Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier: hZ1JtZ3gLSvj60p18KtXWxkGzqKt5J26QfKpQKVdS4c=
Subject key identifier: 45:C2:62:04:5F:D9:5C:54:A4:36:44:B4:13:5A:F5:24:A8:7B:78:5A
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 019D2929816341109E8E6C9D428FFA16551C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number: 08C4
Signing time: Thu 26 Mar 2026 08:01:18 +0000
Manifest this update: Thu 26 Mar 2026 08:01:18 +0000
Manifest next update: Fri 27 Mar 2026 08:01:18 +0000
Files and hashes: 1: 0j8mKPNVQTMhrPMoTB8vqumItaY.roa (hash: RfwfX7kQEbOpbeZ05eE31bx2DYFysCnm/nQLdjd7Xnk=)
2: 1-kTvZ0CIAu8uTw7fU1T6vT9hc9c.roa (hash: me+ftvQPzHdAUrIuYjuuG8bbQjdCu8RbriElDkqOOBo=)
3: 5obQTKQQdziyHt3lp7e0Ce026vk.roa (hash: Le5yUrWQi3zm2wIsTvW5Oct4jk04f+5rZXXqRfdqn8k=)
4: 8dffgbceyZZN2GD0DQntG3Z8fxU.roa (hash: 7MA6pNhMj3p3AaurB3f6qiL2uGgtlKFoFp4bhK94tNs=)
5: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: 2XFCFwbnQ0+EJbMcNx207uI5JF4V7fWdPJSVeLaDHq8=)
6: ZIEMV2zIloE52-qgOXdFi1j85Tk.roa (hash: NwScYVj2gBSbhZaCbwwZMrlWYVdDowjEWEzxULRwSVQ=)
7: g1rCh6JOwkuyFx1RMKVRwzuU63w.roa (hash: i/ipa9GmfRXAeA2Xih2V+tPcO2aG20N/7/cUFxqZ3v8=)
8: zSQtHn132zkYiODR-nP8aHtUQYA.roa (hash: 0IThsqQjeAvQaaBM3736hRL6ffPhT8HNYOS2v2AnKs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:81:63:41:10:9e:8e:6c:9d:42:8f:fa:16:55:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Mar 26 08:01:18 2026 GMT
Not After : Mar 27 08:01:18 2026 GMT
Subject: CN=45c262045fd95c54a43644b4135af524a87b785a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:07:01:05:be:a3:06:a1:0b:1a:f3:93:4c:
ed:ee:e2:35:1a:4d:fa:46:81:77:66:69:1b:17:bf:
8b:4c:7b:ad:d2:8f:b4:ad:6d:49:b1:61:93:dc:13:
a6:7f:3a:db:8b:e2:db:24:e5:7e:2f:d6:cb:63:e1:
b3:b2:fd:8e:52:10:03:13:fa:8e:a6:e7:e4:3b:82:
81:46:11:5b:b0:fb:26:0c:ab:64:1a:ac:dd:e9:36:
90:cf:77:cd:b1:41:f7:89:58:39:af:1c:59:d2:65:
c0:bb:9a:65:90:46:60:f0:71:d0:37:86:32:f3:90:
6d:32:77:63:f0:ba:5c:09:4c:dc:3a:c2:5f:33:db:
04:f9:86:61:29:47:43:ab:1c:0b:43:e0:16:a8:d2:
b4:71:76:b7:b9:6d:b7:44:b6:17:df:f7:2c:c2:5c:
b1:a5:95:95:77:90:16:3d:f0:04:7a:40:23:81:05:
ac:86:8a:67:1e:1b:13:7d:04:93:86:69:a3:db:9d:
47:b0:7d:0d:80:ea:ad:33:25:65:99:2b:5a:65:b8:
c2:c4:dc:c6:6e:ee:65:e1:20:b8:63:38:fd:48:b7:
58:ca:a4:93:e2:5f:fc:5c:16:6d:7d:33:5a:bf:a5:
