Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: xBytbsEBqjYdpHVzuYdCBPzDdsIIAOy7muaT2ptRJgs=
Subject key identifier: 70:28:BE:2A:72:70:02:3F:E1:58:9F:EE:37:D9:25:2F:A9:96:7E:B4
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 019DCF3E2A17AABB8D07FFC8883202585B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 14:00:50 +0000
Manifest this update: Mon 27 Apr 2026 14:00:50 +0000
Manifest next update: Tue 28 Apr 2026 14:00:50 +0000
Files and hashes: 1: 8TaBsBYidW6NwN4w-r-_-frpmPw.roa (hash: d3cj9imIBJIrG7w+OMuxucJCXGk/PoAG60c7YkaGWUU=)
2: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: eSrv3jdFpHOoSAPRZoUrL7f9xDbayV+KaNRRzlHCMZc=)
3: cfuyV7WY5uCzefphkg9dkFiDF4o.roa (hash: 56j+8wClcw9KajdQHM4PT6tZ5VXaRrrlOf4m/1pMO8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:2a:17:aa:bb:8d:07:ff:c8:88:32:02:58:5b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Apr 27 14:00:50 2026 GMT
Not After : Apr 28 14:00:50 2026 GMT
Subject: CN=7028be2a7270023fe1589fee37d9252fa9967eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6f:dd:15:d5:93:8c:32:d9:f4:54:5b:da:2c:
80:07:90:38:51:18:de:08:c0:80:5d:da:2f:cc:be:
b2:26:43:48:04:60:0f:e0:19:79:d2:21:92:c7:60:
70:3c:35:ea:b6:32:93:1f:53:57:0b:38:41:dd:80:
4c:f9:9e:b3:96:2a:f3:28:3c:0e:4a:30:ae:12:bc:
4d:cd:f5:de:1f:d7:09:5c:63:3c:a9:e9:44:8f:e7:
a5:12:24:e8:f6:fb:f7:1f:7b:54:84:74:09:50:fd:
ef:3c:4d:a7:79:7f:ab:08:c9:45:6e:c8:55:12:77:
49:aa:00:91:e9:72:91:d7:b4:8d:d2:28:cd:1f:0d:
7a:a9:b3:96:27:e7:41:ae:bd:70:5f:5e:68:58:cc:
e6:da:86:9d:31:02:aa:eb:36:91:01:1d:0b:3b:a3:
c5:8d:ba:35:55:64:d3:19:d6:ba:07:2d:97:12:56:
87:45:9b:ee:05:17:27:7c:f3:1a:50:3f:2e:8a:f8:
8f:a5:21:92:9e:f2:b4:bc:4b:c6:bd:b9:73:47:80:
14:e9:21:20:48:94:dd:c8:97:5a:c0:4f:85:c4:0d:
85:85:55:92:49:40:76:4c:62:7d:07:9f:de:ae:ed:
42:f0:c9:da:fd:63:5e:4b:a6:67:6c:c2:41:df:b0:
ed:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:28:BE:2A:72:70:02:3F:E1:58:9F:EE:37:D9:25:2F:A9:96:7E:B4
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:04:2c:cb:5f:1a:e9:70:07:2a:57:d4:7c:5e:c2:fd:4c:63:
12:44:0d:93:11:1d:30:80:aa:37:11:c6:08:40:d4:70:f5:00:
4d:9a:e5:85:96:e0:c3:79:a4:e1:45:98:f2:d9:95:75:de:48:
33:bb:a1:97:dd:ca:49:0f:6c:33:7c:aa:06:81:76:dd:f2:51:
6a:64:fe:98:54:3c:1f:b4:23:c5:ff:12:45:e6:23:ca:b5:14:
c7:58:d7:e5:61:32:77:62:57:4f:bc:89:2f:ba:46:c0:1a:ee:
8d:cc:2a:79:7a:84:11:cd:9d:45:59:e1:5e:b6:9d:75:50:65:
38:97:d1:da:d0:bf:50:dc:48:f1:1f:47:79:99:3e:ba:f0:7a:
36:27:11:c3:0f:03:95:2f:4c:cb:30:b9:7e:3e:6e:54:8d:de:
cf:6e:39:0e:f5:6f:d5:64:f8:c3:51:d8:35:e7:7c:2d:0d:29:
e0:22:b8:54:2e:6d:ec:bf:39:52:38:b8:ec:05:ba:7c:ff:32:
c1:15:7e:f9:56:23:41:fc:8f:6e:d3:75:7f:12:b5:73:94:19:
d6:f8:82:d6:de:6f:b1:41:73:5e:c4:b9:d9:c7:ad:de:02:9a:
72:55:d9:54:ef:0d:2e:5e:e7:4f:d0:49:a7:02:3e:df:b7:31:
9e:19:34:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:44:25 2026 by rpki-client