Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json)
Hash identifier: NEdJqOyopib3YhHfNTCGn3qwrAf1Y4U5C4EO6kCiOp4=
Subject key identifier: D9:19:D0:16:EF:18:99:14:C7:60:1A:46:CE:AB:41:AB:56:27:33:06
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 01A0F267C4FAA4ABF7FA672A65BBD3BD74D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
Manifest number: 1A7F
Signing time: Wed 30 Sep 2026 13:01:21 +0000
Manifest this update: Wed 30 Sep 2026 13:01:21 +0000
Manifest next update: Thu 01 Oct 2026 13:01:21 +0000
Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: 84ZrG69OjaVDnjdgXmN6sGQfNqripjErWE9JoR7CdpM=)
2: nLPrlrzFQJke2w0nSv6P6BPs3rs.roa (hash: lHcs6pM3E3th/X7lArO6Gv/GZjzfkX92Szx3cqmHxMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:67:c4:fa:a4:ab:f7:fa:67:2a:65:bb:d3:bd:74:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Sep 30 13:01:21 2026 GMT
Not After : Oct 1 13:01:21 2026 GMT
Subject: CN=d919d016ef189914c7601a46ceab41ab56273306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:a2:97:d3:0b:51:b1:0f:a0:af:7b:75:48:
a8:22:0c:63:98:e4:c4:cd:46:b8:69:a7:d2:d6:6e:
1a:4d:c7:17:f5:51:31:e6:51:d3:6e:ae:2f:d6:56:
98:93:55:83:7c:0f:f1:8d:c8:44:7f:8e:f1:a7:e2:
16:aa:ab:fb:53:1a:b8:55:c6:55:57:7c:2b:5f:d0:
05:2e:aa:64:db:41:84:f8:f8:2b:e5:fd:61:65:cd:
83:ef:43:0c:0f:89:3c:ce:3b:e2:db:32:c3:47:df:
4b:1d:33:8d:ab:0b:8d:46:0e:b2:71:0e:20:72:56:
02:46:7d:b8:8b:ba:e5:57:7e:96:61:26:96:7c:bc:
46:a8:4d:94:48:83:cf:8a:98:43:26:17:75:bc:38:
4f:a8:5f:78:df:2e:7b:d1:fd:a7:0a:23:38:90:9d:
b3:0d:49:7d:ae:9b:69:fa:e6:b5:21:87:fa:6b:a5:
e5:a0:3b:6b:34:20:74:ad:6e:22:7a:1f:7b:ae:6e:
49:28:d9:4f:a4:9a:6d:b1:68:d8:3f:40:81:82:19:
99:5e:85:72:fe:2d:4a:59:1a:8f:fc:fa:e8:31:67:
56:10:18:d2:6f:bd:10:b6:e9:88:98:3b:59:19:32:
93:0c:79:d8:23:94:d4:10:46:7c:b7:32:2f:55:d0:
7c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:19:D0:16:EF:18:99:14:C7:60:1A:46:CE:AB:41:AB:56:27:33:06
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8f:e0:66:0d:ae:d6:7b:2e:c7:f1:7a:84:a4:ab:9f:70:04:
88:9e:cf:1a:d2:84:09:6d:f4:c9:4a:b6:c1:73:1f:8e:97:0a:
69:e2:52:75:b7:57:06:2b:0f:d2:0a:30:62:69:81:cd:7f:56:
37:e7:81:b2:b3:02:aa:99:32:95:4d:e7:2a:6b:00:4a:7a:2a:
96:00:72:07:af:fa:0d:04:62:50:c4:3a:47:37:ea:e0:b8:1e:
8d:89:9b:21:37:d4:7f:d7:be:c5:30:d7:5f:fa:6e:4c:68:b9:
54:ca:fa:1e:57:b4:7b:fc:23:ff:17:e9:08:cb:c8:b0:61:31:
a7:a9:b9:67:0f:ae:c3:3c:5a:65:fa:0d:be:91:ed:c3:98:55:
c1:ce:05:eb:50:53:36:2a:89:fd:14:fe:a5:b1:d4:bf:f8:65:
5f:f9:1b:de:cd:c9:43:41:7d:b3:29:78:b5:e2:a8:f3:8c:91:
fe:05:32:fa:00:d7:d6:a8:f4:62:f3:04:d5:ea:5a:2d:bf:5a:
eb:6a:e8:7b:be:63:8c:4a:e4:41:3d:64:92:2c:f5:04:da:61:
ab:63:52:a8:38:af:34:c3:c6:9b:15:11:fe:ff:fc:7d:2e:93:
ce:26:91:d7:ff:86:eb:94:24:fa:7e:e8:3e:b1:1d:a0:53:f7:
13:27:23:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:27:27 2026 by rpki-client