Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
File: Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft (raw, json)
Hash identifier: SheFO8Y5OrWtlIm+RsmvKOU8Ze77VtZ9NQpiQGGnUMQ=
Subject key identifier: E1:90:61:0E:54:26:2E:6F:94:22:54:19:F3:38:A9:A6:BD:73:21:9D
Authority key identifier: 0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
Certificate issuer: /CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Certificate serial: 019F8EA264D511635BBBD654C23495ABFB5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
Manifest number: 01B2
Signing time: Thu 23 Jul 2026 11:00:35 +0000
Manifest this update: Thu 23 Jul 2026 11:00:35 +0000
Manifest next update: Fri 24 Jul 2026 11:00:35 +0000
Files and hashes: 1: 1-ZA3tjZXtTnljb1_LyYKoCeyOLg.asa (hash: 1+ooJiGuRehijv0BAu/DjLMQWAM8WG1GvP8acPYp+Sk=)
2: Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl (hash: oiieE3N2rGR4+C1Vyr40o/WlirlRVFPKIGODXj6F2ic=)
3: dO3RNAISfOv0O9_8IUROa2pKet4.roa (hash: C48BcGhKAuvtDpW8RyICY4ut3E1OUd47JnUb0vzluWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:64:d5:11:63:5b:bb:d6:54:c2:34:95:ab:fb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Validity
Not Before: Jul 23 11:00:35 2026 GMT
Not After : Jul 24 11:00:35 2026 GMT
Subject: CN=e190610e54262e6f94225419f338a9a6bd73219d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:1f:9e:1f:31:4e:c0:54:73:84:3d:b9:e0:
8a:78:d3:19:03:6a:ab:ff:6e:89:34:7d:e4:38:ef:
e6:32:29:d7:6e:8f:79:d8:ac:57:83:97:de:25:04:
5c:39:55:e2:d3:20:7f:9f:8c:74:fa:7c:01:33:eb:
a6:2e:d4:35:0e:50:59:ec:e2:ee:3c:76:c8:91:39:
a1:35:dd:bc:53:d3:75:4a:d1:12:18:fc:c0:24:71:
74:16:56:c0:6b:98:f5:01:70:b0:48:00:8a:c1:91:
66:d9:f1:5e:a0:ed:f3:30:16:4e:1a:12:f6:e5:39:
0c:85:9f:ac:a0:eb:95:4c:aa:bb:eb:47:ba:9b:4a:
ee:39:36:81:83:f0:ed:18:01:bd:d9:58:13:76:c7:
9e:21:10:4f:7e:15:8a:ac:c3:a8:92:ce:5f:07:28:
16:7e:65:ba:b6:77:28:57:d4:37:0a:ae:9f:0d:92:
14:82:f3:98:f9:c5:f3:38:0c:c4:66:b9:93:da:33:
ba:ab:5f:73:95:19:8a:5e:1f:79:92:8f:4a:87:d6:
51:7e:6e:78:b9:6e:f2:74:fd:89:4a:b8:a1:6c:93:
a1:a3:59:7d:22:25:ed:19:9f:22:da:ca:af:fc:f3:
f5:b1:d9:23:98:bc:13:eb:24:b8:d3:83:96:b6:a4:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:90:61:0E:54:26:2E:6F:94:22:54:19:F3:38:A9:A6:BD:73:21:9D
X509v3 Authority Key Identifier:
keyid:0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:65:bf:d2:dd:35:b1:c9:0a:26:88:20:ff:df:b9:88:38:da:
