Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
File: DM1NST05HKRGjmEs6RtH8cgoM2I.mft (raw, json)
Hash identifier: /3wuPUe3u3ZVUDg5UXRT6cc14iU9iRT2fJb5mrcWTFk=
Subject key identifier: 73:FA:F4:3A:8D:09:C1:2C:94:AA:62:80:6F:77:7D:A4:8B:62:90:EE
Authority key identifier: 0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
Certificate issuer: /CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Certificate serial: 019E1E6CBD99D45916134C92B9DA1098B37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
Manifest number: 037C
Signing time: Tue 12 May 2026 23:01:43 +0000
Manifest this update: Tue 12 May 2026 23:01:43 +0000
Manifest next update: Wed 13 May 2026 23:01:43 +0000
Files and hashes: 1: DM1NST05HKRGjmEs6RtH8cgoM2I.crl (hash: QEpDBlHlumulBFse5gpzcoY6FWw89ogTgjRZ93/xo0w=)
2: lgJ1dQSseDLjNRTfNLbEfR2AMd0.roa (hash: DrpvieBQ5necGa8UgAY1dX15pTb/xIkr2RXMaR6ga9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:bd:99:d4:59:16:13:4c:92:b9:da:10:98:b3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Validity
Not Before: May 12 23:01:43 2026 GMT
Not After : May 13 23:01:43 2026 GMT
Subject: CN=73faf43a8d09c12c94aa62806f777da48b6290ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:79:83:3b:9d:aa:43:9d:3c:5c:76:98:ec:
cd:89:d2:f5:90:53:4b:c1:67:3f:a8:8c:15:ee:72:
7b:8f:31:df:af:12:22:a5:fb:30:6e:a4:c3:0b:52:
9b:71:30:d5:45:c1:cd:a8:b7:78:61:2a:4e:49:84:
ba:aa:30:c1:69:66:38:71:9c:95:16:66:65:02:38:
59:c1:27:c2:e2:4c:14:d6:e2:b9:5b:cd:c0:c3:a0:
80:be:0e:0a:18:b0:5f:65:9e:5a:cc:3b:11:d7:ae:
2b:61:9a:93:3b:0a:36:30:15:a0:99:f3:4c:13:83:
7a:f5:f2:d0:a5:bd:5e:41:90:01:c2:f2:94:0c:2e:
5b:c5:98:06:c8:bb:a3:a2:51:62:41:20:51:7d:e4:
dd:8c:a2:a0:f7:6f:db:ea:25:07:87:d0:2a:3b:17:
50:e1:19:c8:60:ce:dd:7e:71:bd:9d:69:ea:6e:21:
1a:f9:e2:42:2c:2d:ad:7f:62:7e:77:ed:32:7f:9c:
7f:3d:a2:64:d3:b9:1e:80:67:12:3b:86:57:16:46:
b9:8d:7b:9e:af:4f:bf:5b:aa:59:0a:61:59:ac:9a:
83:f0:49:1d:3b:be:f5:cb:b2:7d:d7:73:ce:c3:63:
4b:97:94:e6:54:b7:8e:4e:58:c6:64:ab:d1:df:91:
aa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FA:F4:3A:8D:09:C1:2C:94:AA:62:80:6F:77:7D:A4:8B:62:90:EE
X509v3 Authority Key Identifier:
keyid:0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a9:ea:8f:d5:d9:14:9c:f6:0c:0a:10:93:18:b7:b8:3b:20:
82:a8:2c:7b:6c:89:5e:74:94:25:6d:99:b9:13:f4:8b:47:8d:
ca:bd:ed:c5:53:c8:75:7a:68:41:24:8f:92:d7:27:de:2c:65:
96:16:7c:c1:29:14:1b:db:95:83:04:ff:5f:b9:46:d5:3a:c5:
d3:ea:48:67:a2:47:cf:e0:5f:0c:e6:c4:92:e9:a1:25:c2:80:
59:a3:6e:5c:fd:bc:34:a4:d1:72:73:9c:28:0b:5e:6d:a6:e3:
6f:68:fb:e8:20:80:6b:70:3a:01:53:e0:f1:06:8d:07:c0:97:
1c:3c:eb:35:cb:c6:87:b4:83:5a:cb:92:ca:68:45:96:9b:4f:
6c:92:78:1e:b9:36:93:39:b2:36:1f:6b:8e:a8:3c:6e:d5:bd:
aa:7d:25:80:77:e6:0c:3d:be:20:3b:b1:81:99:68:57:57:c4:
36:b6:af:4e:da:89:1f:c8:99:92:56:ae:17:6b:c4:4c:36:d1:
c7:8a:71:e1:eb:14:62:11:04:b2:9c:b5:40:e7:d9:04:e8:13:
a8:51:a3:2f:56:c9:a2:31:2b:c0:25:58:17:dd:f6:b7:cd:83:
cb:6f:0a:af:f3:c9:78:ce:27:6d:3f:89:fa:fc:b8:d5:82:1b:
00:24:a0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:28:55 2026 by rpki-client