Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier: K/JCJ3ve0quN5T0ZGlusotjns7munheEf/kdtqHGx/M=
Subject key identifier: 31:76:CE:AF:E2:A0:B5:F2:A8:D2:A7:3D:5B:E5:D4:4B:42:81:9A:54
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial: 019D389BEFBB54E1827553EFAA883FFC472E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number: 092F
Signing time: Sun 29 Mar 2026 08:00:36 +0000
Manifest this update: Sun 29 Mar 2026 08:00:36 +0000
Manifest next update: Mon 30 Mar 2026 08:00:36 +0000
Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: UUG6jeD96G1OyXglfk4TcpoVyXSOrd40OsJ+B0YM4rg=)
2: qdFP8iSD0Z_J4wvN-DjLd-7BFwQ.roa (hash: 0D/tNJqnYIvzeRQq9p/CHZuxh+SBEqxg5rvNHFpn3cY=)
3: vrCign6erTM1LbQRKP4h0IonXBQ.roa (hash: AQYpWzYbq4r9zz5A/4U8pWZOmJvv2qppgX/OMFbKwks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ef:bb:54:e1:82:75:53:ef:aa:88:3f:fc:47:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Validity
Not Before: Mar 29 08:00:36 2026 GMT
Not After : Mar 30 08:00:36 2026 GMT
Subject: CN=3176ceafe2a0b5f2a8d2a73d5be5d44b42819a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:75:96:13:89:bd:49:bc:a8:69:26:8f:09:
2a:f3:28:9e:43:f3:b5:0e:43:40:c2:55:01:b0:88:
70:f6:2c:bf:4e:0c:5b:f6:aa:8d:67:6e:82:fe:5c:
96:d2:ea:80:a9:06:c9:1a:56:cc:4a:6c:6f:aa:d1:
ae:5e:38:b1:00:70:9d:d2:d4:96:b8:fa:4e:57:98:
f0:c7:1d:1a:1e:6c:80:6c:73:63:b3:00:60:8f:1f:
c9:c4:e9:1a:6d:29:05:98:fb:84:b5:2f:95:df:a8:
02:af:7a:35:76:b4:ad:c4:84:aa:b4:da:ec:b7:7b:
ab:25:d0:b8:e9:32:d1:ed:9a:a3:c8:c6:37:39:37:
2e:95:fc:34:c3:86:6c:0c:05:a0:0c:82:4b:29:ce:
da:2c:28:17:2d:c4:cd:db:fe:25:bf:21:15:79:38:
25:8d:14:6d:36:72:a8:f7:02:2e:59:87:ab:76:e6:
95:10:7a:8a:d0:aa:d9:b4:96:f4:17:32:a5:4b:ba:
87:bb:51:81:ce:1d:fe:8d:d9:90:8f:60:e1:40:ca:
41:f0:25:52:95:5f:7a:17:34:50:9b:da:6b:cc:dd:
16:a8:09:d8:fc:eb:64:ee:d9:f1:70:2e:d6:07:be:
0c:c5:ec:af:62:54:7b:e8:f3:d7:71:00:0e:22:52:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:76:CE:AF:E2:A0:B5:F2:A8:D2:A7:3D:5B:E5:D4:4B:42:81:9A:54
X509v3 Authority Key Identifier:
keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f7:7e:0a:1a:d3:3d:f1:fc:05:20:80:3e:45:59:27:ed:1a:
38:8a:b2:8a:77:27:a0:4f:45:e2:e5:24:b9:a6:80:c9:db:9d:
54:9c:c9:20:0d:0c:13:93:be:bb:63:66:01:47:36:6b:ed:5d:
db:35:57:c4:e2:68:77:ab:ff:19:0f:40:98:a6:91:8f:29:dd:
13:b9:ed:c8:d4:6a:2f:e0:0a:a7:17:3a:72:31:e5:f1:1f:71:
6d:27:01:42:9d:23:d0:3c:38:14:df:09:39:f8:a3:ff:4e:89:
21:ed:fb:07:bf:0c:e3:02:cf:9b:b6:ac:aa:24:38:4f:e3:94:
17:94:db:29:65:52:a7:d0:ec:8e:f6:41:59:f6:8d:c0:43:88:
b2:dd:77:d4:24:11:d7:7a:ab:99:30:8e:2d:b3:e5:ef:39:62:
4f:b7:3f:f5:85:d0:bb:29:35:79:94:2c:13:8c:60:e3:72:aa:
b2:d6:8a:f6:a2:d7:1a:48:b0:f1:5e:d2:16:fd:6c:b8:f8:5f:
a2:d8:2d:de:e7:5d:c2:3b:20:64:db:23:24:86:21:53:a8:b1:
51:98:1f:4a:e4:8b:2e:ef:e5:77:7b:94:69:f6:46:31:27:1a:
a1:cc:f1:b9:ab:62:eb:10:32:40:fe:5b:89:fd:f4:de:09:ff:
e5:8c:66:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:08 2026 by rpki-client