Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: KB20ti2Y3o4RC6+Stsx7efvgN0tXFHADGTbNnN17jYE=
Subject key identifier: 2A:F6:44:AD:62:60:07:C2:36:AC:29:4C:D7:F7:88:9E:31:CB:8A:E4
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 019FA29724F09AA2E8BEE397C51D3E08B72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 144A
Signing time: Mon 27 Jul 2026 08:00:42 +0000
Manifest this update: Mon 27 Jul 2026 08:00:42 +0000
Manifest next update: Tue 28 Jul 2026 08:00:42 +0000
Files and hashes: 1: 9z2R7mR7CTqEMhJ2KlrHCYJ3vjc.roa (hash: FvuJb6Wc0/pGsiV3BQi7hOtAMeCwlp8+eAq8AekfMKM=)
2: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: 75/z9hYgm9TfrcQyZCFit0LPE8wIxkbxbnmVlY4qKSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:24:f0:9a:a2:e8:be:e3:97:c5:1d:3e:08:b7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Jul 27 08:00:42 2026 GMT
Not After : Jul 28 08:00:42 2026 GMT
Subject: CN=2af644ad626007c236ac294cd7f7889e31cb8ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ef:b9:87:85:10:29:7a:6d:7b:3e:eb:91:dc:
b5:6d:5b:4b:b1:89:9b:d1:75:9a:a6:32:31:70:1d:
79:1d:84:a3:89:a5:06:6c:00:75:fc:10:b9:7a:85:
d8:8a:4a:be:ee:fe:0f:e5:76:a0:a2:b5:14:88:aa:
26:6f:6e:04:72:dd:77:8d:81:2d:85:ec:ed:37:3c:
52:ef:77:3b:80:f5:c5:d8:49:83:e6:80:12:64:ef:
4d:cd:e2:19:1e:d7:1f:d9:df:e2:db:81:34:c5:5e:
34:3a:96:2f:96:95:f6:a1:e7:7c:15:f5:67:a3:36:
78:75:0f:e9:a0:bb:7d:7e:12:e4:e1:c4:93:d5:a0:
62:c7:68:2a:e7:cf:f3:f7:95:7b:b5:d3:04:70:b9:
19:66:fa:59:e8:fd:15:dc:bf:6f:e1:5f:e1:51:92:
ae:5e:2d:fe:7e:52:45:09:ca:1a:67:fb:2c:2f:04:
85:f2:9c:14:c6:12:3b:be:22:4b:f9:e2:57:fb:9a:
74:36:5d:13:4f:76:b1:e0:f8:56:b5:e2:38:54:0f:
8f:25:07:4a:3e:57:34:d8:eb:ef:33:9b:e2:c1:1f:
46:49:2d:ac:6d:55:11:1f:38:de:9b:b6:dc:b2:7d:
13:6b:df:92:97:83:b1:58:6b:b9:cb:25:fd:ee:7d:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F6:44:AD:62:60:07:C2:36:AC:29:4C:D7:F7:88:9E:31:CB:8A:E4
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ce:7d:54:ae:5c:66:2d:8c:c2:09:7a:52:74:db:c7:da:61:
71:08:13:2e:1f:00:c3:fd:5d:86:47:de:19:5d:a7:74:d0:15:
dd:70:9f:b8:8f:ba:92:72:e4:d4:2b:fd:dc:3a:f2:1d:24:c2:
8d:1f:42:6c:42:36:52:61:ad:3b:f6:7c:d2:b5:26:b3:94:99:
61:11:77:ed:6b:70:75:2e:a3:94:e8:0a:95:ce:6c:7f:25:11:
77:10:5e:83:50:49:b4:05:ec:18:d6:3e:54:35:f2:8c:2c:d8:
ee:2d:c9:84:83:8e:0a:0c:9c:1d:0e:9b:a1:4e:c5:a2:b7:fd:
4a:4e:cc:66:d7:58:64:5f:e7:38:48:7e:14:36:56:bf:c1:6b:
51:5e:2c:34:57:9c:9b:6e:15:30:c1:d5:ff:9a:a7:66:22:f8:
10:bf:54:01:69:59:fc:10:38:2f:35:e5:30:b6:67:62:97:59:
1c:c5:3a:ca:bb:a8:dd:ef:6c:78:21:9b:78:2e:43:31:b4:e3:
3b:20:88:a9:70:56:42:5a:78:b2:50:82:7a:5f:35:a3:6d:6a:
73:8d:9e:a2:ef:69:af:11:4f:40:86:3b:13:e2:c7:ae:aa:24:
d5:9d:3b:83:a8:61:da:ce:d9:da:68:4a:8a:91:55:eb:ee:16:
13:1d:f5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:08:53 2026 by rpki-client