Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: Tcw8Pgw1ZuHOtAKCYgw+Sdt61AgPhvA7F/3LzKgUFTA=
Subject key identifier: 7B:E3:56:DD:F1:7A:B5:0F:A8:66:09:2F:91:BC:9C:D1:E9:7F:99:50
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 019D254C350EC30CCB45A6C2C9145C06D904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 14:00:44 +0000
Manifest this update: Wed 25 Mar 2026 14:00:44 +0000
Manifest next update: Thu 26 Mar 2026 14:00:44 +0000
Files and hashes: 1: 8TaBsBYidW6NwN4w-r-_-frpmPw.roa (hash: d3cj9imIBJIrG7w+OMuxucJCXGk/PoAG60c7YkaGWUU=)
2: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: 3H00Vk63HxGjnRmflPn8A2hBq1TrRL/dCppbtROMfBI=)
3: cfuyV7WY5uCzefphkg9dkFiDF4o.roa (hash: 56j+8wClcw9KajdQHM4PT6tZ5VXaRrrlOf4m/1pMO8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:35:0e:c3:0c:cb:45:a6:c2:c9:14:5c:06:d9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Mar 25 14:00:44 2026 GMT
Not After : Mar 26 14:00:44 2026 GMT
Subject: CN=7be356ddf17ab50fa866092f91bc9cd1e97f9950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:aa:78:4c:25:d6:04:e8:d0:9e:a9:61:20:
7d:b4:4f:c1:72:d8:90:c6:9e:84:df:02:ac:45:29:
82:fc:bd:35:db:00:a7:3b:98:1d:22:c7:8f:af:bd:
8e:7d:45:80:be:8b:8d:c6:91:4d:df:3a:81:1e:58:
70:a4:c8:de:64:b0:6f:26:a9:d8:19:b1:3d:2f:d4:
3f:dc:72:53:a9:55:c6:67:15:09:be:09:09:2e:87:
e5:73:9e:84:5c:ae:d5:7a:7c:90:d9:70:51:89:d8:
a8:33:b8:23:1e:d7:f5:83:14:0b:c9:f1:8e:7e:1c:
1f:e8:20:63:d6:1d:6d:1d:c1:88:62:fc:f2:4a:59:
4d:bc:06:d6:89:b8:99:c2:39:cc:65:cc:84:e2:e1:
17:70:f6:90:70:b4:b9:05:00:a4:2a:5a:12:5e:56:
23:25:b2:0c:70:e9:45:50:9f:4c:c8:a6:8f:42:18:
9f:c5:90:58:3c:b9:38:2b:83:dd:32:9e:2a:4d:0b:
f8:bd:90:b1:91:21:4d:2c:db:37:09:02:8a:4e:30:
9a:a4:9d:40:52:83:81:bd:9f:79:65:82:f3:67:84:
27:67:02:c5:9e:22:dd:57:ed:96:7e:85:1a:b9:81:
e1:7c:e9:98:fa:21:26:9c:7e:17:9d:6e:d5:65:96:
25:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E3:56:DD:F1:7A:B5:0F:A8:66:09:2F:91:BC:9C:D1:E9:7F:99:50
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:26:d3:93:65:37:6e:1f:6d:d0:ad:0a:57:3a:67:32:3e:bd:
c9:ce:6d:5c:bd:7c:ca:f0:7e:8d:c2:6d:0e:73:6f:1f:fb:b9:
5c:22:2a:0f:25:9e:57:d3:0e:0e:24:ed:58:06:44:2d:1f:29:
e5:fc:f0:ad:c7:31:5c:d8:50:9d:64:7e:ff:73:32:97:04:d7:
ee:db:1b:63:ac:be:35:ab:d6:2f:af:a4:08:0b:bc:47:b3:76:
04:4e:92:72:75:1d:c5:5f:91:88:5c:90:2e:c5:35:c1:f3:72:
65:09:c2:c2:a9:68:9e:99:4b:9f:1e:8c:1a:31:8a:8a:2e:49:
17:df:5d:60:ad:b4:cf:d0:da:f1:ec:dc:f3:90:7f:e6:3c:45:
c3:ee:11:cd:03:47:ec:46:d7:49:eb:88:4c:0d:05:cf:ab:43:
01:d0:a8:ac:f3:3d:c6:87:b5:74:bd:9b:46:3c:f2:f9:f8:5d:
8d:91:45:42:7a:a0:f6:d8:44:6a:d7:3d:11:74:29:f0:b7:4f:
e1:58:d7:28:aa:fb:4d:ed:4d:ad:36:4d:c5:b9:27:46:9a:43:
05:19:68:9c:47:1d:3f:66:c3:bf:e2:46:61:14:0e:fb:15:c9:
08:70:0b:74:bf:e2:3b:1f:e4:09:bd:f4:22:d4:70:b3:c1:cd:
b5:9f:a5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:01 2026 by rpki-client