Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: fNxbLahTnlMpQK6JfzCc/vAHrJ1U4HziXE2TBGmxtdQ=
Subject key identifier: 42:C0:D7:EA:03:53:19:F5:04:A2:F3:A5:DC:54:67:F7:BC:15:BA:F3
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 019E88A2C3B032935AE92CC1DF461E4A2D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 09DD
Signing time: Tue 02 Jun 2026 14:00:28 +0000
Manifest this update: Tue 02 Jun 2026 14:00:28 +0000
Manifest next update: Wed 03 Jun 2026 14:00:28 +0000
Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: /GyELjKjtklEOMyi7I2a+bCj/VJFzwHs9JBCyIzrj6w=)
2: qdFP8iSD0Z_J4wvN-DjLd-7BFwQ.roa (hash: 0D/tNJqnYIvzeRQq9p/CHZuxh+SBEqxg5rvNHFpn3cY=)
3: vrCign6erTM1LbQRKP4h0IonXBQ.roa (hash: AQYpWzYbq4r9zz5A/4U8pWZOmJvv2qppgX/OMFbKwks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:a2:c3:b0:32:93:5a:e9:2c:c1:df:46:1e:4a:2d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Jun 2 14:00:28 2026 GMT
Not After : Jun 3 14:00:28 2026 GMT
Subject: CN=42c0d7ea035319f504a2f3a5dc5467f7bc15baf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6c:df:a4:fe:27:ad:8c:08:37:83:0e:f6:58:
88:0e:77:4c:bd:0d:b3:53:19:1b:e3:01:90:db:cf:
5f:53:0a:1d:11:80:23:61:c6:23:53:b6:a2:3d:89:
4a:c9:ca:d8:42:bc:ef:da:e7:a7:f6:d4:52:9e:9e:
c1:ef:16:c3:42:e7:ca:bc:05:1a:fd:a8:94:0a:78:
97:88:9e:e0:47:a7:24:6a:81:1f:87:92:58:a9:93:
81:df:f5:01:41:f9:1f:95:4b:f0:ba:d2:71:df:24:
ab:af:6c:64:f4:9f:fd:d0:db:62:68:4c:4e:31:82:
a7:78:aa:c3:56:b1:0a:a3:fa:18:7a:4c:2f:4a:9c:
33:9e:c8:db:a8:a7:76:42:6d:28:1e:36:05:75:1b:
8c:53:0d:e5:1f:4f:00:40:35:94:b2:28:b5:b4:6c:
a3:12:b4:0c:05:27:55:0d:a2:f1:8a:c6:f2:cc:eb:
dc:46:51:dd:1c:c3:9d:69:33:8c:88:43:a9:12:3b:
9a:57:8a:c2:35:61:83:88:21:83:c6:86:28:7d:73:
7c:b0:e4:80:88:45:3e:71:6a:0a:62:c9:8d:21:9d:
2a:07:5f:9d:49:26:ec:c1:e0:f8:70:d7:4b:a4:71:
5f:d2:bb:24:a5:7a:cc:36:d0:99:3e:f7:5d:8f:47:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C0:D7:EA:03:53:19:F5:04:A2:F3:A5:DC:54:67:F7:BC:15:BA:F3
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:d4:ef:23:5b:24:99:c4:71:c5:0a:37:1b:d6:1c:d8:c0:9b:
e4:19:25:09:51:b1:ee:7e:66:ea:9b:b0:21:61:7f:69:bf:8f:
21:3b:97:9b:48:d5:74:02:a8:04:fc:6c:78:4d:f3:94:38:c6:
e1:fb:b5:76:c2:50:78:15:93:10:f7:32:25:b1:67:46:73:cc:
9b:b1:d5:ef:53:ad:ad:9d:21:99:38:72:8a:73:ca:cd:a1:ee:
19:a2:85:ec:f3:c5:4b:fc:6a:5d:2d:08:b2:dc:5c:c2:08:9f:
3c:d9:c4:f8:0c:72:dd:60:56:c1:39:70:95:e4:ac:50:dc:ee:
68:8b:a6:6e:bc:63:1f:fa:db:e0:5d:f5:3b:88:b7:d5:95:43:
70:d4:b5:d6:32:46:4c:9e:5a:1b:44:56:7c:62:63:88:43:2b:
db:f7:5f:33:cb:3e:62:32:35:27:cf:bc:ac:a9:ff:bc:a7:e4:
77:3e:cd:36:a8:29:a3:1f:ab:b3:7d:e9:08:6e:5c:34:2e:87:
6e:26:32:b1:02:8b:7c:c4:4e:3b:dc:e3:11:69:dc:23:70:6d:
9e:bb:60:bd:9f:9b:99:75:af:4c:3b:c4:68:94:e4:0c:51:c9:
41:5e:9c:19:6d:f5:cb:35:1a:9b:63:2c:18:b2:a8:06:1f:79:
c2:b9:6b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:57:32 2026 by rpki-client