Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier: 86A4WBWhH0eCQs4nt3ndJdQRjde/9VpCSLTAl2i8z7Q=
Subject key identifier: 41:B1:08:F2:66:ED:B8:DE:FA:7B:52:EF:E2:0C:A2:63:4F:54:CF:0F
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 019E1E351D24F6D74A3FA18F4B49AAF37FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number: 172E
Signing time: Tue 12 May 2026 22:00:57 +0000
Manifest this update: Tue 12 May 2026 22:00:57 +0000
Manifest next update: Wed 13 May 2026 22:00:57 +0000
Files and hashes: 1: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: fMOhsfegmRyeqgcQhlVn3/HA1fmdNn/j6ZfoE4ECLbQ=)
2: r51G36-SetuHZD_3jiNwB4dx7Wo.roa (hash: V4MD7ZgRQakaXzVvC+xHIbnQN7EcZaGY5X7pj9GMtGk=)
3: ujwOpmvI7_mtFn1fgbJBHjBrEAQ.asa (hash: 5KjvP6td+WHS3IxTZC55ymoYHpGObpqQTR6nNfLeSvo=)
4: z9mvcCRCkYuHKKd00BlCEYA9eQU.roa (hash: mRPfZgnI9elFYBzB1KqCj8Oo2adMJczMgSykoYWKKi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:1d:24:f6:d7:4a:3f:a1:8f:4b:49:aa:f3:7f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: May 12 22:00:57 2026 GMT
Not After : May 13 22:00:57 2026 GMT
Subject: CN=41b108f266edb8defa7b52efe20ca2634f54cf0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:1f:6e:31:cf:b1:23:87:a1:82:7d:18:ed:
c8:d2:ec:cd:df:65:86:4f:44:e9:f2:b0:ce:68:47:
5a:2f:95:bb:24:fd:e3:b7:a4:3c:86:08:f5:84:eb:
72:09:b6:ba:51:33:7d:3a:61:d5:6b:19:24:e4:c1:
55:40:46:53:13:72:69:1f:ff:d1:b8:70:47:1d:1a:
14:50:4e:76:ea:cb:4b:a0:0c:46:ea:3b:53:fb:24:
c6:92:8e:8d:0e:87:e7:12:1a:94:4c:81:f6:f7:9d:
3f:43:45:41:60:ca:2b:d1:f8:4b:2a:7a:da:f1:1e:
4f:72:35:e0:e6:15:16:16:30:4c:29:e9:4c:63:0f:
8d:c7:78:74:fb:7a:cc:79:4f:df:3f:86:3a:b9:d3:
de:46:43:fb:63:98:7c:07:87:9a:3a:56:b4:9b:7a:
bb:de:e3:ba:13:15:8a:69:1b:f9:f5:35:c3:53:cb:
d0:c7:a5:a4:9e:c4:f4:5f:50:55:49:56:99:64:9e:
28:91:8a:88:ad:c8:af:b8:ed:30:e3:93:d2:28:0c:
33:a8:b3:a6:7b:11:64:36:e8:b0:39:0a:b7:9d:f5:
18:61:5c:f7:56:67:bf:14:7b:49:f8:54:eb:0e:69:
95:39:4b:40:9e:23:7b:4c:1e:09:2c:f7:95:0e:54:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B1:08:F2:66:ED:B8:DE:FA:7B:52:EF:E2:0C:A2:63:4F:54:CF:0F
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2b:f4:f1:44:04:95:57:06:d6:c3:3a:ae:bb:08:ae:de:22:
ee:78:3c:4b:46:46:1b:d0:02:cc:e9:b2:44:5a:fd:15:d9:d7:
ac:df:8b:9d:f1:8a:82:20:63:76:14:20:40:25:6f:f4:82:b3:
06:65:bd:09:77:5c:05:4e:31:f4:e3:b6:a9:42:8e:8e:44:5a:
e9:26:f0:aa:84:20:dc:72:cf:80:3f:5a:d5:df:5b:31:78:00:
6a:38:fe:a9:0c:c1:e2:54:39:44:0a:f0:65:88:b8:b0:83:ac:
26:2d:a2:13:d9:34:c0:3e:52:db:c8:b4:ec:33:64:99:7c:f5:
5a:03:10:08:83:1b:f4:45:e0:56:e9:30:22:d6:c2:1c:c0:58:
67:e3:f2:c8:99:65:56:89:39:3a:cb:de:ef:4f:00:d5:a8:0c:
9e:eb:70:e8:6a:f2:4e:5c:c5:7d:47:c5:b1:85:fc:d2:cb:db:
58:c6:26:27:37:88:2d:bf:86:d0:28:11:d7:2a:42:95:20:db:
2e:4e:17:4b:c4:c2:ad:48:d0:e2:cb:03:6b:75:01:28:5f:55:
8d:23:e1:6a:93:0e:7a:ae:0b:00:d4:01:71:9b:44:88:7b:8b:
07:fc:39:47:4f:3b:7d:77:0f:bf:ab:6a:68:74:37:f7:1d:c4:
87:d9:ba:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:15 2026 by rpki-client