Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: iuMo7e9vA8Yg4phGPnczDPjABejfNFC0apgafQQg/GY=
Subject key identifier: 84:BF:D7:45:92:3E:C9:12:E0:71:D8:BC:C1:BA:52:11:69:54:77:87
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 019D2B176A2A03E899E1C501D24283900D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 1303
Signing time: Thu 26 Mar 2026 17:00:47 +0000
Manifest this update: Thu 26 Mar 2026 17:00:47 +0000
Manifest next update: Fri 27 Mar 2026 17:00:47 +0000
Files and hashes: 1: 9z2R7mR7CTqEMhJ2KlrHCYJ3vjc.roa (hash: FvuJb6Wc0/pGsiV3BQi7hOtAMeCwlp8+eAq8AekfMKM=)
2: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: pW9EnmsR4XPP8HKVnxft/fg7KCfzUrnnrXm5yvnKt3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:6a:2a:03:e8:99:e1:c5:01:d2:42:83:90:0d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Mar 26 17:00:47 2026 GMT
Not After : Mar 27 17:00:47 2026 GMT
Subject: CN=84bfd745923ec912e071d8bcc1ba521169547787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:2a:1c:11:22:fb:4c:37:81:9d:60:bf:cb:
c9:f7:35:0a:fc:f7:41:3f:91:71:ae:83:7c:50:e0:
ad:60:4e:de:c6:db:24:e8:ee:e4:16:a5:b6:90:e9:
28:cb:6b:eb:9a:21:8b:1f:c2:33:e7:7c:ef:69:ac:
cc:d5:37:2c:21:a7:88:d9:1f:3f:6f:4d:09:4c:7c:
32:6b:48:28:74:5f:f4:d3:6b:d6:04:f0:06:ca:5a:
fb:b4:5f:a0:81:87:43:73:dc:ea:0f:16:a9:d8:21:
ba:88:96:6f:d3:92:5f:c1:cb:5e:62:8d:7a:3f:84:
c0:39:5c:8d:49:98:d1:36:b9:a5:e7:a4:aa:b0:69:
ca:eb:a0:8f:57:0b:39:5c:a8:22:38:b3:6b:db:b3:
43:4e:64:80:7a:2f:c1:23:8a:a4:e4:23:93:53:8e:
6f:ad:59:39:e2:f1:d7:d6:2f:e9:5c:31:41:13:de:
b4:fe:f6:17:87:37:25:78:87:3f:03:43:20:3f:cd:
4c:9c:59:f3:f7:27:d2:49:de:32:cd:a4:f5:e4:32:
f3:84:64:21:25:81:43:92:26:65:39:26:a8:d0:b3:
fc:8e:4d:54:13:cc:e9:b7:f6:5f:e3:5f:83:e7:4d:
f3:c0:7d:d9:24:17:a0:8f:53:5f:c6:e7:ee:5a:c1:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BF:D7:45:92:3E:C9:12:E0:71:D8:BC:C1:BA:52:11:69:54:77:87
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f8:ab:21:21:1f:1c:61:fb:fb:f2:44:f2:3d:ef:04:75:0f:
d9:7d:56:52:26:f9:53:71:63:23:e9:59:be:71:50:82:1a:1b:
02:58:6b:7c:c9:93:09:07:da:da:34:de:12:9d:e9:dc:ef:30:
b0:3c:c1:c1:91:bb:e4:73:52:e0:8f:b3:d5:65:69:ba:48:ea:
7d:47:c7:46:92:d9:9b:95:c0:d2:18:b8:b2:4f:f4:4e:e1:c4:
bd:df:c9:e8:ca:de:9f:8b:fc:7e:27:55:86:26:7d:a1:b2:b9:
8a:35:6d:ef:bf:58:10:c7:20:8c:8a:7e:02:93:e6:00:d5:06:
7a:db:2f:bc:1b:8c:34:ee:c0:b0:ae:2f:2c:18:8f:24:39:35:
60:2d:ff:47:d5:53:7a:80:38:54:f6:e2:c2:ea:37:82:c7:cd:
cb:2c:dd:69:10:12:49:ec:40:ca:ca:d8:bf:d2:67:bc:6a:ad:
be:53:de:31:1d:73:80:2d:16:17:eb:c0:e1:9d:6c:4d:5b:a3:
31:fb:ff:f0:f7:ff:e6:5f:ac:fe:b8:33:7e:ca:38:65:ce:f9:
7b:2a:4c:48:d9:25:00:c3:2d:c7:c7:40:75:79:25:97:27:f5:
98:26:70:a4:09:71:ad:75:24:a8:76:c1:c0:5e:1d:3c:44:72:
72:c9:be:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rF2oqA+iZ4cUB0kKDkA0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDg2YjY3ZDg5ODk2NTNiYWViNjhiOGQyNGFiOWU5YmQw
Y2FmMmEwHhcNMjYwMzI2MTcwMDQ3WhcNMjYwMzI3MTcwMDQ3WjAzMTEwLwYDVQQD
Eyg4NGJmZDc0NTkyM2VjOTEyZTA3MWQ4YmNjMWJhNTIxMTY5NTQ3Nzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1wqHBEi+0w3gZ1gv8vJ9zUK/PdB
P5FxroN8UOCtYE7extsk6O7kFqW2kOkoy2vrmiGLH8Iz53zvaazM1TcsIaeI2R8/
b00JTHwya0godF/002vWBPAGylr7tF+ggYdDc9zqDxap2CG6iJZv05JfwcteYo16
P4TAOVyNSZjRNrml56SqsGnK66CPVws5XKgiOLNr27NDTmSAei/BI4qk5COTU45v
rVk54vHX1i/pXDFBE960/vYXhzcleIc/A0MgP81MnFnz9yfSSd4yzaT15DLzhGQh
JYFDkiZlOSao0LP8jk1UE8zpt/Zf41+D503zwH3ZJBegj1NfxufuWsHKHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIS/10WSPskS4HHYvMG6UhFpVHeHMB8GA1UdIwQY
MBaAFA4Ia2fYmJZTuutouNJKuem9DK8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQt
NjIyYmI0ODk5ODg3LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQtNjIyYmI0ODk5ODg3
LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvirISEf
HGH7+/JE8j3vBHUP2X1WUib5U3FjI+lZvnFQghobAlhrfMmTCQfa2jTeEp3p3O8w
sDzBwZG75HNS4I+z1WVpukjqfUfHRpLZm5XA0hi4sk/0TuHEvd/J6Mren4v8fidV
hiZ9obK5ijVt779YEMcgjIp+ApPmANUGetsvvBuMNO7AsK4vLBiPJDk1YC3/R9VT
eoA4VPbiwuo3gsfNyyzdaRASSexAysrYv9JnvGqtvlPeMR1zgC0WF+vA4Z1sTVuj
Mfv/8Pf/5l+s/rgzfso4Zc75eypMSNklAMMtx8dAdXkllyf1mCZwpAlxrXUkqHbB
wF4dPERycsm+Sg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:03:20 2026 by rpki-client