Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
File: Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft (raw, json)
Hash identifier: PlTfi3WDrywH3XHOa+W6O8dhFYsOCKe/gcqI99ZhJck=
Subject key identifier: D2:73:25:64:B0:DC:AE:47:A7:66:1B:3A:FD:6D:A4:B0:96:91:02:F9
Authority key identifier: 0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
Certificate issuer: /CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Certificate serial: 01A11C75FD961490027081CDE68AB248F9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
Manifest number: 0280
Signing time: Thu 08 Oct 2026 17:00:57 +0000
Manifest this update: Thu 08 Oct 2026 17:00:57 +0000
Manifest next update: Fri 09 Oct 2026 17:00:57 +0000
Files and hashes: 1: 1-ZA3tjZXtTnljb1_LyYKoCeyOLg.asa (hash: 1+ooJiGuRehijv0BAu/DjLMQWAM8WG1GvP8acPYp+Sk=)
2: Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl (hash: 5MaGVb8zV8hJScUfNkIe9p5vCS8V3dAsE4FXL6eyb3I=)
3: dO3RNAISfOv0O9_8IUROa2pKet4.roa (hash: C48BcGhKAuvtDpW8RyICY4ut3E1OUd47JnUb0vzluWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:75:fd:96:14:90:02:70:81:cd:e6:8a:b2:48:f9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Validity
Not Before: Oct 8 17:00:57 2026 GMT
Not After : Oct 9 17:00:57 2026 GMT
Subject: CN=d2732564b0dcae47a7661b3afd6da4b0969102f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:09:53:30:96:97:79:7b:4e:28:41:62:d9:d8:
35:b3:6a:6e:20:4a:57:e0:79:8c:22:69:90:5f:eb:
4f:24:d9:80:0a:41:9a:31:d4:4b:e4:43:47:be:54:
64:2e:66:8e:13:d2:16:fc:66:4c:61:db:46:c8:5b:
3f:dd:99:65:2f:e1:9f:b4:04:e6:0c:01:fb:d8:9e:
a4:93:92:bd:28:8a:f6:4c:51:ab:f7:38:c9:6b:d4:
72:38:ac:44:d7:ba:09:d5:53:37:70:49:8a:80:7a:
6f:81:04:48:fd:8f:cf:51:3d:94:81:f5:fd:c8:57:
df:b5:df:00:e9:86:3a:14:ab:71:b3:ba:1d:1c:e0:
96:70:78:d4:ba:70:ba:4f:bb:33:49:e8:e2:f8:c8:
48:de:b6:25:8e:62:d9:13:cc:9c:fa:e0:28:78:cc:
e6:4a:17:c5:13:31:0b:46:f3:2d:ee:b6:73:fe:87:
95:07:87:db:17:dc:04:45:c0:33:ac:d6:5b:b6:39:
4e:d9:d8:a4:9b:30:82:fa:d1:f0:25:70:61:78:fc:
33:4d:42:f6:b0:c4:8f:56:e0:53:d5:b3:5d:53:c3:
6e:34:85:e9:bc:80:00:eb:e3:cd:f8:5c:19:29:5f:
fe:2e:0d:25:6a:3b:8d:cb:d8:c3:6d:e2:65:51:d3:
9f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:73:25:64:B0:DC:AE:47:A7:66:1B:3A:FD:6D:A4:B0:96:91:02:F9
X509v3 Authority Key Identifier:
keyid:0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:2a:1e:56:45:4a:80:e4:94:c7:a3:4a:bb:41:8d:9c:e7:33:
d0:c7:82:5c:a8:c0:04:23:39:fc:41:f6:56:6f:2b:62:6d:9d:
49:fa:a3:1a:46:26:ee:be:bb:b1:fc:43:62:0c:36:2e:86:2f:
63:cf:33:5b:01:7f:6f:7c:cd:91:e7:12:38:08:08:eb:3f:6b:
ef:3d:b8:ac:ae:6f:8f:5a:9d:f2:e2:1a:d1:7e:a4:94:52:48:
d2:c2:32:51:1e:4c:dc:5c:62:06:8e:4d:48:17:1e:cd:91:4b:
8d:5e:ec:28:35:b7:97:e5:92:2a:41:81:88:7b:8c:07:d8:bf:
88:b0:71:8a:a4:a8:8e:6c:09:53:0f:b8:ee:4d:cb:00:d8:6f:
5e:38:16:1f:6e:a9:aa:1c:0d:da:bb:ef:d2:1b:6b:6a:4d:a3:
72:6d:a2:81:62:92:d0:3f:e7:2f:08:c8:e9:34:68:74:83:64:
8e:f5:f7:6d:27:df:7e:3a:af:6f:13:96:0c:f9:dc:ec:f5:c1:
d2:2a:b5:a0:cf:c2:f6:4a:24:6f:8e:91:1a:c4:dd:1a:27:16:
95:7e:35:d2:2c:5e:ac:28:24:07:5f:e9:24:b9:dd:47:e1:30:
86:44:3c:32:d9:67:6e:04:bc:3d:b7:68:f9:08:e9:a0:ce:70:
df:12:f2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:55:31 2026 by rpki-client