94:6f:77:7e:74:f4:2c:7f:8b:02:05:e8:5a:fc:22:cd:04:28:
87:00:4a:23:1e:de:cf:50:46:04:b3:43:28:d2:02:f1:e8:4b:
f7:87:0f:be:e4:b4:b8:2f:58:da:e3:55:8c:a2:61:b5:ac:a0:
83:41:30:bf:78:07:9d:59:a9:eb:b1:52:e5:d3:e8:f0:02:ac:
94:65:fa:d9:46:d4:86:30:85:f3:2c:08:38:e4:4d:2e:b2:2e:
e3:bb:a4:6b:50:52:68:58:42:76:61:e9:22:79:5d:ea:62:59:
66:5b:43:d2:c9:79:e1:61:e5:28:d8:94:95:28:31:52:36:34:
f0:7a:a6:ee:99:d4:f7:4c:96:9b:cc:b3:4f:f3:49:2b:db:ed:
7e:cd:13:45:1d:fb:03:cc:41:43:dc:5f:eb:28:c0:ec:c1:7f:
c0:71:15:dc:e5:27:60:87:9d:b8:05:b3:1d:ba:e6:ef:06:16:
03:96:cb:a4:67:c8:9f:36:63:73:20:0a:61:07:36:63:ce:f7:
01:a7:7a:c7:37:56:28:b7:84:16:85:f7:d4:1e:1b:4d:0d:0a:
f5:63:ea:c7:d4:c1:09:ca:c0:15:46:46:28:73:33:67:23:d6:
fb:17:a9:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OomTVEWNbu9ZUwjSVq/taMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMGFkZmY5ZTU5OWM0OTE5N2M2YjU0MGExNTIyNGViNWFl
YWY2ZGYwHhcNMjYwNzIzMTEwMDM1WhcNMjYwNzI0MTEwMDM1WjAzMTEwLwYDVQQD
EyhlMTkwNjEwZTU0MjYyZTZmOTQyMjU0MTlmMzM4YTlhNmJkNzMyMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJkfnh8xTsBUc4Q9ueCKeNMZA2qr
/26JNH3kOO/mMinXbo952KxXg5feJQRcOVXi0yB/n4x0+nwBM+umLtQ1DlBZ7OLu
PHbIkTmhNd28U9N1StESGPzAJHF0FlbAa5j1AXCwSACKwZFm2fFeoO3zMBZOGhL2
5TkMhZ+soOuVTKq760e6m0ruOTaBg/DtGAG92VgTdseeIRBPfhWKrMOoks5fBygW
fmW6tncoV9Q3Cq6fDZIUgvOY+cXzOAzEZrmT2jO6q19zlRmKXh95ko9Kh9ZRfm54
uW7ydP2JSrihbJOho1l9IiXtGZ8i2sqv/PP1sdkjmLwT6yS404OWtqRGJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGQYQ5UJi5vlCJUGfM4qaa9cyGdMB8GA1UdIwQY
MBaAFA4K3/nlmcSRl8a1QKFSJOta6vbfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdyZi1lV1p4SkdYeHJWQW9WSWs2MXJxOXQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mZjY3NjEtY2ZhMi00Yzc4LTk2NmIt
YTAzNmQ5N2M0ZTJiLzEvRGdyZi1lV1p4SkdYeHJWQW9WSWs2MXJxOXQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mZjY3NjEtY2ZhMi00Yzc4LTk2NmItYTAzNmQ5N2M0ZTJi
LzEvRGdyZi1lV1p4SkdYeHJWQW9WSWs2MXJxOXQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGW/0t01
sckKJogg/9+5iDjalG93fnT0LH+LAgXoWvwizQQohwBKIx7ez1BGBLNDKNIC8ehL
94cPvuS0uC9Y2uNVjKJhtaygg0Ewv3gHnVmp67FS5dPo8AKslGX62UbUhjCF8ywI
OORNLrIu47uka1BSaFhCdmHpInld6mJZZltD0sl54WHlKNiUlSgxUjY08Hqm7pnU
90yWm8yzT/NJK9vtfs0TRR37A8xBQ9xf6yjA7MF/wHEV3OUnYIeduAWzHbrm7wYW
A5bLpGfInzZjcyAKYQc2Y873Aad6xzdWKLeEFoX31B4bTQ0K9WPqx9TBCcrAFUZG
KHMzZyPW+xepRA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:54 2026 by rpki-client