Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: NBjA/gG1aeZWlWyxmMMUXc/QdDpFTAAQcqYct4Bg3qU=
Subject key identifier: BC:6D:98:9A:0A:A6:C3:94:8C:6C:71:6B:2D:1D:9C:A7:CB:68:17:1E
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 019D25BA176DBCB0D03EE7E958F6F22C4BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 138B
Signing time: Wed 25 Mar 2026 16:00:45 +0000
Manifest this update: Wed 25 Mar 2026 16:00:45 +0000
Manifest next update: Thu 26 Mar 2026 16:00:45 +0000
Files and hashes: 1: 1-r9qYFCluKH7Ma8TQ_Akyltf1Lc.roa (hash: GVSG8HQq960x0d4CpK5jN+FSCHq1SzLhEkFhDXdwhwI=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: 8ZnVtWe8jeveSALBouM88kBah6M6c3/MTusdgODAx2U=)
3: Pk5JLOSd1QInAh2OTvMfyyR1NPI.roa (hash: O7rw9h1GQCgx5zvERGlnO4YLbgkL7RaVJgOWvuy279I=)
4: oVjc2gbj8Z3HA7eAzKIRnl2lQMA.roa (hash: zAAZk1U4VBtTI0cONSxWT3e4cbR3Hkt4vRra+VHSqCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:17:6d:bc:b0:d0:3e:e7:e9:58:f6:f2:2c:4b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Mar 25 16:00:45 2026 GMT
Not After : Mar 26 16:00:45 2026 GMT
Subject: CN=bc6d989a0aa6c3948c6c716b2d1d9ca7cb68171e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:5b:30:93:61:c2:b7:3c:1a:13:ab:c2:6e:
17:ae:a6:ee:1d:25:75:47:7c:c1:f8:b4:da:03:ae:
14:9b:3e:f2:a5:e2:c7:df:7c:44:e6:36:03:a4:f7:
9d:b6:43:7e:07:66:09:e9:fd:45:04:3b:42:59:ed:
d1:84:9a:2b:a8:c0:88:8c:d3:a6:79:cb:c7:e8:89:
d6:9c:12:ef:50:8b:5d:5a:fb:e9:2a:8a:0c:46:77:
b3:67:b7:b4:9e:03:48:cd:ca:ce:d2:ce:01:86:17:
3f:67:2e:21:28:81:e5:54:6d:2b:8a:77:ef:17:37:
6a:d2:f6:ed:87:ed:31:40:11:fe:55:c6:da:4d:7b:
87:a7:a0:92:7f:91:00:0f:fe:0b:ec:00:12:ec:b9:
7b:30:0d:10:7d:34:10:9d:f6:e3:12:ee:10:a3:4f:
b1:84:c4:90:d1:e5:83:40:c4:47:85:d2:1a:2e:ca:
5c:a3:b1:2d:c1:c5:62:0a:5b:5f:93:5e:a6:6b:74:
17:76:0f:78:50:5f:5f:95:1d:a8:da:07:b3:c1:15:
a6:bd:98:a1:6b:91:5c:1a:04:e0:c1:9c:a5:3d:8a:
5d:01:fd:62:d1:b2:0f:58:7f:c5:ec:74:11:42:f9:
8b:c5:49:a3:22:a0:05:e8:ec:f4:fa:aa:f4:2b:b8:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6D:98:9A:0A:A6:C3:94:8C:6C:71:6B:2D:1D:9C:A7:CB:68:17:1E
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7f:fd:40:6f:f7:ce:70:ce:46:6c:c2:e6:7d:98:6a:a0:97:
04:b9:87:50:5c:08:e2:5c:c9:f2:8b:95:45:1f:ed:84:72:96:
2f:eb:e5:3c:a9:a3:5d:29:40:5f:d0:77:bb:66:fc:a8:29:51:
ce:20:0e:62:8d:15:ab:e6:6e:6d:87:d4:6c:ad:be:61:40:c9:
fd:08:cd:45:98:d0:d7:89:0b:08:51:29:bd:8c:93:fe:eb:36:
0f:91:75:6c:e5:0c:5f:a5:7f:f0:1a:e6:b4:a3:6e:8a:1f:cf:
ba:e6:36:b5:05:ec:3b:4d:71:6c:39:f4:e4:e3:f4:34:58:b1:
89:5b:80:92:9c:dd:b7:0c:22:0f:fe:bf:eb:cc:c8:cb:f3:bb:
27:a3:d7:67:c6:a8:c1:00:77:5d:e1:93:88:e4:5e:d1:b9:f7:
75:aa:a0:d6:e5:f3:6e:80:8a:e5:ce:1d:68:54:b1:4b:74:64:
de:88:b3:2d:14:95:73:e6:93:60:12:8c:a4:87:43:60:f0:8d:
d9:0d:7d:0e:74:9e:8a:ef:29:48:88:8b:f0:0a:78:f8:4d:72:
64:9d:a9:aa:0e:c4:76:67:89:d5:77:e1:d2:ad:f1:9d:7e:82:
85:a5:dc:26:13:58:ec:67:7e:4d:d5:22:02:90:5e:81:f7:b5:
4c:29:73:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:39 2026 by rpki-client