0b:cc:21:f9:79:a6:e0:da:d3:e8:e0:7e:d3:a2:62:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C2:62:04:5F:D9:5C:54:A4:36:44:B4:13:5A:F5:24:A8:7B:78:5A
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d8:b9:c1:6f:ca:53:84:f7:a0:94:d0:0d:79:37:89:bf:27:
0a:6d:01:60:5d:bf:b0:83:c1:c8:cb:6b:40:b3:b9:e2:fc:fd:
aa:31:eb:6d:62:03:be:72:35:b1:3e:99:94:bf:79:8a:05:4d:
44:6f:89:6a:dc:93:31:0b:15:ae:40:75:9b:37:91:70:a5:05:
1f:d7:e9:fc:9f:16:3a:f9:fd:1d:0d:cf:e9:be:19:dc:09:f7:
b0:7a:7e:70:d2:8a:1e:72:b9:25:a8:0c:7e:57:f5:8f:36:45:
ed:e8:7a:65:d4:fb:61:5a:12:7f:3c:c6:d6:ec:9e:51:7c:61:
a9:77:59:51:83:cd:dd:4b:86:b7:cd:d1:8d:4e:18:cd:89:82:
3d:35:96:dc:51:7c:fd:14:58:9c:e7:08:e4:dc:fb:0a:19:26:
1f:6c:ed:5a:f9:65:fb:47:6f:26:86:5a:98:bb:bc:be:b5:19:
b9:02:26:6e:8e:d2:de:26:29:e0:86:a3:bc:33:c9:3c:e9:8e:
87:16:e0:47:ce:08:9d:e0:4c:fa:15:ee:6c:f4:36:d3:27:eb:
37:48:37:4e:08:8b:07:2a:3a:9c:4d:dd:5b:68:17:e0:78:48:
a1:60:84:49:ed:c9:be:af:27:1b:51:1a:02:cc:f7:77:25:ba:
d3:f7:dd:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKYFjQRCejmydQo/6FlUcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNjRmODFiOWUzNmI4NDk5MTc3ODc2NzhkMDE0ZGI0YmZj
ZWYzMTEwHhcNMjYwMzI2MDgwMTE4WhcNMjYwMzI3MDgwMTE4WjAzMTEwLwYDVQQD
Eyg0NWMyNjIwNDVmZDk1YzU0YTQzNjQ0YjQxMzVhZjUyNGE4N2I3ODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXEHAQW+owahCxrzk0zt7uI1Gk36
RoF3ZmkbF7+LTHut0o+0rW1JsWGT3BOmfzrbi+LbJOV+L9bLY+Gzsv2OUhADE/qO
pufkO4KBRhFbsPsmDKtkGqzd6TaQz3fNsUH3iVg5rxxZ0mXAu5plkEZg8HHQN4Yy
85BtMndj8LpcCUzcOsJfM9sE+YZhKUdDqxwLQ+AWqNK0cXa3uW23RLYX3/cswlyx
pZWVd5AWPfAEekAjgQWshopnHhsTfQSThmmj251HsH0NgOqtMyVlmStaZbjCxNzG
bu5l4SC4Yzj9SLdYyqST4l/8XBZtfTNav6ULzCH5eabg2tPo4H7TomKQJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXCYgRf2VxUpDZEtBNa9SSoe3haMB8GA1UdIwQY
MBaAFA5k+BueNrhJkXeHZ40BTbS/zvMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTct
YzhmMTgyZTk1ZWE1LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTctYzhmMTgyZTk1ZWE1
LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdi5wW/K
U4T3oJTQDXk3ib8nCm0BYF2/sIPByMtrQLO54vz9qjHrbWIDvnI1sT6ZlL95igVN
RG+JatyTMQsVrkB1mzeRcKUFH9fp/J8WOvn9HQ3P6b4Z3An3sHp+cNKKHnK5JagM
flf1jzZF7eh6ZdT7YVoSfzzG1uyeUXxhqXdZUYPN3UuGt83RjU4YzYmCPTWW3FF8
/RRYnOcI5Nz7ChkmH2ztWvll+0dvJoZamLu8vrUZuQImbo7S3iYp4IajvDPJPOmO
hxbgR84IneBM+hXubPQ20yfrN0g3TgiLByo6nE3dW2gX4HhIoWCESe3Jvq8nG1Ea
Asz3dyW60/fdKw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:25 2026 by rpki-client