Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
File: dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json)
Hash identifier: 1Ocjl+e9rO9axMT5BtrASii2KVuYnX82iVaV5qgwWNM=
Subject key identifier: 8B:0B:C7:54:F1:EE:CC:91:29:AA:96:C9:4E:DD:4F:9F:A9:66:13:52
Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
Certificate issuer: /CN=74f81a98b487020c98105d6313bcd69de50ac17b
Certificate serial: 019D37894E63194CF505BC8C67D4140A1B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
Manifest number: 04D8
Signing time: Sun 29 Mar 2026 03:00:38 +0000
Manifest this update: Sun 29 Mar 2026 03:00:38 +0000
Manifest next update: Mon 30 Mar 2026 03:00:38 +0000
Files and hashes: 1: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: yLd42/uv8hxoa7COZ8bAN7X2njeu7V/JvyAqM6TTPI8=)
2: g-cs4KCZKYLgUr-tN_UtNttNg5M.roa (hash: Si0dRFIGYFzZ10R6i6ARJVkpSXUEGLL2gkuxXEnez48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:4e:63:19:4c:f5:05:bc:8c:67:d4:14:0a:1b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b
Validity
Not Before: Mar 29 03:00:38 2026 GMT
Not After : Mar 30 03:00:38 2026 GMT
Subject: CN=8b0bc754f1eecc9129aa96c94edd4f9fa9661352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:61:89:94:6b:b3:72:68:3e:3a:8e:8c:b2:72:
fa:1f:7a:a1:24:d1:a3:55:09:62:17:3b:39:b9:e5:
3d:90:1c:6f:27:eb:95:43:8a:b4:e5:0e:e7:44:f9:
61:8d:36:c5:81:0d:ad:90:e8:0d:f5:b4:bf:e9:99:
05:1b:3a:f6:d8:4d:b7:84:da:04:10:00:2e:2e:5e:
be:dc:9e:71:7a:0f:89:ec:cc:48:61:38:be:d6:c4:
3f:63:82:f9:8b:f7:2b:f3:34:30:f4:ee:5e:c6:4d:
56:35:df:33:97:a6:7c:4e:0a:29:9d:0a:f7:3f:2f:
9a:4a:34:06:36:0a:0e:8e:37:f6:30:11:57:5c:70:
42:44:fc:c2:59:1e:01:03:ce:08:0d:6e:94:62:ee:
34:5f:08:61:3b:88:a1:f8:f8:34:de:79:99:25:1c:
cd:8d:03:79:2d:dd:ab:04:42:84:7a:fb:5c:73:37:
54:7e:d7:d7:d6:24:ac:1c:d1:f2:78:64:49:9c:b6:
d2:5b:5f:96:66:e8:56:44:8c:2f:4f:fb:49:a9:48:
2e:03:57:a0:c8:e3:76:67:72:d9:5b:f1:f6:ac:e1:
b1:cd:2e:9e:12:4e:8e:f9:e5:be:5b:6e:df:59:cf:
fa:35:d4:86:2c:df:59:37:e2:31:77:97:5f:6c:08:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0B:C7:54:F1:EE:CC:91:29:AA:96:C9:4E:DD:4F:9F:A9:66:13:52
X509v3 Authority Key Identifier:
keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:21:47:da:e1:b0:7a:d7:d2:3c:42:63:21:8c:21:43:1b:b3:
43:fc:85:bd:df:f4:23:a4:0a:54:ef:e8:8f:04:b2:fb:ae:13:
ed:3e:a2:13:da:e4:cb:9b:48:86:b4:e1:8d:6c:0e:4e:2d:27:
f5:fb:39:ef:5b:96:c4:be:80:e7:79:80:ca:63:a3:7f:64:88:
97:dc:37:36:7a:82:d3:67:ca:8e:7a:64:a9:33:0f:0d:2e:0b:
f6:49:77:b1:ee:c3:c1:21:80:75:9d:02:38:c1:d8:92:f7:63:
94:83:77:e1:e0:4d:c8:7c:84:65:60:f6:3e:21:31:53:e4:b4:
7b:f1:12:bc:64:e1:d2:01:c3:cb:a4:22:42:7d:4d:7b:c5:50:
cb:02:3c:28:e0:d8:d2:42:da:a7:6a:32:e1:9b:2d:8a:8a:de:
43:4b:04:22:62:07:c1:b0:53:23:43:57:ab:d4:e2:4a:ec:ae:
9d:78:28:53:51:36:c9:11:90:8d:f0:92:f7:3b:bb:64:3e:54:
e2:48:dc:b9:90:5d:59:b1:f9:5d:aa:63:b3:66:ec:0f:7e:59:
8a:bc:ec:52:89:56:f9:06:1c:fe:0f:38:39:9d:86:33:d7:75:
d6:79:36:ff:8c:3a:30:b8:73:08:f1:fc:82:c7:fc:e4:c6:75:
2c:9a:94:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:53 2026 by rpki-client