Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
File: DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json)
Hash identifier: O6xeEKvbnPFS1JEzKNASpLhEuKJuw0XtLgYNqZDPN9M=
Subject key identifier: F9:F0:49:32:BA:13:C3:29:AC:61:6F:73:0A:5C:84:C8:2E:CE:5B:7C
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial: 01A09057CDF0EA26B76141F53474A4D7C5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
Manifest number: 1A4D
Signing time: Fri 11 Sep 2026 12:01:08 +0000
Manifest this update: Fri 11 Sep 2026 12:01:08 +0000
Manifest next update: Sat 12 Sep 2026 12:01:08 +0000
Files and hashes: 1: D32i6_dCWTSsyvln6Op_fVc7ifQ.roa (hash: Al7b3A0tyoRmZ6j5Fdgg5aD1e2Ddf8niF7ufLQSci6A=)
2: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: RoRGHIVdPB/UbHNONQvoPmek+0y4gLZ52HOqxgFDuak=)
3: cRdmmZiNILryID4MaoZH-egP0Pc.roa (hash: Tc3P5pw52D848VbuoEwG61qEEaFgbEGdqefrzUmOWZA=)
4: dO_oeTKff3dNZT_GL6N0iMSDLeA.roa (hash: U9kjCpU+QQfnTA2jCeD/iAdC4QIXldj/AsRqVA98Jco=)
5: hKslTlGWTrYnNFRq7nm02w7iSks.roa (hash: hx/Lg8Qct01wevwfLicpLCIZWwNva1xX/icDKHDKOOo=)
6: qsPJeU-C_65tmjEWpGQYQUIEajo.roa (hash: 1cn7hAG7OagxW4P/nzGgq4cV1HKNDko3iBj1s+1Q88U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:57:cd:f0:ea:26:b7:61:41:f5:34:74:a4:d7:c5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Validity
Not Before: Sep 11 12:01:08 2026 GMT
Not After : Sep 12 12:01:08 2026 GMT
Subject: CN=f9f04932ba13c329ac616f730a5c84c82ece5b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b2:08:57:63:13:2e:da:02:dc:be:7d:cc:fe:
49:38:ad:65:b3:b4:9e:b2:58:e7:4c:d0:3e:fc:2e:
84:54:9a:6c:3d:48:c1:72:ba:24:3d:9f:9a:ac:9c:
87:2b:1f:ef:a0:d4:09:35:81:1d:bb:96:e0:71:00:
c8:7b:5d:c2:f1:e0:1f:fc:55:1f:c9:06:e9:a7:1f:
0c:87:1d:d8:3a:af:08:dc:33:80:c1:6c:5b:b9:1f:
9e:86:24:6b:85:34:c5:4c:9c:c5:fd:2c:9b:65:69:
c8:7f:4a:01:59:9d:26:0e:b2:78:60:34:6e:ab:2d:
66:bf:ca:0f:76:6e:49:d4:92:f5:a2:c4:7b:a5:64:
f8:2e:33:22:f0:25:38:e1:4f:95:60:13:ae:c7:64:
28:b0:b6:22:f9:4d:d8:57:09:78:9b:0e:3a:b0:7d:
54:48:63:cc:9c:a4:a2:11:e8:1c:11:4c:79:96:27:
e4:30:bd:9c:56:3b:2b:ee:c3:f2:51:c6:d6:ad:cf:
cc:73:cc:5c:09:fd:7b:23:d7:ac:90:86:dd:7b:73:
e5:51:70:0c:03:90:cb:51:1a:4e:12:97:a5:9d:54:
90:87:96:ad:54:d8:27:ee:44:46:9d:63:cd:e9:3d:
4e:6f:ce:d8:79:fa:32:ba:c2:31:7d:df:33:3b:65:
32:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F0:49:32:BA:13:C3:29:AC:61:6F:73:0A:5C:84:C8:2E:CE:5B:7C
X509v3 Authority Key Identifier:
keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e6:64:21:e0:95:05:d9:67:fc:91:98:89:5a:97:f4:de:32:
e2:fb:75:4e:ea:2a:09:1c:c4:7d:cc:99:40:50:1e:da:8b:13:
1b:fb:be:be:3b:e3:68:8e:89:94:a4:57:b0:53:ab:6a:76:34:
60:0d:46:fb:93:31:8a:a0:9f:fd:04:c1:0d:33:f7:c6:a3:0b:
c5:e8:bf:d6:a1:e6:9b:13:b7:c1:ec:ab:60:a3:a3:a6:78:98:
6d:7d:22:21:0f:23:e3:6c:ce:79:63:6a:8d:79:53:0d:9a:07:
b6:29:8e:88:2a:15:7f:4b:6f:93:3b:8b:80:49:16:0e:f4:50:
2c:01:65:38:17:14:41:9d:6d:85:cb:fd:6f:8d:b4:57:40:66:
be:f9:b1:8b:38:80:1f:eb:71:63:7f:bc:0d:56:cc:9b:e7:0a:
4a:77:7e:99:f6:b3:0d:20:9d:28:39:e7:cf:84:fd:e5:03:3c:
cd:1b:d9:a4:cd:f8:71:b0:c2:39:5c:34:81:4b:78:71:02:48:
aa:74:08:e2:41:c4:94:bc:c2:10:96:39:82:f4:e8:40:3f:8d:
a7:91:5b:22:22:a4:f2:82:84:f3:03:d7:ba:ec:4a:3e:3e:5c:
ba:bb:34:2e:6d:57:0c:79:b0:ac:4f:53:c4:5b:2a:ed:34:56:
82:c4:76:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:09:35 2026 by rpki-client