Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json)
Hash identifier: 2m8BuuEVQZPrTOZ75OP8WjVFlbb6ztlN3vwLEjhomEg=
Subject key identifier: B7:1D:D8:72:44:C7:72:C7:C5:FA:63:66:CD:74:1E:1A:D1:E3:D8:74
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 019D28F2C941C41761EC1F3F97F2E90F5990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 07:01:32 +0000
Manifest this update: Thu 26 Mar 2026 07:01:32 +0000
Manifest next update: Fri 27 Mar 2026 07:01:32 +0000
Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: 6K3/gFZbp8C47xaIeGpkmK9gnv4xYClpaVZCH+mSdQg=)
2: nLPrlrzFQJke2w0nSv6P6BPs3rs.roa (hash: lHcs6pM3E3th/X7lArO6Gv/GZjzfkX92Szx3cqmHxMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:c9:41:c4:17:61:ec:1f:3f:97:f2:e9:0f:59:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Mar 26 07:01:32 2026 GMT
Not After : Mar 27 07:01:32 2026 GMT
Subject: CN=b71dd87244c772c7c5fa6366cd741e1ad1e3d874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:ed:c8:25:37:82:bb:d3:c3:96:81:5f:b3:
df:a9:1f:97:cd:a9:92:cd:fe:d4:0b:fb:b6:30:70:
1c:33:8b:00:2c:98:5a:3d:cb:c0:b0:c1:6c:59:aa:
92:88:23:7f:7d:93:9a:18:64:0b:b8:b9:72:65:ed:
26:c3:b5:d1:91:6c:1c:f2:ed:f3:ce:34:6e:d7:b0:
e7:36:2a:5c:77:2d:9d:be:7b:b3:90:a1:bd:c0:14:
db:01:99:23:a1:70:e7:82:05:ce:ef:db:1a:26:33:
07:88:a4:35:07:31:b7:f0:21:9f:d7:2d:e7:5b:a6:
8d:39:a8:00:78:65:2e:8d:4c:c8:85:d1:4c:70:a3:
68:cb:90:db:ef:1d:8a:5d:36:64:ce:33:0d:78:25:
e9:16:88:25:02:3e:ca:49:31:21:18:b6:27:e2:9e:
6d:b5:d8:31:ec:44:1a:53:ed:a6:99:0b:0b:78:1b:
4d:a6:0b:dd:42:21:8c:bd:6f:d5:54:ec:7a:1a:40:
4b:cb:c0:c6:59:08:3a:b7:43:44:cc:6a:26:3e:7e:
8b:e8:b9:b5:65:c0:3e:bb:42:ea:fb:0d:c6:6b:90:
c0:05:17:2b:0f:50:db:8c:69:85:10:80:2b:ae:ae:
e1:a1:9a:53:68:21:71:e0:23:63:0f:d9:5e:67:11:
7d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1D:D8:72:44:C7:72:C7:C5:FA:63:66:CD:74:1E:1A:D1:E3:D8:74
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1f:70:9e:8b:a9:da:30:c6:3f:51:92:82:58:d7:3d:fb:55:
a6:70:3d:aa:6a:2f:a9:b1:42:77:f2:08:b1:e5:e0:0f:24:95:
37:a4:eb:2d:67:81:d6:0e:a2:c9:ab:43:f2:7d:d8:45:e4:4d:
8d:80:83:65:21:bd:51:20:b4:b8:de:39:e3:e4:e1:5f:ed:50:
89:4b:1b:12:82:44:ab:7e:fd:dd:5e:ea:75:9f:4f:7b:82:b7:
81:76:24:68:e9:f4:9f:9f:9a:fb:b6:f2:22:c6:61:e9:2f:0d:
c8:b6:d8:49:e8:2c:a1:f3:63:3a:42:eb:8b:b1:08:2f:1d:06:
33:7a:a3:fc:d6:27:8c:30:68:f8:49:7c:54:6b:ea:60:e5:aa:
5d:cf:03:a6:1c:7b:d9:df:de:c5:e0:41:30:d4:e1:64:21:d0:
8f:89:65:ad:2a:ef:33:08:d2:fd:99:36:df:4e:f7:f0:31:f3:
7b:eb:b6:01:b8:ff:0c:f5:c7:9f:08:c6:9e:07:48:80:b5:0a:
97:6e:f3:ae:1a:e7:88:92:aa:c0:4e:a8:24:48:1e:c2:ad:64:
ff:f5:54:3f:ef:a8:97:7d:0c:a3:7e:9f:50:b3:86:82:e3:70:
eb:6c:94:c7:10:ab:ad:d8:e7:1a:c2:65:98:b9:ea:03:76:6a:
a4:ca:3b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:11 2026 by rpki-client