Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: 7apFC/6Qv9991KzfO2DdfXvY5ae4gDyUmDy0fOMe5IA=
Subject key identifier: 2C:59:42:65:D0:DF:02:13:85:91:90:65:8C:98:8E:14:B0:8E:AF:59
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 019CD80CEC9411FE24FCAE4B875F6427412C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 12D8
Signing time: Tue 10 Mar 2026 14:00:51 +0000
Manifest this update: Tue 10 Mar 2026 14:00:51 +0000
Manifest next update: Wed 11 Mar 2026 14:00:51 +0000
Files and hashes: 1: 9z2R7mR7CTqEMhJ2KlrHCYJ3vjc.roa (hash: FvuJb6Wc0/pGsiV3BQi7hOtAMeCwlp8+eAq8AekfMKM=)
2: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: eKwWIFhUckNUCuugP5moH4vFB7RR4JW77/+DAeHDUrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:0c:ec:94:11:fe:24:fc:ae:4b:87:5f:64:27:41:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Mar 10 14:00:51 2026 GMT
Not After : Mar 11 14:00:51 2026 GMT
Subject: CN=2c594265d0df0213859190658c988e14b08eaf59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:71:f3:01:c0:a2:b1:2c:53:08:ef:84:69:
13:c3:2f:4a:80:20:ab:d4:84:04:42:7a:6f:91:4a:
e7:57:09:6e:34:07:05:df:4c:f3:8e:25:4c:4a:20:
01:19:5c:4a:55:02:36:ba:59:1a:d4:ab:82:f7:45:
d7:a9:56:63:34:0a:5f:d3:1d:4a:e0:66:eb:fa:2d:
11:a2:75:63:a4:81:7b:8f:28:c3:34:c7:fc:5d:20:
f0:e8:6c:8b:a1:f4:b9:a0:76:62:d9:d3:35:3f:72:
16:ef:49:b6:fc:12:71:e6:e7:fb:ec:0f:c2:06:d9:
fd:d9:4a:e6:f5:ae:fc:4f:f4:f6:01:18:4b:6e:08:
eb:39:3e:d3:2c:6f:75:64:a2:4a:8b:24:ef:a6:65:
ea:76:ed:d6:75:fb:f9:f0:23:b4:a3:ed:e3:9f:31:
66:b5:ce:9f:a4:80:de:db:b6:cf:cf:f9:a2:04:bb:
92:20:ce:97:10:54:65:72:03:04:64:4c:62:2d:76:
7a:7c:73:9c:35:ed:3b:d2:02:4a:1f:d9:af:45:93:
6f:c3:2b:c0:e8:c2:e8:90:48:75:3c:cf:9c:bf:05:
a8:b7:a5:10:3f:4f:37:00:4c:7f:98:cb:54:86:97:
89:d5:b7:cf:93:78:90:b6:79:c6:4d:2a:5e:58:1f:
a5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:59:42:65:D0:DF:02:13:85:91:90:65:8C:98:8E:14:B0:8E:AF:59
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:bd:c8:ab:9e:4c:9d:72:cd:d4:fc:e1:39:0b:2a:18:1f:27:
bc:14:34:7b:72:9d:82:5a:ee:32:9a:a0:99:a8:fe:b0:28:7c:
70:90:10:3e:28:7e:b8:7c:54:e9:7a:9b:f9:80:08:f5:c6:99:
89:01:be:45:84:23:19:13:0c:26:fa:7d:cb:c3:55:4a:3a:07:
20:42:9d:d9:a7:42:cd:ce:9f:cb:75:e2:0b:e9:dc:35:65:e7:
4a:0a:33:9d:8a:b4:ae:ad:02:6e:28:8f:46:6d:9d:9e:bd:c5:
a0:a3:13:e5:ed:30:18:5e:2c:54:cb:fa:bf:0b:51:2d:80:14:
6b:ce:53:fb:ac:87:83:19:0a:ba:4b:95:86:fe:b6:af:e5:f5:
6b:a6:cf:d3:4b:5f:77:2c:0f:18:88:cc:13:cd:3b:66:87:93:
37:bd:9e:28:35:72:df:3a:57:d0:af:78:ee:18:b8:2c:71:6d:
c7:2d:2f:bb:f1:29:5a:73:e3:41:44:25:e3:30:ce:b3:ff:05:
91:ae:6c:07:f2:3d:53:a0:7d:2c:da:1c:ae:5b:cd:e0:8d:40:
a9:ab:b6:a1:ce:c8:3c:dc:d2:e1:5a:a7:44:db:b1:bf:d3:d4:
a0:41:f1:6d:09:2b:02:26:81:d4:fd:b5:8f:a2:63:7b:76:4b:
38:a2:21:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzYDOyUEf4k/K5Lh19kJ0EsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDg2YjY3ZDg5ODk2NTNiYWViNjhiOGQyNGFiOWU5YmQw
Y2FmMmEwHhcNMjYwMzEwMTQwMDUxWhcNMjYwMzExMTQwMDUxWjAzMTEwLwYDVQQD
EygyYzU5NDI2NWQwZGYwMjEzODU5MTkwNjU4Yzk4OGUxNGIwOGVhZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6Fx8wHAorEsUwjvhGkTwy9KgCCr
1IQEQnpvkUrnVwluNAcF30zzjiVMSiABGVxKVQI2ulka1KuC90XXqVZjNApf0x1K
4Gbr+i0RonVjpIF7jyjDNMf8XSDw6GyLofS5oHZi2dM1P3IW70m2/BJx5uf77A/C
Btn92Urm9a78T/T2ARhLbgjrOT7TLG91ZKJKiyTvpmXqdu3Wdfv58CO0o+3jnzFm
tc6fpIDe27bPz/miBLuSIM6XEFRlcgMEZExiLXZ6fHOcNe070gJKH9mvRZNvwyvA
6MLokEh1PM+cvwWot6UQP083AEx/mMtUhpeJ1bfPk3iQtnnGTSpeWB+lMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxZQmXQ3wIThZGQZYyYjhSwjq9ZMB8GA1UdIwQY
MBaAFA4Ia2fYmJZTuutouNJKuem9DK8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQt
NjIyYmI0ODk5ODg3LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQtNjIyYmI0ODk5ODg3
LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI73Iq55M
nXLN1PzhOQsqGB8nvBQ0e3KdglruMpqgmaj+sCh8cJAQPih+uHxU6Xqb+YAI9caZ
iQG+RYQjGRMMJvp9y8NVSjoHIEKd2adCzc6fy3XiC+ncNWXnSgoznYq0rq0CbiiP
Rm2dnr3FoKMT5e0wGF4sVMv6vwtRLYAUa85T+6yHgxkKukuVhv62r+X1a6bP00tf
dywPGIjME807ZoeTN72eKDVy3zpX0K947hi4LHFtxy0vu/EpWnPjQUQl4zDOs/8F
ka5sB/I9U6B9LNocrlvN4I1Aqau2oc7IPNzS4VqnRNuxv9PUoEHxbQkrAiaB1P21
j6Jje3ZLOKIhIw==
-----END CERTIFICATE-----
Generated at Tue Mar 10 23:39:07 2026 by rpki-client