Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: CrOA2MBtae+6YzgUGqgo+X8dyEhMcJyi5dyHZNTSQmE=
Subject key identifier: 59:76:FC:D8:93:67:36:64:25:99:46:43:F4:6B:79:71:D9:8A:99:32
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 019E1F47A9D125F93EF22BE84E0A7EE35D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 03:00:50 +0000
Manifest this update: Wed 13 May 2026 03:00:50 +0000
Manifest next update: Thu 14 May 2026 03:00:50 +0000
Files and hashes: 1: 0f-a9_GN4BlFPHzpxP1ErjNcYpw.roa (hash: liGbjhGL+F+gsqi1YSPCU6zeplSqGVUh3nmEpRRgfOY=)
2: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: kKm6K8P2RYpJW8hPuIRf1lJ85lwqo7JdA7pcWgS7g9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:a9:d1:25:f9:3e:f2:2b:e8:4e:0a:7e:e3:5d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: May 13 03:00:50 2026 GMT
Not After : May 14 03:00:50 2026 GMT
Subject: CN=5976fcd89367366425994643f46b7971d98a9932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:09:f4:9b:4b:9a:bf:da:32:65:0c:78:90:
bf:59:61:03:38:1e:a2:1e:62:3f:26:55:48:a5:83:
bb:c5:82:0d:ec:2f:2a:10:9b:80:5c:84:23:97:bf:
e0:7f:40:8f:7c:75:39:a1:0f:85:0f:9f:75:7e:1b:
ae:08:71:ad:d7:71:32:3e:07:61:5c:77:2a:73:33:
67:e4:b6:21:5f:00:8d:1c:a6:e4:8b:ba:5c:b1:c4:
37:96:f1:a8:11:e8:1d:fc:da:ef:98:83:a8:db:8a:
c3:cd:12:81:72:b1:42:84:11:f3:8d:1c:d2:e3:d8:
45:d2:57:a3:00:fa:41:ee:dc:54:37:f8:25:88:4e:
ff:29:1c:86:8b:57:d4:b4:be:9f:83:4a:f2:b1:2a:
07:8b:0a:8f:be:8a:64:6b:50:5d:95:5f:ef:42:70:
d4:04:bc:d8:2d:d4:72:4e:17:56:69:fa:18:b4:6d:
05:33:0e:92:c8:7d:9f:01:17:2d:ba:d8:97:1f:d2:
52:61:e0:7e:5e:fb:86:33:48:bb:6d:6b:33:5f:b2:
a3:46:9f:0d:6a:55:8e:f7:8b:79:71:2a:8f:eb:00:
cd:c5:d5:3b:e1:6d:24:b5:e1:b5:82:30:c2:62:c7:
6b:43:2e:6a:32:65:75:b6:a4:e7:79:9b:ec:69:e1:
e7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:76:FC:D8:93:67:36:64:25:99:46:43:F4:6B:79:71:D9:8A:99:32
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:84:0f:bd:b9:50:58:5c:c7:2e:b3:5f:ab:7d:1e:fc:93:9b:
b5:cf:2b:9d:ca:f3:39:42:98:22:50:1e:0c:5f:ef:b1:6c:0f:
60:ea:c5:10:d2:99:0c:d7:48:0e:a4:bf:52:e6:c0:09:82:88:
11:fb:f0:e8:7a:7e:7c:cc:35:8e:cd:1c:10:49:3b:b1:7b:b5:
25:cb:46:d4:63:c4:42:22:68:cb:80:e6:9f:88:f1:a0:c4:88:
76:2e:0e:76:89:e2:bd:23:6e:d4:83:99:4f:ec:64:ab:6e:67:
4b:0b:c2:65:99:7e:68:4d:19:78:d4:b3:92:69:e5:03:4c:ca:
67:31:a4:2a:05:8c:e8:75:f1:d8:20:18:6c:76:6f:b0:e4:75:
52:ee:d9:97:b2:e5:a7:0c:4a:a6:4c:88:9f:96:20:fb:60:18:
c0:16:b8:07:47:61:4e:ce:c0:ff:3c:94:5a:be:06:02:20:67:
3f:f0:4f:45:86:59:77:69:91:bc:75:8b:47:c1:81:c0:43:45:
92:29:fb:d6:9e:ed:6f:cb:cd:f3:92:94:23:32:a1:7e:2b:55:
16:7c:37:7a:05:c0:7b:d6:3d:9c:d1:af:b4:ca:1a:39:b3:ae:
30:e9:59:9e:d3:85:d3:da:b1:3a:66:b4:5d:23:0c:42:62:58:
e0:cd:23:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR6nRJfk+8ivoTgp+411iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNmIzODVjN2I4Nzc4YmY3OGFmMjQyMWM5OWY1ZDM4YmQ1
NTY5MTQwHhcNMjYwNTEzMDMwMDUwWhcNMjYwNTE0MDMwMDUwWjAzMTEwLwYDVQQD
Eyg1OTc2ZmNkODkzNjczNjY0MjU5OTQ2NDNmNDZiNzk3MWQ5OGE5OTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptcJ9JtLmr/aMmUMeJC/WWEDOB6i
HmI/JlVIpYO7xYIN7C8qEJuAXIQjl7/gf0CPfHU5oQ+FD591fhuuCHGt13EyPgdh
XHcqczNn5LYhXwCNHKbki7pcscQ3lvGoEegd/NrvmIOo24rDzRKBcrFChBHzjRzS
49hF0lejAPpB7txUN/gliE7/KRyGi1fUtL6fg0rysSoHiwqPvopka1BdlV/vQnDU
BLzYLdRyThdWafoYtG0FMw6SyH2fARctutiXH9JSYeB+XvuGM0i7bWszX7KjRp8N
alWO94t5cSqP6wDNxdU74W0kteG1gjDCYsdrQy5qMmV1tqTneZvsaeHnYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFl2/NiTZzZkJZlGQ/RreXHZipkyMB8GA1UdIwQY
MBaAFA5rOFx7h3i/eK8kIcmfXTi9VWkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMt
MWM3NzQzMWIwNWY3LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMtMWM3NzQzMWIwNWY3
LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoQPvblQ
WFzHLrNfq30e/JObtc8rncrzOUKYIlAeDF/vsWwPYOrFENKZDNdIDqS/UubACYKI
Efvw6Hp+fMw1js0cEEk7sXu1JctG1GPEQiJoy4Dmn4jxoMSIdi4OdonivSNu1IOZ
T+xkq25nSwvCZZl+aE0ZeNSzkmnlA0zKZzGkKgWM6HXx2CAYbHZvsOR1Uu7Zl7Ll
pwxKpkyIn5Yg+2AYwBa4B0dhTs7A/zyUWr4GAiBnP/BPRYZZd2mRvHWLR8GBwENF
kin71p7tb8vN85KUIzKhfitVFnw3egXAe9Y9nNGvtMoaObOuMOlZntOF09qxOma0
XSMMQmJY4M0jlw==
-----END CERTIFICATE-----
Generated at Wed May 13 14:06:37 2026 by rpki-client