Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
File: dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json)
Hash identifier: DPfaKjbP6dtadOECX6ya5hp8wUwvJIZwH+9HFtbpE9Y=
Subject key identifier: 20:02:96:B6:90:9D:AF:D0:1D:5D:9F:90:25:14:11:3D:26:B6:98:2E
Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
Certificate issuer: /CN=74f81a98b487020c98105d6313bcd69de50ac17b
Certificate serial: 019D281698991C5BE3FBC639AE13E6EA72A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
Manifest number: 04D0
Signing time: Thu 26 Mar 2026 03:01:02 +0000
Manifest this update: Thu 26 Mar 2026 03:01:02 +0000
Manifest next update: Fri 27 Mar 2026 03:01:02 +0000
Files and hashes: 1: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: dvXVydqyxMvkoYlNLU8o1M1fOox6Dhx9dAUXz7Zw9wM=)
2: g-cs4KCZKYLgUr-tN_UtNttNg5M.roa (hash: Si0dRFIGYFzZ10R6i6ARJVkpSXUEGLL2gkuxXEnez48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:98:99:1c:5b:e3:fb:c6:39:ae:13:e6:ea:72:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b
Validity
Not Before: Mar 26 03:01:02 2026 GMT
Not After : Mar 27 03:01:02 2026 GMT
Subject: CN=200296b6909dafd01d5d9f902514113d26b6982e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c4:e2:7c:2e:01:74:e4:6f:0a:65:64:aa:69:
28:1c:bf:6c:1a:53:24:25:1a:a6:b8:f3:7f:20:47:
eb:d6:c2:8c:c4:e0:9a:da:2c:6e:d4:8d:62:a6:92:
c3:9b:b8:34:df:dd:83:c8:4c:39:4c:4d:4c:61:b0:
0a:73:8a:fa:53:7d:69:e8:07:9e:db:f4:65:6b:48:
ce:3f:f5:e4:21:08:7a:cf:a2:e1:dc:ed:d4:90:88:
0f:28:1a:c9:f4:04:a8:6c:f0:32:56:53:6b:0b:88:
4f:e3:87:a6:11:a4:25:45:19:1a:d5:ee:1b:eb:e7:
9b:ac:b5:77:38:b4:34:67:bc:96:76:b4:46:04:1d:
fc:e4:f7:f2:4f:7d:63:0f:5e:67:e8:bb:b7:80:50:
09:40:ba:ef:4a:fa:98:41:a8:e7:a4:cb:da:5b:0e:
3b:d8:7e:7e:d3:6c:c7:f2:7e:08:ca:86:a9:4c:32:
63:fb:d0:b1:51:fb:67:a5:90:26:36:61:76:27:2f:
e0:84:62:f9:84:03:07:e8:63:09:66:d0:3f:23:67:
0f:9d:63:0a:a9:46:59:85:de:6a:01:bf:07:e3:7c:
b0:e6:b8:8a:20:96:0a:60:34:cb:a3:69:8a:7f:c3:
d7:f8:d0:3d:95:48:cb:5d:c5:a6:bd:4c:33:1b:0a:
b9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:02:96:B6:90:9D:AF:D0:1D:5D:9F:90:25:14:11:3D:26:B6:98:2E
X509v3 Authority Key Identifier:
keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:71:48:f1:dd:d5:7a:48:53:c0:43:3e:9c:28:79:68:a0:9f:
28:f8:1b:46:7a:d7:d0:10:02:6c:d5:c3:03:b3:d4:3a:18:3e:
44:90:78:8d:4a:09:2f:7d:38:60:06:37:a3:5e:71:7a:c2:36:
ce:d6:1f:bd:bf:36:81:de:67:47:ab:52:55:31:14:68:d2:df:
66:6f:b2:3f:13:05:40:76:ed:49:d7:d8:72:d2:e2:70:c1:c8:
f4:73:b0:90:c7:47:1e:c7:9b:9c:53:39:9c:f7:38:e2:0e:df:
f6:c1:03:a4:bb:76:58:f7:9f:31:e8:5d:74:eb:cd:62:07:ec:
dd:45:7d:e6:32:0f:14:ec:18:a1:75:35:7e:2e:30:2f:f3:86:
f1:41:0e:85:0e:2b:08:66:d2:1a:bf:59:39:5e:1d:79:f2:b7:
b7:6e:8d:a5:5b:4a:eb:91:03:eb:d6:dd:11:42:0d:9f:48:5f:
b7:ea:70:52:2c:80:34:5e:fd:eb:ac:89:35:2f:c7:f1:94:8e:
c2:30:29:f7:8e:36:6d:65:e4:d3:c7:46:4b:c8:e8:41:c2:a1:
0d:dc:64:c6:b8:52:e3:4a:04:62:97:ec:38:b8:60:3f:ae:3b:
4e:59:83:26:85:5e:58:d5:63:61:6b:53:13:ff:ae:ea:64:fa:
85:5c:3c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:53:39 2026 by rpki-client