Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
File: dggs9uV3xDJnGZEkoogbNzLO9AQ.mft (raw, json)
Hash identifier: Wfg76lE6FDvH/OnoFhgdYGD4oUVYk6uqKqKeEdzqV68=
Subject key identifier: 99:55:55:F2:50:36:26:AE:9D:1E:74:BF:C7:1C:23:4E:DE:EF:BF:80
Authority key identifier: 76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04
Certificate issuer: /CN=76082cf6e577c43267199124a2881b3732cef404
Certificate serial: 019D3AC145EC192A8844234FB2C85F0A7454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 18:00:37 +0000
Manifest this update: Sun 29 Mar 2026 18:00:37 +0000
Manifest next update: Mon 30 Mar 2026 18:00:37 +0000
Files and hashes: 1: dggs9uV3xDJnGZEkoogbNzLO9AQ.crl (hash: 3NbCx/gf873U+QevQ4SbeIvLj8Vp1YbYW9o5pr95etA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:45:ec:19:2a:88:44:23:4f:b2:c8:5f:0a:74:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76082cf6e577c43267199124a2881b3732cef404
Validity
Not Before: Mar 29 18:00:37 2026 GMT
Not After : Mar 30 18:00:37 2026 GMT
Subject: CN=995555f2503626ae9d1e74bfc71c234edeefbf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7d:fb:cc:c9:ca:0b:f9:c5:94:b3:40:66:bc:
1b:25:5c:9f:61:2f:61:11:d8:e2:30:41:d3:e1:20:
21:68:63:c8:a6:63:66:eb:da:78:1d:8d:85:54:90:
4c:ef:14:75:1e:2f:cd:65:8b:f8:ef:9b:30:41:c9:
38:8b:92:03:c9:80:85:d3:4a:3d:11:cb:c4:1b:b4:
ce:86:63:bd:d2:de:9d:8e:77:a8:2e:3a:7a:89:29:
ec:96:cb:29:a2:53:66:0f:9b:ef:bd:24:db:17:e3:
b3:a7:95:6d:3a:c7:fe:6e:fd:e4:dc:ea:1c:00:5e:
82:fe:9a:22:e6:8e:49:9d:93:3c:b8:48:12:0b:8b:
52:4a:26:be:d7:eb:e2:6c:a3:de:91:52:00:66:28:
33:a6:ee:c3:1f:ec:3c:cb:c8:4b:60:cd:a8:b6:b6:
f3:6f:1e:39:4a:15:d7:d9:d6:6b:05:f2:dc:91:9c:
7c:da:22:37:67:86:5d:26:82:bd:e3:c6:87:9a:a5:
ec:98:39:ec:e7:9e:40:8b:56:17:e6:9e:53:bb:e1:
7b:bb:4f:98:6b:81:f8:e0:43:00:40:69:2a:22:d6:
d1:15:e7:ae:e2:80:bf:c0:3d:18:29:c8:e5:38:92:
c5:e6:07:03:cf:19:bd:e8:db:b5:9f:25:8e:6e:3e:
b9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:55:55:F2:50:36:26:AE:9D:1E:74:BF:C7:1C:23:4E:DE:EF:BF:80
X509v3 Authority Key Identifier:
keyid:76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:99:9a:8e:1c:ec:ba:d0:f8:86:ca:bd:d5:6c:ef:ff:60:41:
94:dd:88:20:2c:d2:03:1e:ee:35:53:cd:af:54:71:0a:f6:80:
f8:39:15:5b:d5:d4:02:43:bf:71:78:e3:ec:cb:a0:ee:65:77:
3b:5e:f7:41:72:51:80:9b:11:20:cb:fd:35:a0:68:df:e0:2c:
f3:95:80:77:75:6d:d5:91:16:27:09:ae:a5:2a:c5:97:03:25:
6d:ba:1a:d5:21:cf:8d:59:e2:9c:6e:9e:27:89:ac:4c:a0:5d:
6d:74:0f:02:ce:a0:13:44:57:27:aa:f8:98:ee:15:ae:5a:cd:
2c:4b:0a:7b:5e:0c:6e:04:74:b4:b8:75:b2:01:e8:d5:33:5e:
4a:40:d3:69:6c:ec:19:0b:e1:fe:1d:b4:51:a0:84:a9:bf:a9:
42:ed:f9:06:b4:a9:ca:e0:41:82:88:2c:38:31:3b:90:40:af:
7d:23:c3:bb:c0:34:0f:01:e5:1e:76:b8:8c:70:6d:78:60:3d:
a1:8d:7d:de:81:7f:80:a7:d1:e7:93:7e:35:06:a4:06:b9:e6:
6c:1f:5a:d6:f8:cc:68:1a:fa:ff:65:25:c6:cb:2b:b5:ee:f0:
25:a6:d9:30:b5:fd:74:c0:71:a7:9d:1e:50:82:1d:8d:4e:d5:
e7:59:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:19 2026 by rpki-client