Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
File: DM1NST05HKRGjmEs6RtH8cgoM2I.mft (raw, json)
Hash identifier: WotWUm9aWz43fDPWwPCjW4rtC9PDk5HiUvZ6wtLHMfM=
Subject key identifier: F8:D1:C3:2A:4C:7E:09:2F:F4:DA:3F:0D:42:21:AD:1C:61:34:BF:02
Authority key identifier: 0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
Certificate issuer: /CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Certificate serial: 019F9135702D7BE64812D084B9B0BF2AAEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
Manifest number: 043C
Signing time: Thu 23 Jul 2026 23:00:26 +0000
Manifest this update: Thu 23 Jul 2026 23:00:26 +0000
Manifest next update: Fri 24 Jul 2026 23:00:26 +0000
Files and hashes: 1: DM1NST05HKRGjmEs6RtH8cgoM2I.crl (hash: ctmUIZqHHIc1aOAcjVosiOg/c796l/Nph0DFtHft6QA=)
2: lgJ1dQSseDLjNRTfNLbEfR2AMd0.roa (hash: DrpvieBQ5necGa8UgAY1dX15pTb/xIkr2RXMaR6ga9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:70:2d:7b:e6:48:12:d0:84:b9:b0:bf:2a:ae:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Validity
Not Before: Jul 23 23:00:26 2026 GMT
Not After : Jul 24 23:00:26 2026 GMT
Subject: CN=f8d1c32a4c7e092ff4da3f0d4221ad1c6134bf02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:f3:11:cd:14:d7:df:22:8d:2a:d2:ec:46:
74:d3:f6:35:b2:9e:43:39:b3:87:1c:6f:40:a3:14:
37:29:af:1a:c1:b8:76:6d:00:cb:f5:c4:4b:42:47:
04:8b:81:27:17:0c:eb:f4:d9:f6:9f:d1:f7:1e:67:
a3:98:df:24:76:2c:8f:30:54:7f:18:60:5f:2a:86:
d0:12:47:cd:2b:bf:25:5c:8d:82:30:7a:c7:26:c4:
f1:e2:9d:06:b6:57:6b:ee:25:b9:ac:8f:61:f7:21:
eb:cc:bf:a3:f9:cc:66:28:1f:56:1c:f9:ae:07:9f:
ad:f7:18:0f:32:f6:1c:84:e8:92:40:8d:f9:09:7d:
3a:30:ec:42:bd:46:3a:c3:ed:19:1a:d2:e2:9f:b3:
71:0a:46:84:e9:26:b8:85:82:2c:b3:27:b5:a1:5f:
0e:fe:e5:0f:3a:43:dd:13:82:59:6c:e6:14:11:6c:
98:3c:51:3c:92:93:e7:d4:62:3c:cd:c4:90:d0:13:
49:cd:39:7b:82:04:42:38:85:0b:0e:65:21:cd:67:
28:f9:38:97:36:e1:4e:dd:6e:88:d4:76:c3:f7:30:
23:31:97:c8:25:a5:3d:c4:0c:3b:7c:ab:00:7f:81:
14:dd:4a:13:aa:e0:9a:29:ed:06:26:4b:d0:da:5b:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D1:C3:2A:4C:7E:09:2F:F4:DA:3F:0D:42:21:AD:1C:61:34:BF:02
X509v3 Authority Key Identifier:
keyid:0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2e:d5:26:33:53:9b:33:84:fb:aa:cd:9a:dc:09:25:60:93:
0d:46:85:65:65:37:4e:56:b4:d6:35:d4:cd:dc:84:25:b7:08:
70:90:c9:75:2a:15:72:9c:e1:49:0a:de:1f:8f:96:8f:e0:7b:
d9:b8:e4:05:f5:ac:05:2c:05:13:74:5d:02:78:d3:7f:0b:b5:
6f:8d:e3:21:6a:6f:28:91:23:45:59:c5:d4:ef:19:2d:a8:74:
64:e7:53:8d:2a:c1:cc:a1:f7:07:a5:f6:45:3f:46:bb:bf:01:
c9:14:94:39:d1:5b:5b:ac:61:1e:9a:d0:33:d7:3d:de:99:79:
d0:94:d2:04:a5:b0:8e:bb:34:2b:8e:6e:d7:2a:6b:3b:e1:dd:
a7:06:f3:2e:10:c0:f6:e0:60:b2:1c:61:08:d5:b4:52:37:a4:
31:54:b1:0f:71:a3:b8:e7:c8:58:20:95:20:f9:18:6c:eb:04:
da:a7:79:c0:c3:a7:3b:f0:e6:a2:8c:9e:3d:d4:bc:ac:ee:a9:
4f:91:bb:99:61:9b:06:87:53:db:c1:61:54:75:e8:3c:c7:82:
13:93:05:59:9e:83:2f:b6:1d:55:ab:47:6a:0f:b8:e2:c8:dd:
35:d1:79:c2:ae:85:a0:52:83:ba:10:fb:c2:aa:6c:39:fe:36:
ec:84:0f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:41:26 2026 by rpki-client