Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
File: dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft (raw, json)
Hash identifier: 0Ka7rAnV/Cf9rbGW1lXT7V6VVyz3rYE/VtFRdqsLj78=
Subject key identifier: B6:FA:E7:DF:09:9A:0E:34:25:4C:53:4B:82:C1:1D:55:DF:9B:59:FE
Authority key identifier: 76:68:FE:49:AE:97:47:25:71:50:01:5B:E4:3E:29:62:8C:63:16:C4
Certificate issuer: /CN=7668fe49ae9747257150015be43e29628c6316c4
Certificate serial: 019D284D9C64DB437F7A173425FF5B93B80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:01:08 +0000
Manifest this update: Thu 26 Mar 2026 04:01:08 +0000
Manifest next update: Fri 27 Mar 2026 04:01:08 +0000
Files and hashes: 1: 7PU06grVngn__PyWKKvtWslEGAM.roa (hash: uvFJtYim7HXN6krTzVc4QD8VUGVl3D711DAfuBRhXa0=)
2: dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.crl (hash: 1BSPARbHGNnmbGW1YYX9vP0Q6HBxXY7eNWeJJaZqESc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:9c:64:db:43:7f:7a:17:34:25:ff:5b:93:b8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7668fe49ae9747257150015be43e29628c6316c4
Validity
Not Before: Mar 26 04:01:08 2026 GMT
Not After : Mar 27 04:01:08 2026 GMT
Subject: CN=b6fae7df099a0e34254c534b82c11d55df9b59fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:0b:d5:d7:71:e1:af:cb:83:df:ef:d2:4b:
04:40:78:b9:75:fe:11:d3:b3:9a:f8:f2:17:e4:fb:
62:b6:75:be:c5:62:8a:93:25:8e:78:d4:49:0d:63:
d2:8c:75:f3:10:01:50:c7:09:63:11:b7:53:d9:53:
0c:1f:1d:c5:78:59:77:5d:b4:2f:02:67:a3:4d:8d:
e4:6a:a0:6a:fb:9b:4a:3d:05:74:5d:cc:df:bb:18:
62:45:df:64:28:3d:85:f5:0b:85:d6:f9:53:1c:1a:
38:f3:a6:a1:df:8e:5a:ad:2c:38:e7:34:de:7a:39:
54:9d:e0:41:42:11:fa:27:fb:23:22:72:fe:ef:fe:
95:25:00:6f:a9:e6:be:c2:11:a2:4b:28:d9:bd:a2:
e7:8d:eb:c1:e8:1e:5b:82:bb:0c:20:82:6a:20:25:
b4:8b:5a:80:b0:41:12:fc:9c:b3:c9:60:ef:2f:83:
47:de:e8:b8:5e:32:23:c6:e3:5b:12:9a:60:bd:e6:
20:43:f8:3f:4d:99:4f:79:a1:16:b6:9e:c0:3a:c2:
3e:bd:06:55:cf:92:0d:84:57:3b:58:4c:53:76:88:
13:1b:b8:84:06:40:7b:7a:52:03:99:81:7c:94:5b:
58:3a:f0:32:4c:7e:92:71:2d:36:9b:54:be:c4:ff:
1c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FA:E7:DF:09:9A:0E:34:25:4C:53:4B:82:C1:1D:55:DF:9B:59:FE
X509v3 Authority Key Identifier:
keyid:76:68:FE:49:AE:97:47:25:71:50:01:5B:E4:3E:29:62:8C:63:16:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1601e6-c5b9-4322-89f9-4bd14e7a85cf/1/dmj-Sa6XRyVxUAFb5D4pYoxjFsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e5:2e:3f:59:80:a8:30:18:3f:92:fa:7e:de:2a:04:c3:cb:
0c:5d:4d:75:4f:48:3e:f0:03:3e:53:9c:5e:1d:40:10:b1:24:
57:ff:02:8b:78:e7:32:b5:08:8d:fb:51:87:c5:d2:f8:63:cb:
f7:1f:1a:86:58:ec:99:ac:f2:88:f8:91:15:a4:f6:44:42:bd:
f7:f7:fc:61:7a:50:0b:6d:ad:a8:ee:bf:00:3f:83:ed:61:51:
ad:74:22:fb:79:ec:5e:73:41:2e:19:1c:ff:0c:e4:a1:31:ee:
d9:1d:89:dd:12:b1:d1:cb:e1:f5:06:30:2e:08:e3:0b:16:a5:
d5:6a:af:3f:9d:71:6e:6a:14:18:b5:81:c0:3e:c8:26:1d:29:
16:e8:92:24:46:65:bf:bc:67:38:23:98:80:20:65:64:a3:43:
e3:a7:f8:3e:b1:e3:84:cc:d3:e0:4d:25:07:7c:84:de:8b:08:
db:31:33:22:e4:e4:e2:e3:f2:63:fc:1d:a4:9c:cf:69:07:35:
e4:42:be:74:d4:de:31:60:83:3e:36:71:84:b8:a3:63:fb:8c:
a5:ec:e7:27:26:66:da:8d:90:76:e9:18:c4:3d:f5:d4:87:73:
ad:5d:12:11:fb:91:7b:4f:35:34:9f:d4:c5:e8:b7:93:29:2d:
58:00:1d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:34 2026 by rpki-client