Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
File: Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft (raw, json)
Hash identifier: Wcw6ZPSaKKMBohfVf9oG1p5jywiWuJ9+JU0gOTQLO/o=
Subject key identifier: 2F:CE:A8:0A:99:8C:50:D3:6D:EC:D7:1E:3C:6C:79:BE:78:B8:6C:E6
Authority key identifier: 0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
Certificate issuer: /CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Certificate serial: 01A02545337660704977D98E65D0BF909720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
Manifest number: 0200
Signing time: Fri 21 Aug 2026 17:01:27 +0000
Manifest this update: Fri 21 Aug 2026 17:01:27 +0000
Manifest next update: Sat 22 Aug 2026 17:01:27 +0000
Files and hashes: 1: 1-ZA3tjZXtTnljb1_LyYKoCeyOLg.asa (hash: 1+ooJiGuRehijv0BAu/DjLMQWAM8WG1GvP8acPYp+Sk=)
2: Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl (hash: 8KQtwBOA7CbdtBnsL1swLYwPqrgG3vqFSa/2LAvnC4I=)
3: dO3RNAISfOv0O9_8IUROa2pKet4.roa (hash: C48BcGhKAuvtDpW8RyICY4ut3E1OUd47JnUb0vzluWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 17:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:45:33:76:60:70:49:77:d9:8e:65:d0:bf:90:97:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Validity
Not Before: Aug 21 17:01:27 2026 GMT
Not After : Aug 22 17:01:27 2026 GMT
Subject: CN=2fcea80a998c50d36decd71e3c6c79be78b86ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:cf:11:28:ab:54:ce:84:e3:46:fa:2f:61:
ee:31:55:35:88:f7:75:6c:f8:71:a6:dc:25:da:f4:
9a:8a:5e:b3:90:59:f8:05:c6:0a:11:c7:67:06:26:
bd:f9:e8:b9:f7:91:eb:34:d3:90:45:c4:fc:cf:ba:
88:b2:9f:7f:81:f0:cc:44:9c:1b:c7:6f:a8:c6:a9:
9f:f3:c2:b4:8c:34:d8:a7:6a:98:54:84:57:7d:3c:
fb:2e:7b:d6:a8:dd:99:8a:d1:15:16:d8:4a:8f:10:
d9:bc:62:a0:d9:49:84:d2:d2:13:7c:29:b0:fa:59:
25:29:7d:9a:2a:82:11:42:dc:dc:5f:89:04:ad:bb:
1b:a1:9e:58:62:4a:2d:fe:40:de:66:87:d1:cf:39:
e9:bb:41:a9:5a:6c:cc:5a:12:92:20:ad:44:91:a4:
d9:7d:19:c0:f5:1d:ad:8e:e9:0a:ac:df:31:fb:99:
47:f9:f8:af:b4:f4:4e:e6:50:b7:d7:08:c7:96:57:
2c:48:c9:10:79:6c:89:5b:6b:05:e1:1b:31:63:03:
57:64:cd:71:e1:05:47:5a:ca:a7:04:29:bf:b6:dd:
89:a6:87:22:43:c7:f5:35:9a:ac:58:68:8b:b2:8a:
1b:85:e8:34:f0:7f:a4:9d:78:69:79:f8:5c:b8:52:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CE:A8:0A:99:8C:50:D3:6D:EC:D7:1E:3C:6C:79:BE:78:B8:6C:E6
X509v3 Authority Key Identifier:
keyid:0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4c:a1:c4:6a:f0:cc:7b:03:ab:0d:c2:e5:84:9a:d5:47:ce:
9c:4e:e4:d1:65:d9:e5:7d:a6:eb:4e:1d:39:b4:be:e1:57:de:
71:47:b8:aa:c3:c4:6e:87:f6:ff:ef:c4:11:92:81:b5:a8:0a:
74:cb:14:63:fe:d3:00:ac:41:fb:1e:fa:0f:2f:83:cc:68:07:
59:ac:77:00:06:5d:8b:74:62:39:6f:9e:44:a6:e2:af:15:72:
b5:23:d8:95:71:ea:33:e6:4b:b6:d7:88:f8:29:5e:9c:96:9a:
7d:72:99:df:15:05:cd:e9:2f:6d:d3:f7:88:38:98:bd:18:cf:
5a:40:30:8e:62:e0:b5:bd:11:7d:17:48:95:79:79:42:f6:da:
ee:4b:fd:f2:e9:7d:63:5b:84:87:47:56:77:1f:f2:9f:55:c3:
9a:fb:b4:31:62:bc:b4:18:bf:e0:ca:b4:b7:56:f7:10:1a:c7:
5a:6d:70:d9:e0:eb:c3:38:49:25:ce:06:31:c8:4c:26:4f:b7:
13:fd:f4:b1:4b:2e:d2:f2:c2:0b:4c:bf:09:05:2b:81:98:3b:
ac:df:59:95:33:d1:c2:0d:9b:18:14:79:99:4b:cb:51:ba:71:
98:2f:12:6f:e3:65:b1:74:a9:d8:ad:5f:79:95:e9:e7:d5:d1:
12:ac:63:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 03:23:38 2026 by rpki-client