Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
File: DGgkFYtzDEQWfqdzqXchjMYvQWo.mft (raw, json)
Hash identifier: n0ZHwEb/CdD6Yilj90/PMOwaqDZnRpjQ9ZGIhssShQk=
Subject key identifier: 43:25:8D:DE:7A:52:B7:E1:B0:E7:CF:4B:4C:42:72:17:7A:8F:DA:F2
Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
Certificate issuer: /CN=0c6824158b730c44167ea773a977218cc62f416a
Certificate serial: 019D3A1CCC67CC8ABDE43244D59C70C9A915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
Manifest number: 0D9B
Signing time: Sun 29 Mar 2026 15:00:59 +0000
Manifest this update: Sun 29 Mar 2026 15:00:59 +0000
Manifest next update: Mon 30 Mar 2026 15:00:59 +0000
Files and hashes: 1: DGgkFYtzDEQWfqdzqXchjMYvQWo.crl (hash: QAORHx7962+nuJ5i1Xf2I1ipLSXtgJhwLVqAskp8+2k=)
2: utyeED3clQkm3ZphFz4r6XrH5aM.roa (hash: 1/LGmMoXZvPyyNB1HdA73Zq1ZKG58JPMftBJCzzv2rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:cc:67:cc:8a:bd:e4:32:44:d5:9c:70:c9:a9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a
Validity
Not Before: Mar 29 15:00:59 2026 GMT
Not After : Mar 30 15:00:59 2026 GMT
Subject: CN=43258dde7a52b7e1b0e7cf4b4c4272177a8fdaf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:f0:61:af:18:fe:e8:b9:b4:dd:0f:fe:19:
67:0b:39:4c:1d:25:7d:f2:bb:19:27:82:06:d1:53:
47:90:d5:96:9a:56:a7:c8:09:7e:98:83:6d:72:9d:
c8:d5:45:82:66:5d:ee:37:77:e5:92:31:91:28:b9:
f9:a6:bd:a5:dd:09:33:46:79:5f:29:4d:df:0c:9c:
f4:c8:8c:d0:82:8c:29:d8:8f:fa:4f:3d:f0:46:f8:
ed:de:47:25:12:b1:89:9a:b6:8b:c4:c4:ef:cb:82:
2d:22:b5:0b:21:0a:54:ce:b2:dc:33:ba:db:3b:68:
7d:d9:50:60:63:a9:2c:3d:4f:69:67:83:2f:f4:91:
bf:ee:f3:fc:72:6d:07:0d:ee:83:e0:24:84:b7:a7:
14:3f:87:0a:47:a4:53:1c:db:f6:7a:b9:c7:51:d9:
0f:c7:55:13:d0:50:9f:de:49:21:15:36:83:a3:af:
cf:c2:14:da:0d:fb:fa:82:6f:2a:56:37:98:3a:a9:
c5:13:e1:0a:e0:d8:87:25:4a:5f:78:ef:06:28:39:
7d:fa:9e:4d:ce:8c:91:5a:0b:a5:64:97:1d:13:4c:
f9:b6:aa:88:76:8f:88:1c:b8:64:2c:2c:9f:b8:ec:
19:50:b7:83:7b:d9:59:a3:37:46:86:98:cc:ac:85:
18:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:25:8D:DE:7A:52:B7:E1:B0:E7:CF:4B:4C:42:72:17:7A:8F:DA:F2
X509v3 Authority Key Identifier:
keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b3:d6:0b:50:8e:59:be:5a:96:7e:13:66:b2:aa:19:1c:02:
35:ac:02:d1:68:ef:06:ab:df:2e:9b:d5:dc:52:d9:9d:63:00:
6c:a5:ce:f7:26:63:1d:75:25:eb:dd:c5:58:4c:c9:d8:4c:70:
66:56:95:71:48:89:32:b0:1b:42:c2:47:de:50:95:a6:7a:e0:
3e:b8:fa:62:c9:60:ef:8c:d0:cb:e4:ce:b2:88:7b:2f:25:cd:
fc:29:1f:20:d8:6b:38:10:47:88:9b:e8:c2:66:e2:62:4b:90:
00:4a:64:51:01:08:d7:0a:39:d8:20:fd:64:23:97:ad:8a:b1:
5e:82:d7:cc:47:86:da:67:a2:af:d7:85:b3:16:6c:16:67:db:
cd:a8:f2:f3:1f:e8:ea:d2:7f:f0:6d:6b:be:57:7c:3f:59:d0:
55:bb:ab:95:c5:21:61:34:33:a5:3f:9a:2c:e8:e3:9c:79:ef:
e3:08:56:b3:67:73:b7:ea:74:e5:aa:57:fe:1e:c8:89:39:d7:
a2:1c:f0:df:b0:68:49:11:25:94:98:a4:43:86:71:e1:83:bd:
43:0c:ab:6f:68:7a:18:e9:c5:95:3f:cb:53:62:00:39:a0:8d:
72:be:7f:2b:6a:2d:55:c0:97:b6:3d:60:ea:63:11:93:98:04:
da:c9:d6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:57:50 2026 by rpki-client