Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier: l/7EAWq5dBQxpqg5OWU6I+t6PdZQbm/YtjMUyIFnEVs=
Subject key identifier: 18:02:43:14:DF:2E:97:20:BB:4D:BB:FC:95:03:50:24:15:6F:E3:5F
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 019E1E6C811869A5D20B64A998CC3186096A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number: 0943
Signing time: Tue 12 May 2026 23:01:27 +0000
Manifest this update: Tue 12 May 2026 23:01:27 +0000
Manifest next update: Wed 13 May 2026 23:01:27 +0000
Files and hashes: 1: 0j8mKPNVQTMhrPMoTB8vqumItaY.roa (hash: RfwfX7kQEbOpbeZ05eE31bx2DYFysCnm/nQLdjd7Xnk=)
2: 1-kTvZ0CIAu8uTw7fU1T6vT9hc9c.roa (hash: me+ftvQPzHdAUrIuYjuuG8bbQjdCu8RbriElDkqOOBo=)
3: 5obQTKQQdziyHt3lp7e0Ce026vk.roa (hash: Le5yUrWQi3zm2wIsTvW5Oct4jk04f+5rZXXqRfdqn8k=)
4: 8dffgbceyZZN2GD0DQntG3Z8fxU.roa (hash: 7MA6pNhMj3p3AaurB3f6qiL2uGgtlKFoFp4bhK94tNs=)
5: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: UegQdjCmY/zXbt/wEhziOSdx1b05gpnvMXR2XkDMMjM=)
6: ZIEMV2zIloE52-qgOXdFi1j85Tk.roa (hash: NwScYVj2gBSbhZaCbwwZMrlWYVdDowjEWEzxULRwSVQ=)
7: g1rCh6JOwkuyFx1RMKVRwzuU63w.roa (hash: i/ipa9GmfRXAeA2Xih2V+tPcO2aG20N/7/cUFxqZ3v8=)
8: zSQtHn132zkYiODR-nP8aHtUQYA.roa (hash: 0IThsqQjeAvQaaBM3736hRL6ffPhT8HNYOS2v2AnKs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:81:18:69:a5:d2:0b:64:a9:98:cc:31:86:09:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: May 12 23:01:27 2026 GMT
Not After : May 13 23:01:27 2026 GMT
Subject: CN=18024314df2e9720bb4dbbfc95035024156fe35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ec:b6:e3:eb:f8:02:f3:25:91:43:bb:73:97:
f6:b5:55:3f:27:41:51:eb:49:e0:22:0b:5f:86:e5:
42:96:8c:06:54:00:64:dd:9a:58:b4:aa:04:73:39:
ba:91:66:f5:ff:78:ae:bb:e0:47:3e:fe:41:3a:8b:
9f:af:9b:16:15:47:2a:a8:f8:81:60:4b:28:f2:a8:
9f:c6:f3:26:3a:25:4a:5d:77:dc:63:1d:0e:36:12:
61:22:0d:53:cc:e7:50:04:15:92:bb:a0:65:2d:1f:
c5:41:cc:98:41:9d:61:08:a6:25:c6:31:d7:a0:45:
5c:61:05:f3:21:65:23:85:ba:1d:9c:d2:62:87:81:
fc:ce:30:1f:fe:11:9b:29:57:35:0d:e8:bf:5d:d4:
26:56:b7:be:b0:63:bf:2e:9b:8f:76:55:2f:33:89:
8d:67:26:4b:79:28:80:b2:f1:aa:ee:15:b6:4f:da:
a5:45:f1:ad:ed:4a:3e:60:79:20:25:39:1c:5c:c5:
d1:90:22:3a:84:5d:3a:e7:b3:e5:9a:98:ce:2c:7a:
4d:35:e6:6a:1d:7b:34:0a:9e:2e:13:69:07:b8:81:
92:d7:ff:a9:4d:e1:2f:63:40:53:41:8b:49:74:94:
d4:9c:54:e9:a7:1a:d0:d4:51:85:0c:1a:26:15:1d:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:02:43:14:DF:2E:97:20:BB:4D:BB:FC:95:03:50:24:15:6F:E3:5F
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9a:d7:13:f1:7f:66:b6:52:db:7b:eb:04:96:be:f6:fb:6c:
81:66:99:db:0e:d2:b6:33:70:ec:b6:36:9b:db:83:c9:51:13:
f3:1b:2d:e8:46:43:b9:72:a0:32:28:c6:f5:d2:0b:a4:65:1e:
18:1f:51:40:13:2b:86:64:ae:4d:f3:0c:eb:19:31:52:bb:92:
6c:68:2f:9d:58:7a:ff:3d:3e:c2:0d:4c:99:ed:c0:6f:58:e1:
27:da:65:37:93:29:bf:05:34:7f:59:82:a6:48:03:c6:32:cb:
2d:86:f0:e2:34:83:ce:c0:4e:e5:d6:2b:64:56:2b:74:f4:e1:
ab:be:d7:bb:a8:9b:ef:e5:ca:d4:ad:09:2a:f9:2d:54:c3:a0:
ed:73:b7:ed:d3:67:d3:19:7b:c2:cb:8e:0c:33:72:98:ea:66:
11:7a:7d:9b:fb:e4:2e:8d:e4:26:b2:2e:72:ed:8f:cb:23:f9:
2f:ee:cb:f1:50:40:ba:5a:94:55:1c:5a:99:98:46:48:24:62:
d9:56:e3:78:a6:4a:b9:a8:e2:62:fe:27:67:db:72:80:3a:d2:
b9:96:32:84:5d:86:ed:53:37:10:03:c2:84:ec:9e:41:1e:8a:
a1:66:5c:18:4c:12:c8:c0:89:b2:96:5f:02:45:40:36:fa:6e:
f9:bd:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:14:09 2026 by rpki-client