Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier: MmpuTm+ukztLPBpmvnQDAZbGfI6zPXrcw5AlgdltLEU=
Subject key identifier: 85:DB:12:F8:91:65:AC:B7:20:88:4A:10:19:93:CE:A4:7E:B8:BC:3C
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 01A1DD26B9E84E37B75BF2FF8E3AA3255D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number: 1923
Signing time: Sun 15 Nov 2026 03:01:05 +0000
Manifest this update: Sun 15 Nov 2026 03:01:05 +0000
Manifest next update: Mon 16 Nov 2026 03:01:05 +0000
Files and hashes: 1: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: 7N1pbeQTCfA/qTBfdsr3fFnpTuaDKlGCECMY37J+/l8=)
2: g48FjrLPUETlNPulvtc8xyj8K48.roa (hash: EKxmKIv2fLBJS6U0Ro0OTfm8airNaJ2w6GG0eXaf5Lk=)
3: knurMTGzv5N9Th8qibfuM3XDIRg.asa (hash: h5fB72wzGphQR7ZUl0WEDBhZkeKJwZbslJ5h82PZpR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:b9:e8:4e:37:b7:5b:f2:ff:8e:3a:a3:25:5d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Nov 15 03:01:05 2026 GMT
Not After : Nov 16 03:01:05 2026 GMT
Subject: CN=85db12f89165acb720884a101993cea47eb8bc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:43:87:3c:25:94:d3:62:6c:c6:33:b6:cf:eb:
20:3b:ce:55:98:49:6c:45:6b:e7:59:ad:10:2a:45:
b3:9c:86:4b:15:a2:51:8a:a2:5e:f3:12:0a:dd:e6:
14:c4:01:2b:f2:a9:43:3a:c3:0d:c2:b5:bf:4a:98:
c8:54:61:6f:55:2c:bc:9b:34:dc:e4:19:b0:11:d5:
32:4c:af:7b:78:9c:40:5c:d7:6a:c4:65:b5:25:bd:
7d:2a:42:61:04:8d:da:a8:5f:d3:6b:29:24:eb:49:
7c:36:fc:41:f0:3b:58:8c:b4:b7:ee:2e:e2:4a:01:
5b:70:1c:d7:38:48:9e:49:2e:01:94:ee:a0:b8:a9:
a4:a9:d2:ac:22:11:26:f3:72:c1:11:a5:e1:a0:d7:
b3:17:fe:a6:72:14:93:8d:1e:1a:09:a5:04:aa:ff:
b4:cb:70:b5:84:1d:fb:ac:4f:70:f1:db:d2:1a:43:
14:9b:ab:57:ec:13:aa:ba:e4:e9:44:c4:c5:0a:e2:
e4:49:b2:26:a9:17:3a:a0:2f:c9:8d:7d:69:e9:d7:
cc:68:c7:d0:57:9c:e8:85:9c:b6:27:7e:ca:1c:57:
0d:2c:f7:1c:40:e1:16:24:82:e3:60:64:a4:c9:3d:
23:46:d4:3b:5a:db:3d:15:cc:06:2d:2b:74:de:b5:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DB:12:F8:91:65:AC:B7:20:88:4A:10:19:93:CE:A4:7E:B8:BC:3C
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:3b:24:0c:75:e2:ad:89:bd:a8:70:61:df:da:10:c9:1f:ba:
d1:37:81:d2:3d:3e:ae:6f:75:2f:5c:bd:64:df:3f:80:4a:5a:
5d:41:49:9d:d4:eb:a8:bd:9c:0a:da:4e:ad:83:0a:a7:ae:b1:
75:f9:a3:bc:b5:c2:ea:26:ed:62:f1:2c:9a:50:e8:97:23:25:
72:11:af:19:ff:2d:88:4a:98:01:a4:24:2a:9a:2f:fb:6f:f0:
d4:70:23:e7:b7:0d:6f:ae:bd:aa:8a:63:d4:8c:39:39:32:f6:
1d:a2:ea:0c:c9:81:c8:4c:0a:12:52:8c:a9:7c:7f:af:cb:6d:
eb:95:8c:9c:0e:6f:49:0f:d2:35:8e:a8:28:ee:a8:cc:38:36:
4d:68:78:20:04:ff:cb:ac:58:82:df:90:55:d4:53:a6:46:c5:
00:5c:c8:69:db:da:12:68:75:df:0b:eb:45:83:fe:ac:5a:74:
a9:36:53:74:93:f2:1f:af:0d:9d:43:ff:2a:88:6d:4e:cb:c7:
39:c2:c5:61:59:21:07:65:83:e1:91:5b:f5:c1:16:56:a6:1c:
bf:5a:2c:59:a8:25:98:62:1e:b7:72:c0:90:cc:b0:50:37:1b:
f2:38:98:51:db:09:8b:da:6e:43:8a:84:26:7a:46:d6:0e:de:
1b:62:3d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:43:12 2026 by rpki-client