Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: mbHY51rpdG3XEySWeETH0HB1lLq+KsEG5eYgTM83/Dk=
Subject key identifier: 03:5A:65:D6:DD:7F:F9:B2:91:99:0B:F8:F3:BB:78:D5:60:B7:F7:91
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 01A17E17E0E4CEAF13A05B09C919F73928C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 1AC9
Signing time: Tue 27 Oct 2026 16:00:56 +0000
Manifest this update: Tue 27 Oct 2026 16:00:56 +0000
Manifest next update: Wed 28 Oct 2026 16:00:56 +0000
Files and hashes: 1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: TK6LW2X5xcQ+8Iln8ok3Ofk5yh3lMzaavwHIwJf+A4c=)
2: FNGdELpGS2bwEGg4hvaYUE_r1O4.roa (hash: Ei6sBNoGSjj3ahbV1+2LrTjtk8IEn6iFKEC198BdvPQ=)
3: cfuyV7WY5uCzefphkg9dkFiDF4o.roa (hash: 56j+8wClcw9KajdQHM4PT6tZ5VXaRrrlOf4m/1pMO8M=)
4: zdTKCzMNYrD_vxLGScehqegrrJk.roa (hash: Al6OIKoNSWVa63JvchjYlE1VIlKOSAurCVguG0aSQOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:17:e0:e4:ce:af:13:a0:5b:09:c9:19:f7:39:28:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Oct 27 16:00:56 2026 GMT
Not After : Oct 28 16:00:56 2026 GMT
Subject: CN=035a65d6dd7ff9b291990bf8f3bb78d560b7f791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:49:eb:7b:01:c9:98:5b:33:3c:00:3a:28:
0a:f7:9f:b0:f8:f6:49:20:d3:1a:69:d7:a0:64:59:
04:79:a9:d9:e4:d5:7e:14:75:b4:af:a9:1b:a6:e5:
f2:5c:d9:9f:99:7c:2c:09:f7:e1:da:59:a2:e5:6c:
26:ca:41:20:76:62:d9:3e:10:c9:83:d4:b1:bb:3b:
e6:3a:90:c9:e0:27:64:c7:81:3a:b8:63:f8:7d:37:
7d:fb:db:8b:d4:64:ce:c3:e7:99:f4:66:69:14:c7:
b3:06:57:cf:38:23:1c:b6:5d:bc:05:d2:10:94:1c:
45:e6:3d:cd:e4:87:e3:d6:95:79:d0:91:97:50:65:
00:7f:af:9a:fe:e7:ae:45:f0:07:17:4a:0a:83:a9:
d6:19:9e:e7:d2:38:06:83:7a:16:f7:e2:66:b0:f6:
5d:0c:e4:a5:6d:8e:8e:8a:97:44:ba:6e:0e:9d:86:
79:1e:bc:68:8a:61:01:16:15:42:cd:85:fd:8c:e7:
5a:86:cf:c3:b9:bb:3f:54:49:a6:64:18:b7:61:3e:
c1:4a:e9:26:2c:e8:c8:a9:24:3c:85:a6:9d:2c:76:
23:04:21:bd:67:31:2e:0a:c5:28:47:39:24:39:3d:
d6:76:e5:7a:f3:4b:a1:dd:e2:d2:1c:db:9d:4a:6a:
0e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5A:65:D6:DD:7F:F9:B2:91:99:0B:F8:F3:BB:78:D5:60:B7:F7:91
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7b:d4:43:14:dd:21:2f:25:76:4d:c8:88:7f:cd:40:82:f4:
23:05:2b:cc:69:b4:98:94:c5:53:ff:6d:72:2e:df:dd:84:27:
03:63:75:71:14:5c:2a:7b:41:5f:43:3f:fe:18:48:36:0b:04:
6b:cb:87:57:9d:d4:64:dd:9a:86:e1:d2:c3:18:46:38:fd:d4:
81:fb:9f:49:38:a9:5d:11:6a:16:eb:de:cf:51:59:ce:01:6a:
99:fa:45:e0:6d:d1:47:a4:5f:e6:64:7a:25:9e:f5:6a:ca:0b:
02:8e:eb:b7:48:42:5d:34:11:c5:08:24:ce:21:42:a7:fd:39:
89:a5:ca:1b:d4:57:9d:60:fa:d2:6b:01:72:fa:c2:03:d7:6a:
17:61:11:f8:7b:f1:07:e8:52:7d:9d:95:6e:cb:42:66:cf:d7:
2a:dc:5c:47:15:fd:26:ad:b1:43:db:dd:a5:a6:de:00:11:37:
fd:87:d9:cd:7e:5b:08:53:9e:0a:d1:4d:d9:ac:04:4a:05:13:
4e:24:e8:94:74:db:f2:d1:3f:00:cd:14:44:a4:84:b7:c5:6e:
ac:e8:61:28:81:a0:65:80:33:8d:f0:f2:f7:83:0a:31:93:37:
cf:11:b5:47:19:ec:1d:07:74:16:07:24:31:d8:dd:d8:61:4c:
06:a8:2f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:02 2026 by rpki-client