Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: NOfleoFJDiE1FEiVeWizG9XZA1YQQarZcmImbSlGlIc=
Subject key identifier: F2:DD:46:68:6E:85:BF:BF:46:11:31:18:84:90:2E:8A:7A:F4:C9:4C
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 019D2A04B6B28B74D1A1A18968E2223B9457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 12:00:45 +0000
Manifest this update: Thu 26 Mar 2026 12:00:45 +0000
Manifest next update: Fri 27 Mar 2026 12:00:45 +0000
Files and hashes: 1: 0f-a9_GN4BlFPHzpxP1ErjNcYpw.roa (hash: liGbjhGL+F+gsqi1YSPCU6zeplSqGVUh3nmEpRRgfOY=)
2: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: j2njgmv7fbbAqPWvOWP2d8CMFHeoLSyigeAAeY2vs6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:b6:b2:8b:74:d1:a1:a1:89:68:e2:22:3b:94:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Mar 26 12:00:45 2026 GMT
Not After : Mar 27 12:00:45 2026 GMT
Subject: CN=f2dd46686e85bfbf4611311884902e8a7af4c94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:2e:10:fc:98:56:a6:a1:ec:d0:0a:71:67:
5b:bd:ac:ce:c4:34:93:bd:db:01:83:f3:84:da:55:
2a:33:53:cc:ea:15:a4:8f:b6:b8:2d:39:a0:e2:61:
6a:12:bc:2e:5b:bf:27:8e:07:a3:e1:6f:db:ff:9b:
2f:41:04:28:2b:62:d6:0b:f7:f4:4a:01:8c:af:9b:
2b:3e:24:06:54:2e:9f:91:6b:aa:f5:7f:14:df:ec:
00:97:74:67:b3:c2:bc:31:13:50:66:d1:84:8f:e6:
0e:a4:9b:8a:5a:83:79:2a:1d:67:28:de:b7:73:0b:
8f:f7:b6:d0:66:e3:0b:44:f8:09:93:2a:17:3a:d2:
7d:69:e9:1d:f7:c1:1c:a9:55:90:b8:fe:90:71:c2:
24:60:21:ea:a2:b1:3b:43:41:41:a1:4c:f8:63:88:
8c:6e:7f:5a:f5:61:01:ce:a8:fc:f6:9a:fe:51:b7:
9a:be:35:71:36:9c:0b:28:1a:d8:b3:7e:71:53:3f:
0a:d7:01:76:16:3c:28:2a:11:be:f7:5b:71:60:3e:
2a:22:c9:8e:45:e7:8e:ea:70:ca:63:41:c0:23:34:
e5:38:f0:19:d5:aa:9e:8b:50:71:8b:85:e5:d0:d2:
a6:54:7e:90:53:f9:d0:2a:f0:d6:29:60:f6:d1:e9:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DD:46:68:6E:85:BF:BF:46:11:31:18:84:90:2E:8A:7A:F4:C9:4C
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f5:20:8d:9d:d6:4a:7d:a9:80:91:c4:3e:28:d2:de:a3:08:
7e:46:4b:a0:71:93:33:f2:a6:e3:75:82:81:8d:f4:ef:ae:0c:
a1:f4:3e:71:76:a5:b0:10:6b:8d:55:8c:de:b1:ce:03:75:75:
4d:fd:c1:d1:99:56:12:07:79:51:17:4c:5d:a2:6e:e5:29:80:
d6:e0:0e:e7:80:f9:1f:8f:75:5c:13:67:de:21:69:82:82:e7:
56:f1:96:3f:d1:a1:4f:48:f0:b4:15:fb:74:d5:6f:60:f5:82:
e2:45:ec:74:e0:46:e9:be:99:27:52:9e:7e:69:92:1a:c8:71:
f0:69:c1:fd:40:55:40:87:d4:5c:0f:b0:c3:20:96:b6:7d:93:
1b:00:63:12:4f:68:7e:9a:53:e2:23:20:ff:7a:81:d2:e4:85:
14:23:56:fe:65:95:aa:34:4a:a9:22:a5:16:ab:51:0d:de:bf:
af:24:72:01:f6:71:a7:8b:10:45:02:47:6e:0f:31:8a:54:c7:
69:5d:44:d6:62:2b:87:fc:03:c9:cf:4f:ed:8a:e4:1b:f4:79:
39:71:cb:35:51:8d:87:d4:60:b4:fd:a8:d7:74:9f:66:6d:61:
e1:65:a8:41:31:7a:eb:c9:e2:df:be:6a:9a:79:f0:21:51:5a:
21:a8:e8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:49 2026 by rpki-client