Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
File: DMgdB0NX3l0y-KZc2e56WFvz7G8.mft (raw, json)
Hash identifier: OPidYFfmcijNrpGh2NTGuw+SvrAep/C+Mm37bKt5+do=
Subject key identifier: 2B:01:4A:E7:55:C3:C0:34:74:39:21:9B:0A:25:46:F9:DD:0C:43:BA
Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Certificate serial: 019D273A93173E9AD40DA9BB0231D9AD2530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:00:43 +0000
Manifest this update: Wed 25 Mar 2026 23:00:43 +0000
Manifest next update: Thu 26 Mar 2026 23:00:43 +0000
Files and hashes: 1: 9ZpkTQXpmkfvpR0E4XJe3RUF224.roa (hash: 03q2A8HDE0gao07Rw7lfTux7UqjzMWOiEnt7Qllp1sU=)
2: DMgdB0NX3l0y-KZc2e56WFvz7G8.crl (hash: h1bE2RjFYvWcXBldUxbqSe08zbFb6sD68baHAvRMkf4=)
3: SmZkHgccxI-QnnzFVIpMIGKDK7g.roa (hash: oqBJFsJvqV6Ndgclkr3Sw2YFLuZdnX/bnH7vu2GgJ5o=)
4: u3HrLTERJi2B9n5xQ0BiK-cRiWU.roa (hash: VW52fyk1URQcXo8jkObs2fsXbuZN/DcsMh4JuWlfK+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:93:17:3e:9a:d4:0d:a9:bb:02:31:d9:ad:25:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Validity
Not Before: Mar 25 23:00:43 2026 GMT
Not After : Mar 26 23:00:43 2026 GMT
Subject: CN=2b014ae755c3c0347439219b0a2546f9dd0c43ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:57:8a:8a:36:0b:2b:0a:26:af:c9:91:7e:
aa:28:e5:05:cf:97:a9:7b:e0:db:9b:cf:d7:59:88:
35:24:e6:d3:27:ab:68:dc:29:f1:e5:85:53:4a:4a:
6f:ac:18:a0:1f:3c:4d:05:f2:e8:c9:eb:4b:3a:c4:
69:38:6d:d0:7a:9b:f7:45:f1:aa:9f:64:83:0b:81:
54:01:e8:9c:90:12:a1:ca:31:6a:3e:4d:0f:1f:e9:
dc:00:7e:ce:83:d2:6f:58:d3:7f:7c:56:f3:e3:50:
63:7d:cb:7b:ca:37:46:32:d7:6e:ab:1a:42:32:01:
9e:30:ef:b4:fa:fb:82:34:5c:7a:ce:c7:17:24:e6:
1d:b5:0f:88:be:3e:f6:07:bc:da:e6:d0:ad:d6:4c:
b7:87:0e:01:d5:e8:ab:e7:85:61:73:4d:c2:8d:0a:
84:bf:93:c6:ed:19:78:16:ef:b3:fb:68:0c:f2:51:
32:eb:52:09:75:a3:c1:ed:e9:b5:e1:92:6d:15:06:
f5:6f:42:94:a7:c0:ec:f9:0a:57:03:a2:55:97:9c:
c1:68:e3:cb:16:fc:34:ef:e8:e2:5d:59:c1:86:07:
8f:b3:df:c5:4a:98:c0:ab:13:6b:2a:0e:c5:e0:c2:
c8:dc:7d:59:ba:6a:47:6f:14:dd:10:bd:f0:f9:95:
4a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:01:4A:E7:55:C3:C0:34:74:39:21:9B:0A:25:46:F9:DD:0C:43:BA
X509v3 Authority Key Identifier:
keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:92:9f:a7:b9:fc:30:42:d6:ed:c5:50:a7:db:bf:7b:1e:97:
89:b5:51:37:2b:46:93:24:eb:9a:53:73:53:c0:b4:e2:db:94:
40:94:7b:62:96:62:cb:b0:5a:36:47:df:6c:09:80:ce:91:55:
1b:f4:28:6e:7b:0c:48:6b:50:b6:3f:bd:ca:db:f8:c4:dd:33:
8a:e6:5c:a1:91:15:f8:a3:00:78:77:c3:fb:c7:77:5a:98:a8:
3f:0b:d2:24:46:b4:4b:8e:6f:32:03:ec:ee:07:42:31:6c:b5:
2d:af:8f:34:01:fe:07:38:52:e8:24:ff:13:2b:84:3e:b7:0b:
05:5c:ed:1f:14:0c:e8:99:e3:84:95:ee:75:25:8a:56:b6:cb:
72:64:a0:c9:36:de:2e:c7:f0:b3:83:8a:ac:8e:4e:93:f2:6a:
6a:cb:a9:97:e2:98:6a:1c:49:3b:90:89:a9:94:b7:0a:b9:c2:
eb:3b:15:a7:a9:12:fb:95:2a:ff:99:e7:d9:22:22:6f:ea:b1:
6f:9b:2a:6f:e9:b2:c4:c5:d5:01:bf:73:c3:91:49:31:88:e9:
0a:65:2e:90:c6:7e:99:40:66:59:6d:dd:25:bc:96:0c:63:09:
d9:88:10:02:08:d5:f3:4a:69:37:9c:ed:65:4a:38:e7:e4:f7:
a4:68:ae:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:48:28 2026 by rpki-client