Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: Ve6MVURs1AmYe6mdrjSofYo26onFaIB8wnHHBBvIpI8=
Subject key identifier: 38:06:C4:7B:E0:9B:CE:39:63:29:43:03:AA:DE:EF:58:12:CE:02:C1
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 01A05A0DD05EEF8684A5A983BFA8C6D3D29D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 0ACE
Signing time: Mon 31 Aug 2026 23:00:49 +0000
Manifest this update: Mon 31 Aug 2026 23:00:49 +0000
Manifest next update: Tue 01 Sep 2026 23:00:49 +0000
Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: J++Sc2hsyYMAmt9duRb08QjECrLARlNxmQu8X1zzKck=)
2: qdFP8iSD0Z_J4wvN-DjLd-7BFwQ.roa (hash: 0D/tNJqnYIvzeRQq9p/CHZuxh+SBEqxg5rvNHFpn3cY=)
3: vrCign6erTM1LbQRKP4h0IonXBQ.roa (hash: AQYpWzYbq4r9zz5A/4U8pWZOmJvv2qppgX/OMFbKwks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:0d:d0:5e:ef:86:84:a5:a9:83:bf:a8:c6:d3:d2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Aug 31 23:00:49 2026 GMT
Not After : Sep 1 23:00:49 2026 GMT
Subject: CN=3806c47be09bce3963294303aadeef5812ce02c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1e:2a:46:91:a0:4a:26:d3:47:d5:48:6c:8c:
23:f3:84:a0:17:a3:0c:45:e4:0c:a7:99:92:e1:82:
71:0c:90:6e:13:0a:68:55:b7:d2:dc:69:10:46:64:
6b:a5:93:ee:ac:00:23:ff:b8:c9:60:98:27:ce:19:
bd:16:4e:e3:49:5f:a6:92:f6:43:4d:21:35:9c:7c:
b3:20:2c:10:d4:91:26:e2:46:d8:be:e3:c7:dc:a4:
84:93:b9:9c:13:33:dd:ef:ca:36:b4:23:b4:30:83:
4e:51:af:d9:bf:a0:76:6b:15:b6:c5:02:92:60:bf:
f1:9a:08:b0:b9:f0:c1:d9:f3:d2:0e:84:ec:c7:10:
7d:64:81:29:df:d5:3f:3a:52:73:c7:0a:c8:35:2e:
99:ba:dc:e8:91:54:58:da:ad:18:01:f3:f0:e5:ab:
30:31:d0:ca:50:af:b1:2a:82:89:96:c8:ec:b1:f5:
5d:26:76:4c:ee:46:59:5c:72:7a:e1:74:fb:a1:7e:
65:1c:e1:8d:02:65:bd:5a:f9:0d:a7:69:cf:f1:41:
a3:17:7e:ff:0c:71:e7:19:97:0e:99:49:37:a4:c5:
ad:4a:37:25:0c:ee:88:ca:c1:b7:3e:bd:8a:81:7c:
77:f3:45:17:82:86:f0:42:42:32:b4:b4:20:a6:49:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:06:C4:7B:E0:9B:CE:39:63:29:43:03:AA:DE:EF:58:12:CE:02:C1
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:49:a4:32:7b:db:c5:c4:63:fb:6c:69:85:25:f5:6e:eb:c0:
ff:7d:0e:e6:7e:d7:01:d6:f4:b5:92:99:be:67:0d:4f:da:13:
44:f9:80:e1:9b:7f:17:c4:03:32:07:13:c9:b5:f0:fd:15:a6:
c3:79:8b:5f:1f:ee:8b:92:58:89:c9:52:96:40:f6:d2:a8:3e:
c7:6d:f8:c2:66:a0:df:fc:f3:85:42:ad:7f:1e:a6:f3:52:51:
0b:e7:20:e1:e2:00:82:52:47:c4:e7:b6:2f:66:f0:5e:42:b2:
0f:e5:8b:d9:b6:c8:08:71:12:ce:ea:7a:90:b4:77:40:02:ba:
8f:f3:41:85:a2:80:58:f5:b7:00:27:cf:7e:4a:ba:06:74:5c:
c1:a7:c4:04:7c:0b:4c:eb:10:eb:37:fe:62:79:b9:eb:d2:b9:
ed:8d:d7:96:8e:91:be:e2:c6:bc:43:dc:08:9a:7a:64:86:2b:
72:ff:30:63:9c:b8:bd:35:6b:46:34:e5:c2:ca:3b:fb:97:90:
97:b5:16:3b:7f:91:eb:70:96:71:a3:a8:fe:19:88:13:02:0d:
e6:c1:76:6e:5a:7d:7b:56:65:24:c3:bf:c8:84:9e:90:8c:a7:
3f:57:19:42:4e:e8:24:d0:42:70:5d:52:a4:db:a1:23:a8:46:
c6:d1:b8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:41:08 2026 by rpki-client