Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: 3dl1MJUeeZuLj2k8oKqC4c2r4sAphUoau3yAMrU9nbY=
Subject key identifier: FF:D9:A1:F0:F3:14:6F:50:19:07:49:4D:BF:D7:E8:6C:70:09:A2:40
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 019DCF3DEF75B0A4D49DAE78EF120AE85B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 1358
Signing time: Mon 27 Apr 2026 14:00:35 +0000
Manifest this update: Mon 27 Apr 2026 14:00:35 +0000
Manifest next update: Tue 28 Apr 2026 14:00:35 +0000
Files and hashes: 1: 9z2R7mR7CTqEMhJ2KlrHCYJ3vjc.roa (hash: FvuJb6Wc0/pGsiV3BQi7hOtAMeCwlp8+eAq8AekfMKM=)
2: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: OJVOC8+aasCTb8uz+81h44eOR8zC31hMMbXtKizY9KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3d:ef:75:b0:a4:d4:9d:ae:78:ef:12:0a:e8:5b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Apr 27 14:00:35 2026 GMT
Not After : Apr 28 14:00:35 2026 GMT
Subject: CN=ffd9a1f0f3146f501907494dbfd7e86c7009a240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ef:10:49:6d:d4:55:c1:2b:10:ef:27:bc:c9:
dd:28:08:3b:fb:8b:59:a5:33:11:c9:05:65:56:bc:
2f:43:82:af:c7:3b:09:6e:32:42:b1:c9:14:19:c2:
6d:c3:d2:3f:2c:51:0f:16:59:1a:85:a6:0b:6b:f0:
c5:c9:f8:8d:8d:84:5e:2c:0a:17:2b:76:b6:74:76:
20:66:de:9c:4c:1d:b7:03:f1:52:8b:d5:35:fd:4e:
8e:2d:69:52:af:94:0e:81:40:43:32:6b:cf:0e:95:
5a:ed:12:5a:8b:ad:db:9f:93:ca:ab:5c:39:0f:b9:
1b:f3:59:ca:6e:f6:68:14:43:96:5e:43:7e:63:d2:
20:cf:ca:19:23:f4:ac:05:15:b1:14:f2:a9:2a:9e:
d5:0c:45:a6:1d:e7:6e:e6:aa:49:ce:5c:8b:d7:4b:
da:7b:ed:bf:4b:a7:85:3a:e4:24:bf:4e:16:9e:2e:
27:8e:22:ef:b5:48:d6:4d:39:86:de:2d:77:a2:8b:
d1:72:c2:a8:a5:e1:be:32:8c:19:4c:dd:c5:07:1e:
50:7f:65:fa:96:d5:bd:aa:c5:51:28:3d:90:3a:56:
00:ec:46:9b:21:2c:82:96:dd:60:ef:d7:ef:fb:80:
f5:53:d2:9f:04:2e:cf:f0:8a:06:26:13:05:6b:b1:
96:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D9:A1:F0:F3:14:6F:50:19:07:49:4D:BF:D7:E8:6C:70:09:A2:40
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:fe:5f:cf:55:ff:94:11:4b:e1:f8:df:36:94:2f:59:96:70:
3b:e8:a4:6b:30:d5:2d:2b:73:d5:05:d7:98:a5:89:c7:27:ad:
f5:c5:d5:9f:14:1e:af:96:e1:22:0f:1c:fe:38:7a:3b:b6:3e:
93:ed:69:b9:46:43:49:17:93:32:cb:8f:61:d8:a6:b0:64:76:
1e:6b:ca:7e:43:36:37:e2:f4:d7:52:a0:5c:e4:40:42:2d:d5:
52:45:58:c7:4c:db:57:f5:f9:79:ef:bc:1d:4c:5e:a2:a6:c2:
89:94:e3:2e:cc:c9:9b:32:bb:ea:10:5a:3f:cc:92:d2:90:23:
54:d5:ee:31:5a:8f:6b:57:47:bf:61:40:ec:50:c3:44:9e:b1:
04:05:ed:68:c1:5b:7a:4d:79:32:e2:77:e8:b0:12:83:4d:24:
80:c6:1f:6a:cf:61:6c:1e:6d:7f:a4:b5:ff:40:d8:3d:42:e1:
8e:c0:52:e8:f5:ed:06:fd:4a:42:36:da:ab:fd:4a:a6:08:08:
35:dd:ad:c9:0d:b9:75:6a:81:d5:da:79:e0:0c:a8:62:6d:ab:
23:8e:c4:15:6b:33:28:0b:40:1a:76:ff:24:12:9a:b9:61:6e:
26:00:39:21:4a:9a:8c:b5:15:82:8d:32:69:0f:81:31:57:79:
32:64:f0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:33:39 2026 by rpki-client