Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
File: DGgkFYtzDEQWfqdzqXchjMYvQWo.mft (raw, json)
Hash identifier: n4HlNkc4A2ik8F2+XydcCj9PIdxPyoIRH5KgKdM0dHc=
Subject key identifier: 2C:13:F1:FA:B1:E6:81:68:18:9A:53:C5:F0:C4:35:E4:18:F5:B4:C0
Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
Certificate issuer: /CN=0c6824158b730c44167ea773a977218cc62f416a
Certificate serial: 019D28BB5EB2735ACE492C9403D657D1B37D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
Manifest number: 0D92
Signing time: Thu 26 Mar 2026 06:01:01 +0000
Manifest this update: Thu 26 Mar 2026 06:01:01 +0000
Manifest next update: Fri 27 Mar 2026 06:01:01 +0000
Files and hashes: 1: DGgkFYtzDEQWfqdzqXchjMYvQWo.crl (hash: JSEi7up5fkXep7yRJbuJq+amXpbrHSE42xAzBN4J7qQ=)
2: utyeED3clQkm3ZphFz4r6XrH5aM.roa (hash: 1/LGmMoXZvPyyNB1HdA73Zq1ZKG58JPMftBJCzzv2rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:5e:b2:73:5a:ce:49:2c:94:03:d6:57:d1:b3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a
Validity
Not Before: Mar 26 06:01:01 2026 GMT
Not After : Mar 27 06:01:01 2026 GMT
Subject: CN=2c13f1fab1e68168189a53c5f0c435e418f5b4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:21:42:43:eb:d4:b0:c0:9c:ae:a9:f0:9c:
ab:bb:50:c6:38:f5:6c:20:db:aa:88:f6:d1:b5:a8:
5d:af:8f:7f:a4:31:51:58:b6:2b:52:e7:23:3a:bf:
24:13:6a:7d:cd:65:f2:e3:a3:9b:c4:b9:b3:63:61:
2d:d9:5d:99:ba:49:69:8b:c4:fa:e1:0c:a1:19:45:
a9:08:7a:f5:6a:ea:9a:de:23:27:36:6f:1f:b5:7a:
3f:e3:d6:55:b2:04:ba:57:ee:98:58:4a:b9:65:1b:
fa:84:ea:9a:5b:7d:26:d9:35:ca:d6:96:49:c0:11:
5b:14:df:a6:68:45:31:62:31:e4:01:e5:2d:09:02:
43:38:aa:38:51:47:5a:60:c0:c0:65:5e:01:65:75:
28:c1:6c:bc:9d:75:0c:4e:9a:35:96:b6:5e:90:88:
84:dd:1c:a4:9b:8f:c4:ea:04:e7:89:0c:44:03:9c:
b6:8c:d7:44:e4:cb:4b:b6:d3:87:5c:f4:fe:49:28:
0b:bf:62:5c:ea:32:5b:05:b9:d5:6d:1b:35:38:42:
e5:e7:1e:d0:bb:9d:65:13:b2:d3:91:46:9a:85:89:
11:74:da:4f:f7:de:85:c4:ed:92:81:ff:aa:0e:fc:
cd:76:67:6e:d4:ff:a6:12:06:4f:1f:b8:b2:fc:e9:
9e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:F1:FA:B1:E6:81:68:18:9A:53:C5:F0:C4:35:E4:18:F5:B4:C0
X509v3 Authority Key Identifier:
keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:79:07:7b:71:a3:b6:72:7b:2d:3f:ef:11:7c:0f:29:86:61:
71:52:52:96:f5:a1:81:32:3c:a5:f3:ab:ac:ac:44:91:3b:c1:
f8:73:69:38:ce:3f:39:bd:44:30:cd:9f:bc:60:95:fe:90:3a:
7f:51:66:52:54:6e:0b:6e:e7:07:8a:2a:98:3a:bb:cc:c1:5a:
2c:bb:ae:bf:77:2c:b0:ed:86:c2:63:80:ea:c0:3e:59:f9:a8:
5b:29:71:3b:40:2e:0e:03:39:06:1a:a5:39:11:95:1a:b6:64:
74:50:36:0d:82:d7:0c:4f:3a:8e:89:98:e4:13:28:19:c0:b0:
7a:96:ee:71:e8:9b:f6:9b:6f:8a:e8:b9:5c:5f:db:d5:e2:92:
41:05:16:27:d0:b4:dd:31:da:32:9c:32:89:77:56:d5:0e:ca:
39:28:2f:a9:2a:d0:02:49:e9:23:03:8d:ca:c1:a7:5f:e3:5d:
ac:bb:72:98:e8:f9:0a:9a:5e:c2:6f:f0:4c:a6:9a:fc:17:df:
8a:d1:c8:d8:5a:ea:d8:f2:fb:11:7d:64:5c:76:a4:f5:d0:7e:
2a:46:ff:1c:87:44:0f:74:a6:e7:1c:18:f4:5b:69:d8:45:05:
5d:5c:38:e6:bb:c5:41:45:79:cf:7f:48:79:ef:ec:e9:be:a5:
c2:88:4f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:45 2026 by rpki-client