d:d6:64:bd:f6:41:c4:
13:6c:93:07:29:d6:d3:fa:2e:44:2b:69:27:8c:8a:
af:77:71:0c:53:7e:04:6e:7c:de:15:87:e3:7e:8f:
e4:95:8f:24:73:de:7e:de:63:80:3e:c2:a7:5c:2b:
ff:4a:49:8d:5b:a6:cc:3b:24:41:33:3a:da:16:dd:
29:36:04:47:ad:88:af:de:d8:f1:f7:79:8b:fc:7b:
a4:9e:88:3a:a2:4b:6e:17:09:0e:bf:dd:21:ea:ef:
6a:61:42:e3:fb:e8:a6:c7:e7:48:aa:58:20:8d:3c:
2b:d8:22:b5:de:95:a3:35:06:01:9f:2f:2b:6f:ae:
89:ec:06:38:51:75:d5:14:3d:aa:4d:99:e0:11:62:
f1:19:36:9b:07:b5:41:2f:dd:15:64:f7:17:b4:c8:
08:64:9f:8f:49:4b:80:14:8b:90:a1:39:09:ee:cd:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E2:1B:0A:4E:66:FF:DE:BA:91:B5:D2:B4:DD:01:68:9C:9D:15:BE
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b4:57:53:24:68:c1:27:17:2e:bf:d1:fb:da:ee:6b:84:2e:
95:eb:b3:80:63:5d:fd:e9:33:53:73:4e:6e:79:49:0e:7b:ba:
37:9d:8c:37:da:8c:e1:b2:77:0a:bf:00:b2:cb:3b:0d:92:0c:
b1:92:15:14:2f:42:1e:c7:af:05:c7:f7:be:db:d9:39:78:1a:
3a:ec:17:5a:4e:9e:92:32:97:33:2e:88:3b:36:ea:9b:cd:95:
2a:85:56:58:e5:19:ca:7c:41:34:6f:31:f9:0d:a7:46:ab:6d:
84:0d:e9:f0:2e:f0:1f:bb:c4:82:a1:1d:10:d0:9b:b6:88:a0:
b0:4d:01:c1:ea:be:e0:54:7c:ec:e5:5d:cb:0d:31:e7:e6:f1:
44:78:f9:ee:fa:af:98:8c:1f:c3:00:91:5f:db:34:c6:8a:f8:
a7:b9:98:3e:af:b9:06:ba:cf:a5:e8:52:0c:8c:98:1f:90:fa:
e3:d6:53:e2:c2:b5:80:cb:f3:a8:e8:04:45:a0:79:67:9e:05:
40:a3:72:b2:e0:36:22:fb:5b:6a:68:05:46:8a:a8:37:01:cf:
5d:2f:70:69:cf:b3:3f:1f:f9:91:da:de:55:80:16:93:3e:6f:
4d:8b:51:52:f0:80:a4:06:ce:81:74:6f:ce:d1:99:15:9d:a8:
4e:be:91:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:13:44 2026 by rpki-client