Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/fc2474-5cd2-4eb6-bf95-0a1c457e47d0/1/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.mft
File: Dgmu0Jy-UP0gOzsJglgH-jfKWNw.mft (raw, json)
Hash identifier: Yr9vJsrmuLbLJoD3+qUq4lBXvq8Gqr1qs68pijUuW0k=
Subject key identifier: 1E:64:79:81:64:7B:18:95:AC:CA:15:8A:33:6E:11:6C:9B:DF:C8:20
Authority key identifier: 0E:09:AE:D0:9C:BE:50:FD:20:3B:3B:09:82:58:07:FA:37:CA:58:DC
Certificate issuer: /CN=0e09aed09cbe50fd203b3b09825807fa37ca58dc
Certificate serial: 019D39E5E8D83161C3BE1E451307B0C0117E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/fc2474-5cd2-4eb6-bf95-0a1c457e47d0/1/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.mft
Manifest number: 31
Signing time: Sun 29 Mar 2026 14:01:01 +0000
Manifest this update: Sun 29 Mar 2026 14:01:01 +0000
Manifest next update: Mon 30 Mar 2026 14:01:01 +0000
Files and hashes: 1: Dgmu0Jy-UP0gOzsJglgH-jfKWNw.crl (hash: lWPrkTTKXkZfJEmBqlqpIIZWDe7MX7WCuKlVMmenpVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/fc2474-5cd2-4eb6-bf95-0a1c457e47d0/1/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/fc2474-5cd2-4eb6-bf95-0a1c457e47d0/1/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e8:d8:31:61:c3:be:1e:45:13:07:b0:c0:11:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e09aed09cbe50fd203b3b09825807fa37ca58dc
Validity
Not Before: Mar 29 14:01:01 2026 GMT
Not After : Mar 30 14:01:01 2026 GMT
Subject: CN=1e647981647b1895acca158a336e116c9bdfc820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:87:08:07:6c:8a:e4:6e:ed:14:db:48:bc:
d5:d8:90:23:b2:bb:69:fa:5b:a3:69:33:d6:1b:33:
80:66:5b:eb:25:b0:a0:08:ea:df:70:00:90:c5:74:
c2:31:ef:71:21:b6:35:f6:59:61:0c:cc:17:01:8c:
e4:40:6c:3b:f6:a3:c5:a6:0f:31:1b:3f:5f:7e:44:
d9:c9:02:55:85:f9:0e:d5:16:41:b9:f9:f3:df:e2:
c1:c0:fe:20:e2:53:74:3e:54:78:ec:40:11:5c:ff:
a9:80:ec:30:76:ca:a0:85:43:9f:7b:e5:b7:be:64:
24:be:a0:97:cb:f5:29:9c:b1:d0:61:5a:6f:1b:d2:
ba:62:2d:72:fe:c6:53:0d:3e:d9:bb:9a:bf:94:b2:
5d:b2:fc:e8:99:5a:14:93:72:44:b9:41:02:dd:f3:
fb:1d:04:29:fc:21:5b:a3:a4:6e:26:82:64:df:ef:
99:f2:46:12:8f:4c:81:a8:3f:84:1a:56:2d:c3:ca:
3b:2e:72:50:97:c0:c5:53:3f:e2:a0:ba:51:fe:d6:
34:8d:e3:d3:cb:67:8e:3e:72:45:94:61:0d:db:eb:
4b:cb:6e:61:ae:a9:d2:a5:2e:ff:ad:ad:82:83:20:
36:b0:ff:2e:7e:85:fc:36:f0:49:0f:99:16:cc:b3:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:64:79:81:64:7B:18:95:AC:CA:15:8A:33:6E:11:6C:9B:DF:C8:20
X509v3 Authority Key Identifier:
keyid:0E:09:AE:D0:9C:BE:50:FD:20:3B:3B:09:82:58:07:FA:37:CA:58:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/fc2474-5cd2-4eb6-bf95-0a1c457e47d0/1/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/fc2474-5cd2-4eb6-bf95-0a1c457e47d0/1/Dgmu0Jy-UP0gOzsJglgH-jfKWNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9d:bb:42:3e:8b:df:32:5b:d6:be:84:63:fd:52:d0:fd:20:
83:3f:73:3e:9c:cd:ba:ef:31:85:84:6b:93:f7:7b:d5:65:0f:
bc:3d:ca:9d:55:da:60:55:94:42:19:00:fc:01:ec:b4:af:a8:
c6:66:65:35:f6:9e:78:44:27:e8:ed:ee:8d:07:20:d6:62:f3:
94:ea:88:08:d5:a6:d5:f3:b2:1e:ff:aa:62:a7:a6:58:83:b8:
58:ee:be:50:e9:00:f5:6e:a7:7b:8d:b9:92:d8:24:93:50:25:
9d:a3:96:7a:48:34:79:6c:32:76:ab:1f:f0:89:06:63:74:30:
84:d3:27:ac:c5:e1:da:ed:40:58:ee:ec:a2:c8:b0:a6:28:cc:
e4:0d:de:96:6b:8b:29:6d:a4:c7:64:78:14:50:41:16:07:bf:
9f:77:92:14:8e:e6:82:cd:1c:58:14:c0:53:95:8f:aa:c6:82:
1b:8f:23:63:fa:9e:ae:d8:b3:ca:e9:75:c2:d6:68:e0:de:8a:
e1:56:b8:21:fe:c5:22:36:d5:e7:b9:94:06:1f:6a:30:f6:e3:
55:e8:21:65:16:b4:b3:e6:ae:c9:95:54:67:95:74:c4:0d:ea:
ee:0a:df:53:02:e1:91:34:dc:7d:77:cd:77:06:85:db:91:df:
d3:c5:df:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:11:38 2026 by rpki-client