Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
File: Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft (raw, json)
Hash identifier: mJdf8ddK4Shjcg+khTTGmJQLSRzHsQ0PcZWsS9/Zm1c=
Subject key identifier: 53:A0:D3:4A:5F:8D:A6:DA:79:D2:4A:AD:2F:F2:C0:6B:64:C8:D1:35
Authority key identifier: 0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
Certificate issuer: /CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Certificate serial: 01A0D8DEB91354762C0E4E05D8CB8BEBDF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
Manifest number: 025D
Signing time: Fri 25 Sep 2026 14:01:09 +0000
Manifest this update: Fri 25 Sep 2026 14:01:09 +0000
Manifest next update: Sat 26 Sep 2026 14:01:09 +0000
Files and hashes: 1: 1-ZA3tjZXtTnljb1_LyYKoCeyOLg.asa (hash: 1+ooJiGuRehijv0BAu/DjLMQWAM8WG1GvP8acPYp+Sk=)
2: Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl (hash: 5e3NCoSRd47DfME2148IHbl5GkXKpKwmwDkn/7q1Tz8=)
3: dO3RNAISfOv0O9_8IUROa2pKet4.roa (hash: C48BcGhKAuvtDpW8RyICY4ut3E1OUd47JnUb0vzluWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:b9:13:54:76:2c:0e:4e:05:d8:cb:8b:eb:df:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Validity
Not Before: Sep 25 14:01:09 2026 GMT
Not After : Sep 26 14:01:09 2026 GMT
Subject: CN=53a0d34a5f8da6da79d24aad2ff2c06b64c8d135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:29:d2:06:d6:b9:7e:b3:42:09:31:cf:61:b8:
d6:09:be:bb:e2:7b:c7:05:ee:ff:b9:b5:ce:f4:25:
02:20:4f:24:16:e2:a9:60:d0:f2:b3:13:b0:2e:43:
63:1d:aa:94:38:a0:08:b5:41:25:c6:12:b3:ee:78:
4f:69:2c:08:01:2e:11:46:58:e1:c0:2c:98:1a:c4:
11:04:a6:26:96:ba:0c:f5:87:c0:d3:96:41:8c:be:
ac:7b:cf:41:f8:50:ef:4c:5b:8f:38:04:98:05:7b:
0b:5a:58:f9:6d:c4:fa:ed:83:37:69:e2:c1:cc:0d:
db:25:a3:e3:d4:26:59:7b:0f:79:e2:86:09:87:61:
f0:5b:36:91:52:0b:bc:1e:f8:fc:46:0d:6e:b5:3e:
5f:a5:c4:7f:84:61:83:5b:07:10:56:c8:bd:be:ae:
94:0d:cc:f7:f7:61:a7:2e:05:ad:e3:7b:29:59:62:
aa:a6:e1:02:3e:81:9a:52:76:82:33:f4:eb:11:30:
b1:82:72:1e:28:07:15:c3:dc:69:a4:62:ca:95:3c:
e5:a7:95:3d:35:b3:98:f4:4d:99:f5:2a:fd:59:91:
0e:01:77:0d:27:d0:38:91:99:a0:63:46:45:f6:46:
d0:0d:a9:64:75:21:46:32:7a:86:d0:a6:1f:d9:de:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A0:D3:4A:5F:8D:A6:DA:79:D2:4A:AD:2F:F2:C0:6B:64:C8:D1:35
X509v3 Authority Key Identifier:
keyid:0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:09:f7:df:d3:b1:06:09:73:23:02:83:12:f6:c6:19:47:e2:
13:26:97:27:5d:01:b1:f3:fc:8e:3f:55:d3:66:fc:f2:ef:13:
cc:ff:10:88:8f:51:26:bc:f1:28:83:ff:92:7c:ca:56:44:8e:
b8:d3:a0:63:41:d4:b8:bd:e2:4f:e2:68:7c:8e:ce:9d:46:90:
e5:8f:86:ce:e9:e0:0f:f9:2f:4f:f2:6a:b1:80:3d:f4:26:e0:
aa:29:3a:3a:2f:35:1b:7e:98:95:66:a9:d5:aa:1b:d3:82:69:
5f:d5:ce:10:42:e2:4f:ef:a2:d8:a1:e5:12:19:2b:bb:6f:49:
b2:07:ca:17:67:8b:6a:f2:1d:fb:a4:8d:a4:af:57:21:d8:a5:
d0:59:fd:55:75:1c:ae:98:1a:6c:82:bc:a8:2e:94:67:65:33:
94:3d:43:86:dc:fa:49:34:7f:cd:6f:5e:a1:25:a4:a3:72:80:
ed:52:1d:31:33:8b:05:a8:7e:71:1a:36:e1:c5:b4:77:f3:84:
fa:c2:5d:c5:17:98:9e:86:55:d5:9c:f2:a9:5f:61:7a:d4:38:
0b:7f:ab:be:2a:91:6d:62:98:40:34:35:ee:2e:68:c3:32:6e:
e2:b9:7e:f4:c8:10:56:26:f2:8a:a4:5f:d7:64:a8:e4:a9:d0:
2a:2e:0e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:45:18 2026 by rpki-client