Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
File: DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json)
Hash identifier: jvZtYj0FRpLN33Jl0QztusfOEuRAfECZrHijUr0msbo=
Subject key identifier: DE:D0:44:C9:26:96:6A:AC:0A:53:0D:8E:67:4F:9C:74:59:99:B9:D8
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial: 019DD541233DA5175778E769C6D61A7CCECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
Manifest number: 18E3
Signing time: Tue 28 Apr 2026 18:01:48 +0000
Manifest this update: Tue 28 Apr 2026 18:01:48 +0000
Manifest next update: Wed 29 Apr 2026 18:01:48 +0000
Files and hashes: 1: D32i6_dCWTSsyvln6Op_fVc7ifQ.roa (hash: Al7b3A0tyoRmZ6j5Fdgg5aD1e2Ddf8niF7ufLQSci6A=)
2: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: IIrQEXG5QGeh8YFyTOP4Yu8dpCpnQ1lk2d7CW8OcaLk=)
3: cRdmmZiNILryID4MaoZH-egP0Pc.roa (hash: Tc3P5pw52D848VbuoEwG61qEEaFgbEGdqefrzUmOWZA=)
4: dO_oeTKff3dNZT_GL6N0iMSDLeA.roa (hash: U9kjCpU+QQfnTA2jCeD/iAdC4QIXldj/AsRqVA98Jco=)
5: hKslTlGWTrYnNFRq7nm02w7iSks.roa (hash: hx/Lg8Qct01wevwfLicpLCIZWwNva1xX/icDKHDKOOo=)
6: qsPJeU-C_65tmjEWpGQYQUIEajo.roa (hash: 1cn7hAG7OagxW4P/nzGgq4cV1HKNDko3iBj1s+1Q88U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:41:23:3d:a5:17:57:78:e7:69:c6:d6:1a:7c:ce:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Validity
Not Before: Apr 28 18:01:48 2026 GMT
Not After : Apr 29 18:01:48 2026 GMT
Subject: CN=ded044c926966aac0a530d8e674f9c745999b9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:ca:88:4c:86:73:8c:29:88:de:9a:fb:a1:
a5:1e:a2:f1:4d:6b:23:6b:d7:e7:1b:f3:a6:c5:f5:
fd:46:d7:8c:aa:c2:c1:64:9e:d3:a9:9d:88:5f:bf:
8d:d7:65:fa:9c:7c:5c:23:35:66:09:9d:72:9c:77:
90:38:ee:de:4f:27:34:22:02:9d:d4:94:84:db:a1:
ac:55:6b:b7:16:89:e9:70:27:f6:51:82:c5:e3:ba:
5a:0a:13:bf:d9:dd:92:73:df:9c:b1:98:72:e7:03:
38:2b:64:09:84:55:ff:69:1e:f9:ba:ab:c8:cd:da:
e5:65:9d:97:ba:a2:e7:6e:0c:2f:85:ae:54:4b:ae:
4c:67:af:dd:a5:10:9e:90:c1:c1:b3:a9:c0:b9:da:
9a:ea:b8:3d:a0:47:82:5e:95:f1:7d:21:03:c7:a3:
3a:3a:36:72:f3:18:ba:cc:c5:43:07:6e:72:35:f3:
2f:7d:6f:13:c4:7d:7f:b9:ce:64:f1:2e:80:5e:30:
59:94:0f:47:7a:d9:6c:44:a7:2e:f4:60:09:9d:4d:
81:5d:99:88:ee:b4:96:ce:e7:17:a1:a4:b2:35:e0:
e3:5b:7d:b7:9a:79:73:e2:30:f4:1a:7d:38:c0:1c:
2c:9a:ec:b6:1b:c6:55:1b:9e:89:67:da:ec:90:ef:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D0:44:C9:26:96:6A:AC:0A:53:0D:8E:67:4F:9C:74:59:99:B9:D8
X509v3 Authority Key Identifier:
keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d0:86:d1:bc:e3:21:b9:87:5c:b8:b4:d0:37:9c:ec:c6:8e:
d3:be:1a:33:9d:b9:c4:ec:1d:c5:c3:1b:c1:08:b6:17:c9:28:
a2:b8:c3:9a:a8:89:00:06:52:80:57:d2:08:1b:f6:7a:d2:82:
22:e9:d6:63:35:ba:12:77:7f:51:6e:56:04:46:32:33:54:f6:
4f:8a:ed:c6:5e:b2:5e:ba:a8:be:9e:fd:ca:27:ec:67:0c:64:
16:97:8c:17:64:bc:1d:a1:9f:67:11:b7:ce:2a:43:8e:1b:2d:
ac:63:94:72:4b:dc:d9:3e:98:3e:43:cb:95:90:ab:27:19:3e:
a2:42:3b:ab:4c:b7:84:94:e3:d8:51:c5:12:d0:34:ea:c4:13:
df:c0:35:d1:9e:14:14:e3:9a:06:03:23:87:f9:a1:e2:d6:0c:
8e:c9:f5:f0:c4:1c:8a:bb:cf:86:db:c5:0a:24:90:13:59:ce:
96:17:36:8d:b5:56:b6:8f:28:44:49:0f:3f:be:61:51:5b:7e:
32:99:50:12:41:c0:ef:1d:a1:2e:03:36:d6:e1:32:f0:71:e2:
e1:e7:d0:a5:e4:0d:2d:d8:b7:53:b0:81:74:cd:95:12:b4:d3:
cc:18:63:8e:e0:36:48:27:1e:a6:ab:a3:3f:05:77:f0:a2:c4:
be:23:bf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 22:37:07 2026 by rpki-client