Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
File: dnmIT2MwtlBg7cQcysDlRtOApQQ.mft (raw, json)
Hash identifier: 3AN+5yKrgHRqxt45B7yHo9Cl4qO6PuSG5MNMnpWtJkg=
Subject key identifier: BA:A7:18:7C:F1:B2:EE:47:2D:62:89:46:56:A6:C9:8F:DB:C8:07:F1
Authority key identifier: 76:79:88:4F:63:30:B6:50:60:ED:C4:1C:CA:C0:E5:46:D3:80:A5:04
Certificate issuer: /CN=7679884f6330b65060edc41ccac0e546d380a504
Certificate serial: 019D378923A6060EE18C36570FC87CCD0DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
Manifest number: 0242
Signing time: Sun 29 Mar 2026 03:00:27 +0000
Manifest this update: Sun 29 Mar 2026 03:00:27 +0000
Manifest next update: Mon 30 Mar 2026 03:00:27 +0000
Files and hashes: 1: MMWaV_EwT3XXaEY4uovqJFOWcj0.roa (hash: yrPylmFzsrZ4DI6lNgXuVhkgMOQp14n/urzO52FiVXM=)
2: dnmIT2MwtlBg7cQcysDlRtOApQQ.crl (hash: Qn3FNc1kuJqY8R0jnpIS4ura2rRUd0nsHw3B1/mOc4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:23:a6:06:0e:e1:8c:36:57:0f:c8:7c:cd:0d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7679884f6330b65060edc41ccac0e546d380a504
Validity
Not Before: Mar 29 03:00:27 2026 GMT
Not After : Mar 30 03:00:27 2026 GMT
Subject: CN=baa7187cf1b2ee472d62894656a6c98fdbc807f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:b4:35:01:a5:25:35:ab:6c:98:61:46:3e:
a8:ed:d4:d0:57:fb:55:72:49:fc:64:04:b5:50:f3:
cc:97:ac:80:ab:7a:0a:30:e0:81:21:ee:7f:88:e7:
22:0e:61:67:aa:e2:73:8d:94:03:21:30:fb:36:9a:
f7:1e:85:61:d1:72:64:9a:99:0c:da:19:31:aa:e6:
c3:ab:fe:a0:12:b0:07:34:b0:32:7c:1f:ae:f0:4c:
b7:c3:e9:97:fb:05:28:4d:87:d5:e7:ce:bf:3d:f4:
7d:53:b4:e0:39:d7:c7:63:09:b3:52:4e:ba:52:8c:
91:71:65:78:eb:64:59:d9:a9:99:f3:5f:0b:49:e3:
96:c6:32:a1:af:30:96:b4:ae:08:2e:e0:a5:e1:e7:
ff:83:68:79:f2:81:4b:53:77:68:7b:88:44:63:ee:
5b:b4:81:ff:09:aa:01:7f:74:00:ac:2a:31:c6:cf:
ea:db:de:ee:c7:6b:b2:e6:b6:3d:18:c5:90:96:22:
0f:ac:c2:b8:39:bc:70:db:5b:58:34:f8:b1:47:db:
55:42:90:bc:98:e4:2f:7c:3f:41:46:36:a1:c4:4f:
d2:ff:0b:e9:5b:57:81:73:0e:38:77:ac:19:89:c6:
d2:77:84:53:56:55:f7:9c:d0:99:3e:75:e7:3b:e2:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A7:18:7C:F1:B2:EE:47:2D:62:89:46:56:A6:C9:8F:DB:C8:07:F1
X509v3 Authority Key Identifier:
keyid:76:79:88:4F:63:30:B6:50:60:ED:C4:1C:CA:C0:E5:46:D3:80:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c3:a3:a2:28:da:b9:e5:bc:0d:db:6e:27:55:6d:23:79:7a:
fe:4f:30:c0:f2:31:8c:dc:25:57:96:cf:b2:66:80:bf:7f:f4:
51:3e:0e:95:97:57:d6:0f:c0:48:1e:2e:62:1f:1d:66:00:98:
c8:c4:85:ce:65:ec:62:0b:06:5b:a7:01:2b:0a:94:7b:12:a8:
6e:f0:16:1d:46:cf:08:f5:9b:e4:8d:b8:84:8a:ea:0e:4c:7b:
60:87:9e:62:99:aa:9c:b3:70:bc:e0:96:5c:be:d1:aa:bf:fa:
25:d2:46:3f:62:2d:a6:91:51:4c:d6:12:e9:51:1a:c0:97:33:
6f:e0:9e:71:d7:68:36:1e:05:6a:dc:4a:af:96:19:f5:ce:8d:
b9:f3:c2:b9:e3:1c:fd:9b:4f:12:e4:a9:94:a3:06:15:d2:f6:
6b:ba:fb:20:c6:7d:26:db:df:a7:f9:0d:24:f0:e7:1a:f7:44:
b0:a6:e2:63:35:73:8b:37:18:65:e2:01:23:85:d4:a2:9a:b8:
d3:0e:b2:bd:3d:f6:de:f1:7b:3a:fd:85:90:66:12:47:fa:82:
cd:95:86:d5:c7:82:2c:52:6e:1e:2d:fc:e8:2b:5d:1e:0c:0a:
66:e0:58:b1:9c:9b:ed:d1:9c:2d:80:09:86:ba:6e:16:6f:0c:
8e:86:f4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:04 2026 by rpki-client