Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
File: Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft (raw, json)
Hash identifier: iusLq8K2RMrDAJqyesrajO3Ofvrffwfa85A9tdk9v6Q=
Subject key identifier: 0A:21:AE:92:2F:1E:95:18:76:AA:93:82:3B:9A:03:92:55:BC:3E:B9
Authority key identifier: 0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
Certificate issuer: /CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Certificate serial: 019D24DE4B60EC2BB4C41ED7FE66BD62A6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
Manifest number: 72
Signing time: Wed 25 Mar 2026 12:00:41 +0000
Manifest this update: Wed 25 Mar 2026 12:00:41 +0000
Manifest next update: Thu 26 Mar 2026 12:00:41 +0000
Files and hashes: 1: 1-ZA3tjZXtTnljb1_LyYKoCeyOLg.asa (hash: 1+ooJiGuRehijv0BAu/DjLMQWAM8WG1GvP8acPYp+Sk=)
2: Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl (hash: 1zQHp8rT+CZdKmrZnh+pxWbxvDLOPMyC8g2/hZRNYC0=)
3: dO3RNAISfOv0O9_8IUROa2pKet4.roa (hash: C48BcGhKAuvtDpW8RyICY4ut3E1OUd47JnUb0vzluWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:4b:60:ec:2b:b4:c4:1e:d7:fe:66:bd:62:a6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Validity
Not Before: Mar 25 12:00:41 2026 GMT
Not After : Mar 26 12:00:41 2026 GMT
Subject: CN=0a21ae922f1e951876aa93823b9a039255bc3eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:60:f3:79:31:46:e9:26:aa:94:e2:8f:79:e2:
96:af:23:b0:e6:06:24:ba:1d:fb:95:b9:8c:8b:1a:
41:c0:af:fc:ed:e7:59:c5:45:1b:b6:65:11:d2:de:
fd:4d:ab:06:7a:8f:9c:12:8f:57:b3:31:84:00:33:
d5:90:81:a0:48:ab:c5:e9:dd:f4:87:a4:34:1c:43:
f8:fe:d7:6a:6a:c9:79:7a:ec:c5:7d:a5:70:3b:69:
5f:30:9f:7b:7e:50:5e:39:f5:ac:56:7d:2d:0d:a3:
8d:9d:ed:70:6c:1c:35:62:11:c1:47:cc:04:c9:2d:
2f:00:95:75:0d:2e:e8:ba:59:3d:d7:14:54:50:9c:
e1:fe:9f:9b:ff:41:16:10:08:8f:90:98:ac:50:6d:
2c:1c:85:60:fa:a0:6e:69:7e:51:b1:fc:e6:b3:d0:
44:30:62:89:00:0e:4a:f2:6e:a0:b6:91:55:75:a4:
67:09:66:58:81:d8:dc:ce:94:da:39:e0:88:e2:bb:
45:d9:78:27:11:4d:ed:b3:2f:c7:9b:b2:15:c8:93:
02:ad:04:59:fe:34:d2:6e:2e:04:fb:76:6b:44:90:
e3:ec:10:99:af:e0:3b:84:bc:cf:ab:3f:54:2e:02:
fd:da:1c:36:2f:77:24:77:ec:33:d5:d1:ba:64:48:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:21:AE:92:2F:1E:95:18:76:AA:93:82:3B:9A:03:92:55:BC:3E:B9
X509v3 Authority Key Identifier:
keyid:0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b9:94:52:1d:fe:90:64:d8:66:6e:03:91:5e:c0:3a:67:f1:
b5:d2:41:f2:1a:c8:dd:91:08:bf:37:11:70:1d:bd:78:fd:b0:
aa:a3:51:f6:28:8a:6b:8d:4a:5b:6c:f1:9d:98:af:02:ec:33:
fc:b8:d5:39:fc:c7:b0:2c:e5:0a:47:c1:63:7a:70:d7:8f:a7:
47:ba:dc:cd:c7:f1:30:b9:0c:16:e0:e0:2c:be:4c:43:58:53:
13:8d:66:7f:12:3d:e4:24:4f:77:e6:69:7e:bd:ac:0f:fc:6e:
4c:7d:42:45:5e:4a:97:53:03:4d:37:74:44:dd:56:0c:7c:6d:
f6:8c:27:df:d6:ad:da:02:2a:8c:5d:dd:2f:2d:b3:1d:a2:b9:
8e:bb:3d:7e:eb:c8:a6:24:53:5a:ad:68:f1:71:81:b1:0b:de:
b7:21:90:01:3b:1c:a4:f8:49:3a:66:cf:3a:0b:10:3a:6e:9e:
95:c2:00:00:32:e7:15:8f:29:82:2e:70:b3:c0:da:89:8e:69:
b5:3a:78:c0:26:77:0d:3d:68:8e:4f:8b:38:bc:46:9e:ef:90:
b2:96:8e:c6:e9:ba:32:09:05:6a:ab:99:5c:92:57:03:2a:16:
a6:78:8d:88:d5:a6:b6:f5:b6:7a:94:89:01:08:cf:47:e4:74:
9e:78:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:05 2026 by rpki-client