Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json)
Hash identifier: fUkt3cHHPY8ohI9Q7d2Rn9qILnqTyYpOCxwPBdCo0yo=
Subject key identifier: 1C:20:81:60:6A:E1:4A:5F:4E:F3:4B:5E:CC:04:4D:06:97:C1:EC:79
Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Certificate serial: 019D389C1CFC29F195477D99DEA66F4F75A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
Manifest number: 0FAD
Signing time: Sun 29 Mar 2026 08:00:48 +0000
Manifest this update: Sun 29 Mar 2026 08:00:48 +0000
Manifest next update: Mon 30 Mar 2026 08:00:48 +0000
Files and hashes: 1: D0GEjoznOI2frIxZsC2NiRuqe58.roa (hash: izqFp+9eKQWS0LIy0mUZV6cpF1Hakb27ARgQaCVrstg=)
2: DXniqTjiM_fLeFwbMoM6gQE-lG8.roa (hash: pstH5qAZQNYtXKP4tLhcl9j2PXNJLupw87wVdJwV48s=)
3: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: 75om+K5JAzzlyMp5YHwHxqcHyk+hTkl9fH/aWAZgxYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1c:fc:29:f1:95:47:7d:99:de:a6:6f:4f:75:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8
Validity
Not Before: Mar 29 08:00:48 2026 GMT
Not After : Mar 30 08:00:48 2026 GMT
Subject: CN=1c2081606ae14a5f4ef34b5ecc044d0697c1ec79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:ba:ce:cd:cd:74:a2:52:f7:7f:d2:30:1d:
98:ed:7d:68:ea:52:76:35:b2:5a:82:50:3f:98:7e:
9c:38:5e:ed:a6:77:ed:fc:6d:53:63:54:7e:fa:64:
43:d4:86:e7:2f:a8:09:bc:5f:95:85:81:81:b1:ff:
2d:b6:cd:c0:24:23:2b:95:3f:22:21:d1:21:7a:2f:
55:1f:a2:71:72:ae:b7:98:e6:31:74:a2:dc:55:96:
a6:c2:0b:cf:35:57:2a:48:19:66:62:a0:b6:bd:99:
c6:76:79:d9:f3:3d:ab:de:db:72:3b:04:ca:d7:4b:
71:e9:21:a6:56:ac:fc:76:a5:24:c7:8f:db:25:e2:
80:21:eb:be:49:9f:61:b1:b4:68:14:94:44:04:f1:
ae:8f:2a:af:e9:03:2a:8d:bd:70:f2:1c:f5:65:47:
f7:79:51:52:0b:c3:35:86:15:2c:48:3d:94:da:af:
25:ca:54:70:3f:d4:08:e0:f5:25:de:c9:9f:84:cf:
ef:4d:84:17:ec:0a:92:ad:78:d8:6b:ca:23:4e:27:
39:7c:36:75:5f:9c:40:d8:cb:9d:ac:82:df:af:81:
3b:da:18:c5:3c:22:11:a7:2d:14:f4:96:a0:35:0e:
1b:7e:d5:eb:81:7d:30:15:66:54:26:91:d8:7b:07:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:20:81:60:6A:E1:4A:5F:4E:F3:4B:5E:CC:04:4D:06:97:C1:EC:79
X509v3 Authority Key Identifier:
keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:91:65:58:b5:9f:34:7a:c5:20:7b:99:18:03:2a:43:a1:d5:
8a:cc:e3:18:44:4a:43:26:3e:97:80:6a:82:b3:92:4d:9d:b0:
36:c6:5c:28:f6:19:f7:34:09:52:99:6a:45:5a:48:11:cc:78:
f2:92:9d:96:7c:4f:ee:3f:b0:be:42:97:54:59:fb:4c:f4:60:
e4:27:51:b1:f9:02:6a:22:b8:50:ff:09:de:f7:a8:73:c8:48:
cd:7b:60:30:25:94:61:88:12:eb:9c:7b:77:f6:2e:a1:b5:ca:
62:fd:e9:c0:86:12:58:35:c7:34:06:b1:2d:ab:69:47:68:2e:
c7:55:be:0a:c5:e2:f9:57:c5:89:05:ee:6e:f3:ea:84:86:1c:
4d:5f:81:56:2b:8b:24:93:76:53:01:52:05:69:a0:d2:07:3a:
ee:f6:29:d8:0b:a1:17:16:64:b2:b2:2a:43:8e:02:94:89:d5:
e8:58:1c:b3:88:a8:e9:59:c0:a7:f7:ec:c9:fe:ea:df:ef:86:
92:a3:71:f9:c9:f1:f0:58:d8:01:3f:46:d7:f8:56:22:d0:e6:
d2:94:97:25:95:86:6b:c2:75:12:1a:b9:ad:7e:de:c3:65:78:
3f:16:f2:0a:5b:34:64:c2:41:f2:9c:a1:c3:3c:ee:62:76:e9:
e1:11:df:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:18 2026 by rpki-client