Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
File: Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft (raw, json)
Hash identifier: u8gID38ZsV+5WYsEkWhoR/MI7RP8XbtLJTWV/QM13FY=
Subject key identifier: FE:CD:85:32:43:68:84:88:B9:40:7B:58:A5:AD:24:16:B3:7E:51:AE
Authority key identifier: 0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
Certificate issuer: /CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Certificate serial: 01A1280CCA5223B692AC17B7BB7C68E727E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
Manifest number: 0286
Signing time: Sat 10 Oct 2026 23:01:28 +0000
Manifest this update: Sat 10 Oct 2026 23:01:28 +0000
Manifest next update: Sun 11 Oct 2026 23:01:28 +0000
Files and hashes: 1: 1-ZA3tjZXtTnljb1_LyYKoCeyOLg.asa (hash: 1+ooJiGuRehijv0BAu/DjLMQWAM8WG1GvP8acPYp+Sk=)
2: Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl (hash: 7cKEzkwAo7NPt3qHnGLsCCMgxO0uLJEl34ZARKY3TQo=)
3: dO3RNAISfOv0O9_8IUROa2pKet4.roa (hash: C48BcGhKAuvtDpW8RyICY4ut3E1OUd47JnUb0vzluWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:ca:52:23:b6:92:ac:17:b7:bb:7c:68:e7:27:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Validity
Not Before: Oct 10 23:01:28 2026 GMT
Not After : Oct 11 23:01:28 2026 GMT
Subject: CN=fecd853243688488b9407b58a5ad2416b37e51ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:df:a6:b5:3b:34:d5:ee:a9:9a:d3:18:a8:e8:
a3:32:6d:bc:41:40:eb:73:9f:b0:7d:ad:3b:e1:3c:
9a:6a:b6:ef:63:a3:20:08:25:cf:60:1f:57:ff:7e:
15:03:3e:ba:00:1b:fc:50:ab:54:7b:a7:39:8b:cd:
20:fc:8d:c2:7e:4d:67:c3:96:b3:00:15:30:f3:81:
58:f0:e0:83:9b:f5:bd:e0:72:c1:46:41:3e:93:1b:
f7:46:2e:fe:98:56:24:f2:5c:d5:55:db:c4:4e:36:
2a:ba:94:bb:94:19:47:e6:d7:8e:6a:c7:5f:fd:33:
57:75:8f:b3:0a:25:3b:d0:b6:50:73:39:24:56:bc:
67:74:48:a1:9f:86:14:ae:9d:88:f5:5d:49:bf:3c:
b8:b3:e7:7d:ef:b3:59:ec:74:6f:0d:f5:a0:79:63:
c0:8f:52:54:01:b1:24:85:ad:0f:15:a5:d4:2f:c4:
ed:aa:7b:d9:c5:44:dc:4b:cd:d3:b8:65:94:53:d1:
01:ad:cc:52:4f:f3:ec:ae:f9:15:17:18:bb:03:ba:
0d:81:86:fa:14:c0:96:43:b2:d6:a2:bc:b6:a5:ef:
d1:c3:62:2d:34:aa:ed:eb:3d:79:c4:bc:6b:68:1a:
12:c0:f7:4b:b7:1a:71:b6:42:00:6d:ab:6e:8d:cf:
a5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CD:85:32:43:68:84:88:B9:40:7B:58:A5:AD:24:16:B3:7E:51:AE
X509v3 Authority Key Identifier:
keyid:0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:dd:14:5d:af:3e:da:09:06:26:70:9a:56:c5:09:e3:86:0d:
08:73:c2:08:33:b1:10:be:82:30:95:1b:88:42:31:21:59:27:
bc:25:63:cf:37:bb:e2:50:bf:22:d9:fb:85:2e:54:6e:df:8a:
ec:62:94:6e:c9:5f:d8:ad:e5:53:be:38:16:7d:79:dd:3c:df:
9a:ff:61:93:2a:7b:d7:a5:fc:13:36:6a:67:81:b8:90:18:33:
0d:97:6d:d9:f3:04:60:b6:0a:22:45:2c:11:c5:e3:1b:f6:bf:
82:db:42:b6:c1:15:f9:9b:c9:20:a2:20:d1:b5:a4:eb:c8:8d:
1d:75:85:55:f3:16:9f:03:f8:4c:f6:be:72:f1:fd:bf:a0:fd:
22:77:5d:0d:4f:19:65:1f:21:5b:4a:9e:ae:3f:27:6e:52:d4:
4a:4d:74:b9:bb:31:88:85:56:e3:44:a0:72:27:03:77:26:26:
e0:02:09:ea:1c:cc:1a:dd:10:f4:72:95:e8:ef:2b:33:28:aa:
bb:93:d4:b2:1e:e6:a1:d2:00:4d:f3:94:7f:f6:f1:f3:61:75:
5f:e3:9b:14:b5:4b:ee:85:60:28:4b:c3:1e:83:29:6a:5c:b1:
2e:ef:e9:28:3c:b0:42:b5:ed:2b:6c:c3:ea:d5:bd:0a:5b:4e:
93:5a:fa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:31:33 2026 by rpki-client