Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
File: Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft (raw, json)
Hash identifier: grlOTMIg5+gpAo65uLg2khPhPS67uyaCk7WJtgHvHdc=
Subject key identifier: 0A:5B:96:A8:C9:EB:0F:1C:75:42:CC:65:79:31:70:2C:00:EA:5D:A1
Authority key identifier: 0E:09:BD:1D:8F:52:F3:2E:1A:66:C9:1E:43:89:1D:CD:3C:B0:69:3F
Certificate issuer: /CN=0e09bd1d8f52f32e1a66c91e43891dcd3cb0693f
Certificate serial: 019F91DA173180FF04013324871EA78C8C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 02:00:16 +0000
Manifest this update: Fri 24 Jul 2026 02:00:16 +0000
Manifest next update: Sat 25 Jul 2026 02:00:16 +0000
Files and hashes: 1: Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl (hash: o9tchZYlWWaqasEJBZZ/hdyulWTmz4oV3/+4gGgMJTU=)
2: P0TSUa_O2R0WqImkYTbqNvp_xSA.roa (hash: FdEGT+YAusCANOcQeGpBhtrd2xw82WN4CDsU+y058Uk=)
3: _Q5u_aa4oQ-ih3YeJ-eiQhiEGDA.roa (hash: R9XukPe4DSAWpgSPkCL5g1hxeUwcjBv75r2z5QRzV8A=)
4: fz3IBcPUYgyEi3HKy3o15CbAZtg.roa (hash: Xf1iCJJHpif2NVYysmUBCRlEjnut8UfGRj8zHdLVVNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:17:31:80:ff:04:01:33:24:87:1e:a7:8c:8c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e09bd1d8f52f32e1a66c91e43891dcd3cb0693f
Validity
Not Before: Jul 24 02:00:16 2026 GMT
Not After : Jul 25 02:00:16 2026 GMT
Subject: CN=0a5b96a8c9eb0f1c7542cc657931702c00ea5da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:bf:da:dc:79:05:03:00:ea:f6:bf:3b:8f:
f4:63:88:16:6b:a8:8a:f3:1b:7b:2b:a6:88:f8:b1:
1a:23:98:f0:49:42:bc:bd:96:b6:56:53:45:b6:ac:
bf:c7:79:8a:ec:ec:8d:d2:a3:26:be:76:a0:94:89:
5a:4d:a5:3f:ce:49:24:d3:46:5a:31:8a:72:ef:ab:
73:ec:71:90:85:74:b8:db:c0:1d:ba:8a:8a:4d:c9:
d2:d4:cf:f1:6a:0f:e1:b2:22:19:76:5e:c2:31:73:
0c:6a:bd:2d:54:20:40:f7:12:77:2a:e8:96:e8:ed:
7b:07:96:bb:2c:3c:cd:0b:ef:8a:36:71:28:6a:57:
45:eb:4d:af:74:f6:9c:3f:55:48:19:9a:ad:a8:b0:
38:8f:62:7a:0d:9c:7a:8a:d6:e5:10:fd:09:73:41:
ce:fe:cf:f6:be:40:db:48:3d:e0:02:d2:e8:29:98:
70:fa:98:49:e5:df:e2:6d:b3:dd:06:f1:67:c0:82:
9d:62:38:25:0c:c3:50:0a:cd:74:32:c8:92:15:85:
04:82:69:18:fd:ca:c6:11:e9:56:67:a0:7c:1e:de:
40:45:d1:08:b3:8b:ca:8c:c6:11:a5:70:55:0b:11:
98:a4:b4:6a:3d:58:6b:bb:ac:cc:a5:87:de:3d:6a:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5B:96:A8:C9:EB:0F:1C:75:42:CC:65:79:31:70:2C:00:EA:5D:A1
X509v3 Authority Key Identifier:
keyid:0E:09:BD:1D:8F:52:F3:2E:1A:66:C9:1E:43:89:1D:CD:3C:B0:69:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:9f:6f:89:02:5d:70:d4:83:a0:f9:b0:6e:6f:97:19:7d:29:
31:4f:df:83:4c:6b:c0:18:7c:2d:10:87:75:6a:bd:79:de:c0:
7c:70:05:73:6d:03:9f:9e:4f:c3:ca:b7:20:0e:5b:08:b0:4f:
7e:79:9f:73:8c:b2:e7:26:d0:e4:d0:09:f7:88:69:cd:5e:97:
ef:e8:10:84:69:e5:e9:ec:e0:50:f3:7b:9e:d5:98:d9:6d:76:
d0:9a:5f:b3:cf:6b:be:18:05:c4:3c:17:3d:e7:d4:3c:22:af:
fd:8b:8b:f2:f3:59:46:8b:c6:16:19:8e:a9:c0:5d:94:55:b7:
4a:d4:45:29:7a:7e:8c:1b:bc:c8:c5:aa:d1:e0:fd:70:7b:f2:
2c:c7:6b:77:8f:33:e1:88:bd:4e:71:38:fe:ba:5a:f6:2f:76:
28:e8:5a:db:60:77:5c:7e:2e:37:e2:c7:b8:e0:40:c9:c0:7d:
4c:14:48:c9:05:50:f4:60:0f:9e:2d:75:a7:ab:fd:78:a7:18:
ba:95:fe:11:e6:a9:86:b1:d0:c4:dd:ac:95:ab:1c:e6:58:59:
15:1c:8c:32:1d:0d:5c:14:4b:e0:47:81:3e:44:98:be:26:e2:
59:53:26:bb:eb:74:53:85:db:23:35:9e:50:27:61:1b:fe:a9:
55:3a:d3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:46 2026 by rpki-client