Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: q5loBbaukXf/ebWi5dhgQyrb6ML0qNeynGl9+1yLVC8=
Subject key identifier: 21:B7:4C:DB:29:6E:CF:78:1D:A3:5D:A9:E4:D9:E5:89:74:56:79:AF
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 01A17DAA25F2B15928709007949E4851FEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 1540
Signing time: Tue 27 Oct 2026 14:01:05 +0000
Manifest this update: Tue 27 Oct 2026 14:01:05 +0000
Manifest next update: Wed 28 Oct 2026 14:01:05 +0000
Files and hashes: 1: 9z2R7mR7CTqEMhJ2KlrHCYJ3vjc.roa (hash: FvuJb6Wc0/pGsiV3BQi7hOtAMeCwlp8+eAq8AekfMKM=)
2: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: gvNTca0N481YqMqmbbbB/WhG1LR7ZYu3RwiwPKG3hfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:25:f2:b1:59:28:70:90:07:94:9e:48:51:fe:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Oct 27 14:01:05 2026 GMT
Not After : Oct 28 14:01:05 2026 GMT
Subject: CN=21b74cdb296ecf781da35da9e4d9e589745679af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c9:14:38:a0:ce:68:15:9f:63:40:e9:59:46:
d3:b6:cc:1f:ec:39:ab:3e:b4:2b:8c:07:15:b0:27:
be:6f:27:f4:7e:14:a6:6c:e6:a7:e5:f5:e7:40:20:
13:2d:26:a2:5b:17:65:0c:c9:c2:52:7d:4a:8c:ea:
82:b9:6e:ca:e1:61:f1:80:95:70:0f:52:b6:35:a1:
82:33:2f:0e:b8:b5:17:5a:e5:97:e8:15:91:5f:d4:
3f:be:c2:05:03:51:51:18:a0:90:9a:2d:1e:b5:09:
17:b0:50:f9:49:4e:5d:1f:fd:7c:60:06:f5:d8:40:
f6:7c:c1:7a:8c:e6:fc:91:73:e0:9e:c9:e0:90:72:
b3:82:c5:5f:7d:ca:32:2d:c7:ad:25:58:2b:eb:fe:
53:ae:29:94:98:ac:f1:bf:a6:64:70:73:5a:88:ea:
0d:ee:9d:e3:a0:88:e3:be:e1:3e:9c:62:08:4a:f7:
1e:6e:c6:f0:3e:51:56:8e:d0:c6:51:17:44:2c:2c:
da:56:6c:2d:41:2d:91:41:dd:c4:31:4a:3d:3e:69:
a6:17:f9:eb:78:79:c4:b4:50:73:7a:f8:ac:73:51:
c0:42:af:fc:c4:8d:76:8c:99:b7:e6:cd:08:f9:39:
eb:82:72:e7:4c:e4:e3:0e:e1:a3:fe:0b:b9:d3:0a:
b8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B7:4C:DB:29:6E:CF:78:1D:A3:5D:A9:E4:D9:E5:89:74:56:79:AF
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8e:39:9e:c1:52:2c:ff:f4:a5:e8:b1:4d:1e:0e:c9:b1:a5:
0d:c2:9a:d0:b6:f4:8c:fc:22:38:0f:7c:90:de:1f:4e:3e:b8:
42:ba:8d:bc:86:c1:0d:21:d8:8b:ce:e3:f5:19:0e:89:36:40:
b9:f6:07:dd:5a:77:e9:c7:ef:06:2f:8a:77:fa:48:49:8e:3c:
31:e0:f2:35:38:b5:c6:49:da:da:81:8f:e7:06:23:ed:aa:c9:
ef:f4:50:6d:02:71:b1:2b:06:e0:82:ab:44:50:ff:a9:01:9c:
ce:37:94:6a:1b:dd:06:26:56:2c:7a:01:16:7a:94:70:a9:b6:
8b:31:94:c4:51:10:40:2f:4b:7b:28:28:c0:99:70:c1:16:de:
5a:35:27:e9:65:eb:86:92:f0:0c:c4:48:de:1f:2d:96:3a:bc:
fd:5b:52:e9:1d:9e:8e:b5:9a:50:e6:5b:6a:5c:b2:63:ce:ac:
b5:3c:89:92:ad:ab:9b:b6:b6:6e:08:9d:a0:16:79:18:8a:46:
9a:5f:ef:74:95:af:c8:d8:5a:20:b7:bb:0e:88:84:b5:8e:01:
e6:be:0b:9e:d3:37:1c:0e:56:32:ee:8d:80:23:d6:f6:1a:f5:
76:01:fe:9b:22:79:84:69:f1:9f:7d:5d:a5:de:46:87:ca:a1:
22:7f:8a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:36:01 2026 by rpki-client