Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json)
Hash identifier: oFVUfmBW2FFcrknplFLTavr6cdGY7Qw3pxiUiafKpO4=
Subject key identifier: A9:6F:03:C0:A0:03:62:89:23:B3:C7:25:47:EE:4C:18:AE:75:3A:A0
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 019F94DB609D2CFB7829D185713B723874B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 16:00:32 +0000
Manifest this update: Fri 24 Jul 2026 16:00:32 +0000
Manifest next update: Sat 25 Jul 2026 16:00:32 +0000
Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: dmftBXotP7rX/3prEKHJ3OL6v0O5sHlITHFveUjWLtw=)
2: nLPrlrzFQJke2w0nSv6P6BPs3rs.roa (hash: lHcs6pM3E3th/X7lArO6Gv/GZjzfkX92Szx3cqmHxMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:60:9d:2c:fb:78:29:d1:85:71:3b:72:38:74:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Jul 24 16:00:32 2026 GMT
Not After : Jul 25 16:00:32 2026 GMT
Subject: CN=a96f03c0a003628923b3c72547ee4c18ae753aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:09:53:16:1e:f3:d3:fc:44:f3:a4:3b:8d:
cb:ab:ae:cd:f0:77:64:ec:c7:48:dd:26:c8:0f:0d:
1c:8b:5a:40:76:ec:6d:00:08:e0:43:5b:b8:75:4e:
b6:b6:51:8a:6b:9c:20:c4:0e:f7:83:2f:ad:1a:e9:
8a:30:b0:49:27:6c:34:7d:ce:26:e0:cf:45:4b:20:
13:d6:76:f9:db:bb:79:fa:ca:9b:f5:b3:32:4a:b7:
f2:7d:d4:99:37:91:24:f9:0c:ee:7a:46:3c:66:64:
91:fa:25:15:ed:d0:af:c7:70:21:55:a0:8b:7a:c0:
23:ff:b7:c0:bc:5a:85:06:fe:bf:c3:96:12:d0:3e:
6e:5d:3f:a2:37:a8:a7:89:50:c0:cd:ea:af:67:5a:
72:38:b4:c9:42:d0:a3:3e:5b:c8:87:0b:69:04:02:
bd:14:d0:0f:2c:d5:70:e1:51:e4:61:56:65:4e:ad:
a2:89:89:fa:1d:54:aa:94:b4:dc:c3:00:57:57:fd:
1b:2e:33:c9:dc:78:1a:d7:50:68:0d:5d:68:29:83:
3d:8a:dd:a9:50:6e:e4:d9:dd:e2:b1:8f:3f:f6:24:
c1:80:50:49:ee:df:f5:41:e7:1c:25:b7:42:15:c3:
90:dc:ec:b8:79:4b:9b:91:84:0b:04:fe:87:57:cd:
5c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6F:03:C0:A0:03:62:89:23:B3:C7:25:47:EE:4C:18:AE:75:3A:A0
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:36:34:99:f0:1b:06:27:ca:fc:05:f4:a4:ae:26:b5:d0:f9:
a3:7c:67:d9:89:47:d5:ed:30:07:79:fe:e6:54:0e:b1:0e:3b:
f4:61:63:39:f7:f0:31:af:cf:2a:d9:e0:4a:9d:a2:3a:6b:fe:
c9:dd:fb:98:0b:e8:24:71:22:56:67:a2:9c:9b:18:fe:c9:e9:
6e:42:f7:9c:a0:4e:b3:1f:c2:50:a1:5c:7f:02:6b:8b:2f:e0:
29:b8:2e:08:f6:a4:1c:f8:a0:dd:22:43:ec:68:10:3b:ab:81:
52:71:2e:e3:d5:be:60:6c:98:44:30:5f:16:d1:c5:95:31:5b:
49:a2:d5:62:be:8a:81:41:a8:7a:1a:86:c3:10:b6:19:26:ad:
f1:d1:d1:98:68:33:ea:22:12:96:87:72:68:4f:01:21:c7:7b:
91:17:97:90:3d:0e:58:59:12:7b:66:f8:46:e2:f2:63:2e:da:
70:12:40:49:ca:5c:21:d1:8b:7b:79:64:bc:62:65:ad:60:ab:
3a:a7:8c:23:5c:66:c0:9f:4b:33:63:dc:6b:4c:7d:e9:6d:61:
21:d5:c9:92:bf:61:f8:69:35:ef:65:72:b7:f9:df:28:05:b3:
7d:9d:58:13:05:27:34:65:d1:64:6c:42:fd:aa:08:1a:36:19:
b4:8c:5d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:45 2026 by rpki-client