Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier: QxDjZnLnDc63pF5EUp+4Ad6I54YpLN8S07GHq4Mfag8=
Subject key identifier: 47:79:1E:81:67:1E:FA:E1:ED:AA:B8:47:B7:A7:D6:9C:47:EB:9B:1B
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 01A0D57037831A69D9CA38003F7412F02194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number: 189A
Signing time: Thu 24 Sep 2026 22:01:36 +0000
Manifest this update: Thu 24 Sep 2026 22:01:36 +0000
Manifest next update: Fri 25 Sep 2026 22:01:36 +0000
Files and hashes: 1: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: XCJ85M7i8YNh43CGG4UYGffD9+Q5jsUt6amMc1Ei27U=)
2: knurMTGzv5N9Th8qibfuM3XDIRg.asa (hash: h5fB72wzGphQR7ZUl0WEDBhZkeKJwZbslJ5h82PZpR0=)
3: swjIGqN6DN3Ca974iRXFGBijp9c.roa (hash: rW/KrfsjqzaW573dxssu8kVIiwDSL2ZDsZ8f8WBDZhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:37:83:1a:69:d9:ca:38:00:3f:74:12:f0:21:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Sep 24 22:01:36 2026 GMT
Not After : Sep 25 22:01:36 2026 GMT
Subject: CN=47791e81671efae1edaab847b7a7d69c47eb9b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:86:b2:58:ab:17:e9:f1:21:ad:bf:89:25:
e0:76:1d:00:95:fe:12:00:a5:56:6c:e0:6a:21:fb:
76:cb:de:d9:69:9d:c9:5c:78:ee:ca:87:1f:94:7d:
ad:a5:09:dd:ad:0e:b8:d7:b1:b6:6e:74:34:47:93:
60:12:27:40:4a:0d:3f:eb:aa:3a:07:e9:c5:5d:ff:
77:ac:70:fe:4d:3b:73:41:b4:b0:1f:f5:a2:fa:2d:
b9:22:dd:35:ba:48:0c:36:65:a7:2c:5d:d1:59:91:
42:c1:89:ac:7d:1f:a0:0b:24:f3:05:7f:bd:2b:1b:
64:4c:6d:c5:2f:9c:d2:f0:f9:5d:75:0a:fe:d1:52:
b6:92:84:7e:ce:e5:a2:9b:5d:71:d1:af:43:ec:25:
d2:01:d7:1e:de:cb:23:87:c5:4b:86:b7:58:bb:2b:
3c:ae:e1:05:af:3e:c2:04:a3:18:f0:2c:bc:59:50:
c4:55:ee:27:2b:f2:6c:f6:d6:be:1f:68:32:10:a0:
3b:b5:a1:94:6b:17:57:44:26:e9:87:c1:ad:cd:4b:
8d:c0:7b:6b:35:be:be:12:81:b0:84:22:7d:16:39:
c0:39:bd:0f:98:f2:3d:bb:7b:03:fa:a1:c6:ba:b2:
c7:2a:9d:df:16:3b:c4:08:d8:9b:cc:e8:f8:9e:e7:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:79:1E:81:67:1E:FA:E1:ED:AA:B8:47:B7:A7:D6:9C:47:EB:9B:1B
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a2:be:33:2e:1d:69:92:a4:9f:51:29:c8:fb:d1:cc:0d:23:
b3:29:89:3f:17:70:cb:ce:af:2e:dd:ef:af:db:ab:92:8f:a5:
e4:6d:0a:b1:51:7c:5b:a3:29:0a:19:6b:61:d2:d3:26:76:60:
81:bf:e4:35:f0:8b:27:1c:e0:3c:f1:0e:01:db:0e:97:ea:52:
91:82:86:8d:ee:b9:66:7c:77:30:e3:36:5c:66:d8:81:65:fc:
56:8a:0b:ef:85:81:8e:e5:cd:57:cb:75:6e:b3:38:cc:2b:4a:
89:be:09:ed:81:42:16:c8:39:10:31:9f:ca:9f:b0:24:92:f9:
41:34:40:28:d1:53:85:a3:cc:42:26:a6:83:8d:93:d6:7e:fc:
e5:b4:93:9a:a7:e0:b3:ab:93:c8:b0:23:b9:45:37:d5:88:07:
23:e1:70:7f:bc:c0:19:b3:76:35:d8:bb:ba:b0:1e:e8:e6:fb:
a5:4d:34:d3:6e:5c:8c:a6:83:1a:91:24:30:60:68:98:fb:90:
f0:da:53:cd:a1:99:95:76:d9:54:e8:08:db:f5:ae:8f:5d:8e:
b0:32:39:e8:93:6f:1a:b9:f7:b4:a7:ce:6c:f5:47:74:c0:5d:
83:43:b7:93:9c:ee:bd:59:20:c4:6f:a4:9b:97:9f:f5:53:fc:
e5:d2:20:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:22:21 2026 by rpki-client