Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json)
Hash identifier: +Noi/SPVn/247kbe5ZAH0GdVEzTFV2CMw/6r0nP/2kg=
Subject key identifier: 8A:51:88:12:84:94:08:EF:CF:F1:8F:89:39:D8:20:92:D0:D0:B4:FD
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial: 019F197A5901842AAEB63A11079EEA07D6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
Manifest number: 10A6
Signing time: Tue 30 Jun 2026 17:01:16 +0000
Manifest this update: Tue 30 Jun 2026 17:01:16 +0000
Manifest next update: Wed 01 Jul 2026 17:01:16 +0000
Files and hashes: 1: D0GEjoznOI2frIxZsC2NiRuqe58.roa (hash: izqFp+9eKQWS0LIy0mUZV6cpF1Hakb27ARgQaCVrstg=)
2: DXniqTjiM_fLeFwbMoM6gQE-lG8.roa (hash: pstH5qAZQNYtXKP4tLhcl9j2PXNJLupw87wVdJwV48s=)
3: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: 9R4VsOFVyL91dP17nV5MAg0pzczDEhEGmP5GImeU6Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:59:01:84:2a:ae:b6:3a:11:07:9e:ea:07:d6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Validity
Not Before: Jun 30 17:01:16 2026 GMT
Not After : Jul 1 17:01:16 2026 GMT
Subject: CN=8a518812849408efcff18f8939d82092d0d0b4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:17:1f:0f:a0:47:9c:06:6b:80:a4:0d:54:
82:e7:fe:f8:7c:5b:a7:15:48:9e:2c:e7:5a:95:35:
5f:1c:78:99:61:d0:8f:82:45:ec:ef:fc:c6:60:cc:
87:32:c7:d2:88:7e:be:7f:7b:dd:25:69:33:74:94:
f2:8d:59:34:b5:47:16:69:99:9e:52:90:32:11:8d:
18:b6:88:86:8c:77:c6:fb:bd:95:e5:12:95:1f:7e:
8a:e6:b2:74:a1:99:24:06:74:61:5d:9d:33:c7:d7:
7b:fa:00:2d:25:7f:ed:3b:d4:f8:92:77:ac:c7:88:
e6:e5:cc:55:09:42:86:40:a8:88:00:2b:a5:c3:99:
00:be:9c:52:a6:70:ad:ad:48:62:b1:42:00:9b:21:
d5:7f:9a:99:34:6f:3e:06:5d:d2:39:44:b1:e8:b5:
b8:fb:fb:86:14:d0:8f:12:19:bb:0b:7f:df:4f:54:
69:9f:8d:c7:53:e5:27:92:47:8c:b6:ae:e8:7e:8b:
66:3a:42:21:c3:b0:42:7c:36:e7:d7:00:37:35:9e:
98:12:8a:1b:80:82:8a:8e:d1:99:72:22:e1:9c:20:
79:19:6c:c5:f2:7e:fa:6a:b7:00:4d:53:38:3d:21:
7a:89:f5:e6:65:cb:99:ad:7e:e4:e3:ad:c5:60:b1:
6b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:51:88:12:84:94:08:EF:CF:F1:8F:89:39:D8:20:92:D0:D0:B4:FD
X509v3 Authority Key Identifier:
keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4c:f1:8a:91:d0:4e:34:ab:c4:fc:35:09:8b:a4:40:e8:67:
5c:c0:4c:b3:51:eb:bb:5c:54:37:56:00:aa:11:10:69:c8:25:
36:fe:7b:66:c3:14:8c:97:cc:0d:24:0d:28:e3:06:4b:91:0a:
51:69:5c:d6:2b:82:1e:47:b6:09:97:d8:24:61:ba:d1:32:f0:
49:d5:3d:f6:3b:2b:7f:9d:4f:77:a3:2d:1d:a8:4a:85:b3:aa:
5d:a9:14:05:3e:34:c1:3a:74:d5:d1:84:85:f9:28:a2:52:7f:
30:05:e3:eb:01:6f:93:03:58:e9:23:c0:55:52:4e:ac:52:b3:
97:73:cc:3b:e8:ea:4f:6a:5f:c4:7d:b1:02:9f:6f:22:4e:70:
c4:dd:03:85:52:4a:a1:cb:79:72:78:0c:85:35:81:06:31:0b:
9f:0b:81:0c:50:95:11:a0:4f:7c:cc:ff:b5:3a:6b:3b:ee:3a:
b6:fe:28:28:a9:00:1e:2c:2a:5b:b4:87:8c:84:66:f7:63:f3:
8b:ee:69:41:6b:f9:ad:5e:34:c2:d3:1f:32:54:5b:a5:82:6b:
a8:51:34:29:35:c6:27:2a:6f:5f:3b:5d:b8:d0:5b:bf:fa:a1:
fe:e7:48:89:13:df:5e:c4:a5:d9:4b:78:1a:b4:0e:de:a2:90:
de:c6:d6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:34 2026 by rpki-client