Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier: kGZeFjaNht0t6U7DofIQGqaRNGv6UBuUAKuO13IQM+g=
Subject key identifier: 94:6D:19:2F:B7:5E:E1:D0:FC:77:87:20:F8:32:9E:7F:FC:7F:FE:1D
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 01A0B6528B8B062D60299DE8E64053EE828D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number: 1888
Signing time: Fri 18 Sep 2026 21:00:57 +0000
Manifest this update: Fri 18 Sep 2026 21:00:57 +0000
Manifest next update: Sat 19 Sep 2026 21:00:57 +0000
Files and hashes: 1: 5JNKBp2r9M45FJugrqd38a7ElEI.asa (hash: MvuXBFRNg5JF/r2GjsNqe9ohlNYkSIF8QFqYGxrBem8=)
2: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: jkSU6WzWsp1/4+nf80/6CWFeMpKZrAGLZnhWjg1Z9Nk=)
3: swjIGqN6DN3Ca974iRXFGBijp9c.roa (hash: rW/KrfsjqzaW573dxssu8kVIiwDSL2ZDsZ8f8WBDZhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:52:8b:8b:06:2d:60:29:9d:e8:e6:40:53:ee:82:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Sep 18 21:00:57 2026 GMT
Not After : Sep 19 21:00:57 2026 GMT
Subject: CN=946d192fb75ee1d0fc778720f8329e7ffc7ffe1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:73:1f:6c:87:27:ae:d3:ae:c7:c1:50:1a:
22:fa:c1:cb:43:6d:26:c4:62:98:d7:4b:b0:cf:d6:
78:00:c1:cb:4e:35:37:a3:23:c6:83:1e:b5:27:6f:
3d:92:34:ab:fc:fe:30:d3:7b:d0:14:8e:e8:4a:96:
8b:38:73:32:e3:2a:f0:c3:23:07:ba:91:d1:af:a2:
ba:56:7c:f6:b6:9d:83:d9:a6:28:d0:41:1c:28:ce:
a0:a8:ad:1b:3a:0d:1d:97:3e:8f:08:9f:be:e5:a8:
83:36:0a:6f:5a:4d:c9:5a:45:ff:87:bc:54:86:97:
60:cf:49:5c:a7:3c:85:9e:25:f1:ec:93:3b:1d:5f:
fd:10:3d:46:2b:53:88:ed:ce:35:f5:c9:19:92:98:
b5:a8:5b:f3:27:cb:4f:b0:0f:c5:48:fd:72:59:77:
64:0b:3d:48:8c:0b:b3:96:ca:10:31:55:bb:3e:32:
0c:71:8c:06:06:13:ca:8e:53:51:b2:b5:7b:a0:ce:
73:7e:97:62:3b:37:11:c4:fd:56:3b:d2:d7:76:47:
ff:02:8a:50:24:68:d0:b8:7e:7e:b0:e4:5c:27:45:
05:df:bb:fc:d7:d0:54:db:97:b6:6e:22:ee:85:f9:
51:b4:ed:93:31:da:37:fc:3b:e6:5f:76:89:a4:6f:
7f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6D:19:2F:B7:5E:E1:D0:FC:77:87:20:F8:32:9E:7F:FC:7F:FE:1D
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:26:76:d4:a6:5e:b1:3f:2a:06:f9:8b:81:82:38:4c:59:1e:
68:0f:ac:12:fc:1d:96:da:f2:3c:f4:50:61:e8:48:76:0a:f7:
8a:e6:21:2b:3d:ee:e7:ac:57:7a:e1:92:2f:be:22:25:e5:2b:
6c:53:d6:85:dd:94:71:50:9d:83:cb:dc:8b:24:db:e2:53:71:
b7:2b:5c:78:84:64:7f:f5:51:48:11:c2:39:d0:5d:8f:52:11:
9e:f2:ea:42:b5:b9:9d:42:ec:78:91:98:d7:f3:9a:93:84:50:
76:cc:88:84:c8:d3:65:d0:67:e0:61:ed:47:c1:2b:25:7c:3f:
33:67:14:ca:bb:93:41:30:89:30:f8:fc:f0:3d:80:e6:a4:c5:
d2:57:07:c7:6a:c1:44:a4:47:e2:17:f1:93:f1:5f:32:c0:ce:
88:2c:d2:bb:47:36:ae:bd:68:25:62:69:8d:2b:3f:df:eb:d6:
83:71:a9:67:7a:be:87:ce:d4:1c:28:a9:c9:b5:03:09:93:cc:
76:0b:50:48:35:e8:bc:57:a8:46:a1:c4:7e:c3:8a:86:81:eb:
f3:de:da:35:a6:5e:d1:bb:03:79:db:9b:19:de:78:0a:76:56:
6c:a0:e0:0a:f8:34:12:21:b7:c5:76:d9:d5:9e:52:41:94:47:
4c:2a:51:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 01:11:17 2026 by rpki-client