Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
File: dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json)
Hash identifier: oFzMI4h6oIhJbOatwLQkawbKgq9ggrlJKRo0jY+E1V0=
Subject key identifier: 58:C4:F5:BA:5A:EA:FD:54:01:9D:1D:8E:EC:34:29:26:53:BB:9B:11
Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
Certificate issuer: /CN=74f81a98b487020c98105d6313bcd69de50ac17b
Certificate serial: 01A03C03B42731CD865515906CDA32FCD14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
Manifest number: 0668
Signing time: Wed 26 Aug 2026 03:01:10 +0000
Manifest this update: Wed 26 Aug 2026 03:01:10 +0000
Manifest next update: Thu 27 Aug 2026 03:01:10 +0000
Files and hashes: 1: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: 1s9aSg+SZPul/y5Dy0Q4sGtdR+9khaAK4YJS4lYk+l4=)
2: g-cs4KCZKYLgUr-tN_UtNttNg5M.roa (hash: Si0dRFIGYFzZ10R6i6ARJVkpSXUEGLL2gkuxXEnez48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:03:b4:27:31:cd:86:55:15:90:6c:da:32:fc:d1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b
Validity
Not Before: Aug 26 03:01:10 2026 GMT
Not After : Aug 27 03:01:10 2026 GMT
Subject: CN=58c4f5ba5aeafd54019d1d8eec34292653bb9b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:97:59:c4:1e:0f:5d:97:b8:0f:61:e0:0f:f2:
59:b5:44:8e:1c:38:de:9c:30:7a:4f:10:e0:2b:b2:
2e:71:c9:12:39:d1:e9:6b:20:30:31:45:bb:c8:5e:
53:2b:19:39:1a:7f:da:f9:92:e6:74:a7:9a:af:d8:
10:25:8b:3b:de:82:e2:a6:1e:98:b8:65:73:ba:db:
bc:53:4d:bf:e2:e1:02:de:06:02:6b:cd:a5:e5:73:
24:08:b2:96:99:c1:b0:7a:2c:9f:3c:04:bc:65:17:
28:d5:46:ce:0f:26:70:fe:08:75:ed:a5:b8:51:29:
bc:50:73:e3:77:2f:88:fc:32:db:a7:91:02:55:2b:
41:d3:99:dd:02:de:b7:87:db:f4:c9:23:82:2c:2b:
f1:e6:97:ff:5d:dd:9c:c5:82:42:cb:f3:2a:3c:a9:
9b:6e:c0:0d:af:58:6a:2f:48:58:1f:8d:68:b9:54:
e8:b3:61:a1:f9:9b:40:5d:e4:57:4a:5e:94:9f:e8:
b1:26:05:bc:1d:bc:88:3d:06:a4:9c:d2:6f:21:aa:
6a:11:57:c7:fe:f8:eb:7f:4d:d9:58:7c:6f:c9:49:
9c:16:ea:8f:c0:41:9f:d8:5c:da:47:a4:1a:c9:2b:
e6:27:55:ef:78:07:f4:43:8c:9c:f2:76:cb:9e:df:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C4:F5:BA:5A:EA:FD:54:01:9D:1D:8E:EC:34:29:26:53:BB:9B:11
X509v3 Authority Key Identifier:
keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:79:1e:3c:d5:3f:c9:58:aa:1d:5a:e4:a6:53:0b:fa:6a:b4:
d2:57:bf:38:e5:45:7a:e0:59:d6:21:42:f7:46:71:f5:69:66:
9a:29:a2:93:a6:b2:f8:dd:e9:60:0a:8a:f3:0e:f4:5c:c9:c3:
3a:ad:d8:bc:d2:d9:d1:c5:de:6d:fd:00:af:79:a5:64:1d:30:
25:9a:96:72:58:b7:8b:3d:e7:27:b2:a3:3e:fd:4c:c0:f4:43:
48:2d:ad:56:92:21:60:9e:c7:72:b6:5e:e6:34:5e:d0:6e:d7:
40:81:f9:fe:fa:8c:ac:05:fa:ee:b1:b2:02:88:fa:e4:59:67:
6a:33:48:75:e4:f9:49:91:a6:72:22:2c:9f:b6:40:81:aa:66:
f4:6f:0d:5b:3f:0e:01:69:7e:49:65:c5:2f:a5:e4:b8:2c:a3:
fb:10:dc:5c:a7:e4:cb:f0:87:31:d6:46:64:b9:19:e5:98:73:
80:79:07:44:40:7f:0e:60:69:fc:43:8c:49:c0:87:ef:15:0c:
db:1f:70:16:29:d1:e8:70:2a:f3:cc:91:d5:7b:4e:cf:92:d3:
1c:17:36:af:12:b5:e0:7a:1c:84:4d:d0:89:31:d9:3d:44:13:
5b:e7:e2:32:ee:31:63:12:ff:6e:da:aa:99:30:e0:ed:53:8f:
5b:f0:a7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:38:13 2026 by rpki-client